HIMA HIQuad X Series Safety Programmable Electronic System (PES)

HIMA HIQuad X Series Safety Programmable Electronic System (PES)

HIQuad X is an innovative high-performance safety programmable electronic system launched by HIMA, developed based on the mature HIQuad system. The system adopts a modular design and is programmed, configured, monitored, operated, and document managed through the validated programming tool SILworX of HIMA, ensuring the future compatibility of all HIMA programmable systems. HIQuad X supports existing HIQuad I/O modules to protect users' upfront investments.

The HIQuad X system consists of two major system families: H51X and H41X, which can use the same modules but have structural differences. The H51X system consists of a basic rack (excluding I/O modules) and up to 16 expansion racks, supporting up to 256 I/O modules; The H41X system consists of a basic rack (up to 12 I/O modules) and an expansion rack, supporting up to 28 I/O modules. This flexible structural design enables HIQuad X to adapt to various safety control application requirements ranging from small to large.

System Concept and Security Architecture

2.1 Security and usability design

The HIQuad X system is designed for safety related applications up to SIL 3 level, compliant with the IEC 61508 standard, and can be used for both "power-off trip" and "power on trip" safety principles simultaneously. The basic rack must be equipped with a safety related processor module F-CPU 01, which uses a 1002 processor system and includes two microprocessors that continuously align data to ensure that a single processor failure does not result in the failure of safety functions.

The security signal processing path of the system is as follows:

Input module security records sensor measurement values

Exchange data between I/O processing module and processor module

The processor module cyclically queries the measurement values and processes them by the user program

The processing results are written into the output module through the I/O processing module, controlling the on-site actuators

2.2 H51X System Architecture

The H51X system adopts a modular structure, including one H51X basic rack and up to 16 expansion racks. The basic rack can be configured as follows:

2 processor module slots

Up to 10 communication modules

The expansion rack is connected through the RJ-45 system bus interface at the rear

Single system operation: Only use the processor module for signal processing in slot 8 (system bus A). If the system bus connection is interrupted, all I/O modules after the interruption point will no longer be available, and the output modules will enter a safe power-off state.

Redundant system operation: using two processor modules and two system buses significantly improves system availability. When a processor module fails, it automatically enters a safe state, and redundant processor modules maintain safe operation. The faulty processor module can be replaced during system operation.

2.3 H41X System Architecture

The H41X system includes a H41X base rack and an optional expansion rack for creating redundant I/O structures. Basic rack configurable:

2 processor module slots

Up to 2 communication modules

The I/O processing module F-IOP 01 is located in slot 13, connecting the I/O bus and the system bus

Single system operation: Only use the processor module for signal processing in slot 16 (system bus A). The expansion rack can be connected to system bus A through I/O processing modules.

Redundant system operation: using two processor modules and two system buses significantly improves availability. The expansion rack is connected to system buses A and B through I/O processing modules.

2.4 Expansion Rack

The expansion rack F-BASE RACK 11 allows the HIQuad X system to be equipped with up to 265 I/O modules. Each expansion rack can accommodate up to 16 I/O modules (slots 1-16). The I/O processing module F-IOP 01 is used to connect the system bus and the I/O bus. The power distribution module F 7133 is used for fusing and distributing L+and L - of I/O modules, with fuse monitoring function, indicating fuse faults through contacts and LEDs.

Core module functions

3.1 F-CPU 01 processor module

The processor module contains the CPU operating system and controls multiple user programs running in the module. The main tasks include:

Control the loop running of user programs

Self testing of executing modules

Control safety related communication through SafeEthernet

Redundancy (synchronization) of management processor modules

Operating system status:

LOCKED: Processor module reset to factory settings

STOP/VALID CONFIGURATION: Processor stopped, valid configuration in memory

STOP/INVALID CONFIGURATION: Processor stopped, no valid configuration in memory

RUN: The user program is running

RUN/UP STOP: User program not running, used for testing input/output and communication

3.2 F-IOP 01 I/O Processing Module

The I/O processing module manages the I/O bus of the H41X basic rack and expansion rack, used to exchange process data between I/O modules and I/O processing modules. The main tasks include:

Exchange data with processor modules through system bus A and system bus B