HIMA HIQuad X Series Safety Programmable Electronic System (PES)

Provide watchdog signal to the output module

3.3 F-COM 01 Communication Module

The communication module is equipped with 2 Ethernet interfaces and 1 fieldbus interface, allowing the HIQuad X system to communicate with external systems. This module is approved for use in safety related HIQuad X systems and can transmit safety related protocols.

3.4 I/O module

HIQuad X supports multiple digital and analog I/O modules, including:

Digital input modules: F 3221, F 3224A, F 3236, F 3237, F 3238, F 3240, F 3248

Digital output modules: F 3322, F 3325, F 3330, F 3331, F 3333, F 3334, F 3335, F 3349, F 3422, F 3430

Counter module: F 5220

Analog input modules: F 6215, F 6217, F 6220, F 6221

Analog output module: F 6705, F 6707

System bus and communication

4.1 System Bus

The HIQuad X system is based on redundant system buses A and B. Each system bus is controlled by a processor module in the base rack. During redundant operation, two system buses communicate simultaneously. The system bus connects the RJ-45 interface and I/O processing module at the rear of the basic rack. The maximum distance between two system bus users is 50 meters.

Important precautions:

Do not interconnect the system bus of multiple HIQuad X systems

The system bus connector shall not be used as a regular Ethernet connection

It is necessary to use jumper cables that comply with the industrial standard Cat. 5e or better

4.2 I/O bus

All I/O modules are connected to the I/O processing module through the I/O bus. The I/O processing modules in the H41X basic rack (slot 13) and expansion rack (slot 17) connect the I/O bus to the system bus.

4.3 I/O watchdog

The safety related system requires a second independent shutdown option, which is ensured by the I/O watchdog signal. The I/O processing module controls, monitors, and applies I/O watchdog signals to the output module. The output module only operates when the watchdog signal is present (high level). If the I/O watchdog signal is turned off, the output module safely enters a power-off state.

4.4 Noise Suppression

The noise suppression function can suppress transient interference and improve system availability. Noise suppression can be activated for I/O modules. If interference is suppressed, the system automatically processes the last valid input and output values. The time for suppressing interference is limited by safety time, watchdog time, and cycle time.

Formula for calculating the maximum noise suppression time:

text

Maximum noise suppression time=safe time - (2 x watchdog time)

Redundant design

The conceptual design of the HIQuad X system is characterized by high availability, and all system components can operate redundantly. Redundant systems only improve system availability, but do not increase their security integrity level.

5.1 Redundancy of processor modules

The HIQuad X system can be configured as a single system with only one processor module, or as a high availability redundant system with two redundant processor modules.

Reduce redundancy: If one of the processor modules is unavailable, the system continues to operate safely.

Add redundancy: If a new processor module is added to the running HIQuad X system, it will automatically synchronize with the configuration of the existing processor module. Requirements: User program redundancy configuration, unused redundant processor module slots, and at least one system bus running.

5.2 I/O module redundancy

Module redundancy: Two I/O modules of the same type can be combined into a redundant group in the SILworX hardware editor and must be inserted into different racks

Channel redundancy: Only channels with the same channel number can be defined as redundant channels

5.3 System bus redundancy

The HIQuad X system can operate using redundant system buses A and B. Redundant operation requirements: Each basic rack uses 2 processor modules, corresponding configurations in programming tools, and rack connections are correct.

5.4 Communication redundancy

The redundant configuration of safeEthernet communication connections is completed in the SILworX safeEthernet editor.

Programming and Variable Management

6.1 Variable Types and Initial Values

SILworX supports multiple variable types, including VAR, VAR_GLOBAL, VAR-INPUT, VAR-OUTPUT, and more. An initial value can be assigned to any variable, and the variable will use this value when no other values are assigned.

HIMA recommends assigning safe values as initial values to all variables that receive values from physical inputs or communications! The default value for variables that have not been assigned an initial value is 0 or False (for BOOL type variables).

6.2 System Variables and System Parameters

System variables are predefined variables used in user programs to handle HIQuad X system properties or states. System parameters are used to configure the properties of the controller.

Resource system parameters (partial):

System ID [SRS]: System ID, a unique value in the network

Safety Time [ms]: Safety time, range 20-22500 ms

Watchdog Time [ms]: Watchdog time, range 6-7500 ms

AutoStart: Does the user program automatically start when connected to the power supply

Global Forcing allowed: Is global forcing allowed