System core positioning and security standards
1. Product positioning
HIMax is a safety related controller system for the process and factory automation industry, suitable for scenarios such as process controllers, protection systems, burner systems, machine controllers, etc. It supports continuous operation and high availability requirements, can be adapted to different application scenarios through modular combinations, and can be flexibly expanded to meet the upgrading needs of future control processes.
2. Security certification level
Compliant with IEC 61508 standard, supporting up to SIL 3 safety integrity level
Compliant with EN 954-1 standard, reaching Category 4 level
Compliant with ISO 13849-1 standard, performance level e
The model with analog input is certified for use in fire alarm systems and complies with DIN EN 54-2 and NFPA 72 standards
3. Core design principles
De Energize to Trip: The safety function can be executed without the need for a power supply, and the input and output signals enter a power-off safety state in case of a fault
Energize to Trip: A power source (electrical or pneumatic) is required to perform safety functions, and the design must comply with application standards (such as input/output line diagnosis)
System hardware composition and structure
1. Base Plates
(1) Substrate type and specifications
Installation scenario of substrate model and slot number
X-BASE PLATE 10 01 10 Tablet Installation (such as installation board)
X-BASE PLATE 15 01 15 Backboard Installation
X-BASE PLAYE 15 02 15 19 inch installation
X-BASE PLATE 18 01 18 Backboard Installation
(2) Core Features
Minimum configuration: At least 1 substrate (rack ID 0), including at least 1 processor module
Scalability: Substrate 0 can expand up to 15 expansion substrates, for a total of 16 substrates
Slot allocation: 1-2 slots are reserved for the system bus module, and the remaining slots are used for other modules (subject to processor module installation restrictions)
Ventilation requirements: Blank modules should be inserted into unused slots to ensure ventilation effectiveness
2. Module types and functions
(1) Processor module
Installation restriction: Up to 4, can only be installed in slots 3-6 of rack 0 and slots 3-4 of rack 1, and some slots cannot be installed simultaneously (such as slot 5 of rack 0 and slot 4 of rack 1)
Core functions: Run user programs, perform module self testing, manage security related communication, collaborate with other processor modules to achieve redundancy
Power monitoring: Real time monitoring of 24VDC power supply voltage, voltage level can be viewed through SILworX tool
(2) I/O module
Types include: digital input/output, analog input/output, counter input module
Redundancy support: Supports 2-3 module redundancy and channel redundancy, with channels of the same number defined as redundant channels
Special function: Some modules support sequence of events (SOE) recording, and the analog input module can convert measured current to raw value (1mA corresponds to 10000) or process value (REAL type)
(3) System bus module
Functional positioning: Manage system bus A/B, slot 1 of rack 1 corresponds to system bus A, and slot 2 corresponds to system bus B
Connection requirements: When inserting one module into a single substrate, only a single bus is available. When inserting two modules, dual buses communicate simultaneously
Identification method: Identified through the System. Rack. Plot (SRS) parameter, System range 1-65535, Rack range 0-15, Slot range 1-18
(4) Communication module
Supporting protocols: SafeEthernet (safety related), Modbus, PROFIBUS and other standard protocols
Extension function: Supports ComUserTask (CUT), which can be used to write loop running programs in C language to implement custom communication protocols (non security related)
Licensing requirements: Standard agreements and CUT require long-term valid licenses, while some agreements require software activation codes
3. System bus and connections
(1) Bus characteristics
Redundant design: Dual redundant system bus (A/B), based on Ethernet technology, with electrical isolation between modules and buses, and insulation voltage of at least 1500V
Cable requirements: Copper cables should use Cat.5 (≤ 100Mbit/s) or Cat.6 (1Gbit/s) twisted pair Ethernet jumpers, support automatic crossover, and the system bus module PADT interface only supports crossover cables
Expansion capability: The maximum length of copper cable is 100m, the maximum length of fiber optic expansion is 19.6km (when processor modules are centralized), and the maximum spacing between processor modules is 1.8km when they are dispersed
(2) Substrate interconnection
Connection method: Connected through RJ-45 interface, the UP interface of the substrate is docked with the DOWN interface of the next substrate, and bus A/B cross connection is prohibited
Rack ID allocation: Based on substrate 0, the UP interface expansion substrate has odd IDs (1-15), and the DOWN interface expansion substrate has even IDs (2-14)
4. Power system
Power supply requirements: 24VDC (voltage range 19.2-30V), must comply with PELV or SELV standards, UL specifications allow maximum 150V, 10kVA adjustable power supply
Email:wang@kongjiangauto.com