SF_Guard block

Function block

This function block monitors the respective protective equipment. There are 2 independent input parameters for 2 switches on the protective equipment coupled with a time difference ( DiscrepancyTime ) for closing the protective equipment.

images/download/attachments/521703470/_sf_guard1-version-1-modificationdate-1686128223151-api-v2.png

Interface

I/O

Name

Data type

Initial value

Description

IN

Activate

BOOL

FALSE

see General parameters

IN

S_GuardSwitch1

SAFEBOOL

SAFEFALSE

Variable. Input circuit breaker 1.

SAFEFALSE: Protective equipment open.

SAFETRUE: Protective equipment closed.

IN

S_GuardSwitch2

SAFEBOOL

SAFEFALSE

Variable. Input circuit breaker 2.

SAFEFALSE: Protective equipment open.

SAFETRUE: Protective equipment closed.

IN

DiscrepancyTime

TIME

#0ms

Constant. Configures the monitored synchronous time between S_GuardSwitch1 and S_GuardSwitch2.

IN

S_StartReset

SAFEBOOL

SAFEFALSE

see General parameters

IN

S_AutoReset

SAFEBOOL

SAFEFALSE

see General parameters

IN

Reset

BOOL

FALSE

see General parameters

OUT

Ready

BOOL

FALSE

see General parameters

OUT

S_GuardOut

SAFEBOOL

SAFEFALSE

Output indicates the closed protective equipment and the protected area monitored.

SAFEFALSE: Protective equipment open.

SAFETRUE: Both S_GuardSwitches are SAFETRUE, no error and confirmation. Protective equipment closed.

OUT

SafetyDemand

BOOL

FALSE

see General parameters

OUT

ResetRequest

BOOL

FALSE

see General parameters

OUT

Error

BOOL

FALSE

see General parameters

OUT

DiagCode

WORD

16#0000

see General parameters

Function description

Function block SF_Guard is used to support function "protective equipment without guard locking" (safety gate monitoring) in an application.

This function block is a safety-related function block for monitoring protective equipment with a 2-stage interlocking device.

Opening the protective equipment

If the protective equipment properly connected to the function block is opened, the function block sets enable output S_Guard to SAFEFALSE (safe state).

Closing the protective equipment

If opened protective equipment in the application is closed, the function block can optionally (see Start interlock ) ensure within the safe control system that the release signal is not set to SAFETRUE solely by this closing. This requires another manual action on input parameter Reset (see Start interlock ).

Interlocking device

The function block fully supports a 2-stage interlocking device.

On a 3-stage interlocking device, the function block supports the transition from the second to the third stage and back again. On a 4-stage interlocking device, the function block supports the transition from the third to the fourth stage and back again. All other stages must be implemented in the safety application.

Guard locking device

The protective equipment's guard locking device should be programmed in a separate safety function block or in the safety application since this function block simply grants or revokes its approval. Maintaining the approval in conjunction with the guard locking device and standstill monitoring must be viewed in close connection with the safety application.

Application with 1 position switch

1 position switch (1-channel)

If 1 position switch (1-channel) is used in the protective equipment, the signal must be connected to the function block input parameter S_GuardSwitch1 over a safe input device. In addition, a graphic connection between both input parameters ("S_GuardSwitch1" and "S_GuardSwitch2") must be established in the safety application. This allows both signal inputs to be controlled by the same signal.

The function block enable output is only set to SAFETRUE if both input parameters (S_GuardSwitch1 and S_GuardSwitch2) indicate state SAFETRUE and the remaining input signal combination is valid for this as well.

1 position switch (2-channel)

If 1 position switch (2-channel) is used in the protective equipment, the signals must be connected to a safe input device individually. In the safety application, the signals of the position switch must be checked for dual-channel redundancy (e.g. using safe devices or other function blocks such as SF_Antivalent of SF_Equivalent). The signal resulting from this check be connected to function block input parameter "S_GuardSwitch1". In addition, a graphic connection between both input parameters ("S_GuardSwitch1" and "S_GuardSwitch2") must be established in the safety application. This allows both signal inputs to be controlled by the same signal.

The function block enable output is only set to SAFETRUE if both input parameters (S_GuardSwitch1 and S_GuardSwitch2) indicate state SAFETRUE and the remaining input signal combination is valid for this as well.

Application with 2 position switches

2 position switches (1-channel)

If 2 position switches (1-channel) are used in the protective equipment, the signals must be connected to one or more safe input devices individually. One of these signals must be connected to input parameter S_GuardSwitch1 of the function block. The other signal must be connected to the second function block input parameter S_GuardSwitch2.

The function block enable output is only set to SAFETRUE if both input parameters (S_GuardSwitch1 and S_GuardSwitch2) indicate state SAFETRUE and the remaining input signal combination is valid for this as well.

2 position switches (2-channel)

If 2 position switches (2-channel) are used in the protective equipment, the 4 signals must be connected to one or more safe input devices individually. In the safety application, each signal of the position switch must be checked for dual-channel redundancy (e.g. using safe devices or other function blocks such as SF_Antivalent of SF_Equivalent). A signal must result from this check for each of the 2 position switches. One of these signals must be connected to input parameter S_GuardSwitch1 of the function block. The other signal must be connected to the second function block input parameter S_GuardSwitch2.

The function block enable output is only set to SAFETRUE if both input parameters (S_GuardSwitch1 and S_GuardSwitch2) indicate state SAFETRUE and the remaining input signal combination is valid for this as well.

Quantity and layout of supported position switches

The function block supports protective equipment with 1 or 2 mechanical or non-mechanical position switches. Depending on the CAT or SIL requirements, 1-channel or 2-channel position switches with equivalent or antivalent arrangement of switching contacts are required.

The function block processes one signal per position switch, which results from checking the dual-channel redundancy on 2-channel position switches.

The function block does not monitor the dual-channel redundancy (line control) or equivalence/antivalence of the signals. This monitoring must be implemented in the safety application using safe devices or other function blocks (SF_Antivalent or SF_Equivalent), for example.

Additional information

Typical timing diagrams

images/download/attachments/521703494/sf_guardzeitdiagramm1_EN-version-1-modificationdate-1695291671953-api-v2.png

1) Start

2) Wait

3) Normal operation

4) Error

images/download/attachments/521703518/sf_guardzeitdiagramm2_EN-version-1-modificationdate-1695291679848-api-v2.png

1) Normal operation

2) Error

Error detection

External signals: SAFEBOOL inputs provide inherent error detection. The mechanical structure combines the opening and closing switch according to EN 954 (protective equipment with two switches). Discrepancy-time monitoring for time delay between the reaction of both mechanical switches according to EN 954 (considered as "application fault" detection, i.e. generated by the application).

An error is detected if the time delay between the first input S_GuardSwitch1/S_GuardSwitch2 and the second is greater than the value for input DiscrepancyTime. The output Error is set to TRUE.

The function block detects a static TRUE signal on input Reset.

Error behavior

Output S_GuardOut is set to FALSE . If the two inputs S_GuardSwitch1 and S_Guardswitch2 are bridged, no error is detected. Input Reset must be set to FALSE to exit the error state Reset . To leave the discrepancy time errors, inputs S_GuardSwitch1 and S_GuardSwitch2 must both be set to FALSE .

Error and status messages

Function block specific error codes

DiagCode

Name

Description and output settings

C001

Reset error

Static reset detected in status 8402.

Ready = TRUE

S_GuardOut = SAFEFALSE

SafetyDemand = FALSE

ResetRequest = FALSE

Error = TRUE

C010

Discrepancy time error 1

Discrepancy time in state 8806 has expired.

Ready = TRUE

S_GuardOut = SAFEFALSE

SafetyDemand = FALSE

ResetRequest = FALSE

Error = TRUE

C020

Discrepancy time error 2

Discrepancy time in state 8808 has expired.

Ready = TRUE

S_GuardOut = SAFEFALSE

SafetyDemand = FALSE

ResetRequest = FALSE

Error = TRUE

Function block-specific status codes (no error)

DiagCode

Name

Description and output settings

0000

Idle

Function block is not active (initial state).

Ready = FALSE

S_GuardOut = SAFEFALSE

SafetyDemand = FALSE

ResetRequest = FALSE

Error = FALSE

8000

Normal

Protective equipment closed and safe state confirmed.

Ready = TRUE

S_GuardOut = SAFETRUE

SafetyDemand = FALSE

ResetRequest = FALSE

Error = FALSE

8001

Init

Function block has been enabled.

Ready = TRUE

S_GuardOut = SAFEFALSE

SafetyDemand = FALSE

ResetRequest = FALSE

Error = FALSE

8802

Open guard request.

Complete switching sequence required.

Ready = TRUE

S_GuardOut = SAFEFALSE

SafetyDemand = TRUE

ResetRequest = FALSE

Error = FALSE

8402

Wait for Reset

Waiting for rising trigger in reset.

Ready = TRUE

S_GuardOut = SAFEFALSE

SafetyDemand = FALSE

ResetRequest = TRUE

Error = FALSE

8804

Guard opened

Guard completely open.

Ready = TRUE

S_GuardOut = SAFEFALSE

SafetyDemand = TRUE

ResetRequest = FALSE

Error = FALSE

8806

Wait for GuardSwitch2

S_GuardSwitch1 was switched to TRUE - Waiting for S_GuardSwitch2; discrepancy timer started.

Ready = TRUE

S_GuardOut = SAFEFALSE

SafetyDemand = TRUE

ResetRequest = FALSE

Error = FALSE

8808

Wait for GuardSwitch1

S_GuardSwitch2 was switched to TRUE - Waiting for S_GuardSwitch1; discrepancy timer started.

Ready = TRUE

S_GuardOut = SAFEFALSE

SafetyDemand = TRUE

ResetRequest = FALSE

Error = FALSE

8002

Guard closed

Guard closed. Wait for resetif S_AutoReset = FALSE.

Ready = TRUE

S_GuardOut = SAFEFALSE

SafetyDemand = FALSE

ResetRequest = FALSE

Error = FALSE