44
OPERATING INSTRUCTIONS Safeguard Detector Functional safety system

Functional safety system - LC Automation

  • Upload
    others

  • View
    1

  • Download
    0

Embed Size (px)

Citation preview

Page 1: Functional safety system - LC Automation

O P E R A T I N G I N S T R U C T I O N S

Safeguard DetectorFunctional safety system

Page 2: Functional safety system - LC Automation

Described product

Safeguard Detector – functional safety system

Manufacturer

SICK AGErwin-Sick-Str. 179183 WaldkirchGermany

Legal information

This work is protected by copyright. Any rights derived from the copyright shall bereserved for SICK AG. Reproduction of this document or parts of this document is onlypermissible within the limits of the legal determination of Copyright Law. Any modifica‐tion, abridgment or translation of this document is prohibited without the express writ‐ten permission of SICK AG.

The trademarks stated in this document are the property of their respective owner.

© SICK AG. All rights reserved.

Original document

This document is an original document of SICK AG.

2 O P E R A T I N G I N S T R U C T I O N S | Safeguard Detector 8019465/2016-03-10 | SICKSubject to change without notice

Page 3: Functional safety system - LC Automation

Contents

1 About this document........................................................................ 51.1 Function of this document....................................................................... 51.2 Scope......................................................................................................... 51.3 Target groups and structure of these operating instructions................ 51.4 Further information................................................................................... 5

1.4.1 Example projects..................................................................... 61.5 Symbols and document conventions...................................................... 6

2 Safety information............................................................................ 82.1 General safety notes................................................................................. 82.2 Intended use............................................................................................. 82.3 Requirements for the qualification of personnel.................................... 9

3 Product description........................................................................... 103.1 Application description............................................................................. 103.2 Safety function.......................................................................................... 113.3 Safe state.................................................................................................. 113.4 System components................................................................................. 12

4 Project planning................................................................................ 144.1 Security...................................................................................................... 144.2 Prerequisites............................................................................................. 144.3 Setup location........................................................................................... 154.4 Response time.......................................................................................... 154.5 Integrating into the electrical control...................................................... 154.6 Testing plan............................................................................................... 15

4.6.1 Recommendations for regular checks................................... 164.6.2 Carrying out thorough checks................................................. 16

5 Mounting............................................................................................. 185.1 Placing the sensors.................................................................................. 185.2 Mounting the sensors............................................................................... 19

6 Electrical installation........................................................................ 206.1 Security...................................................................................................... 206.2 Wiring notes.............................................................................................. 206.3 Interfaces.................................................................................................. 21

7 Configuration..................................................................................... 227.1 Safety......................................................................................................... 227.2 Positioning and aligning the sensors...................................................... 227.3 Configuration software............................................................................. 227.4 Application logic........................................................................................ 22

8 Commissioning.................................................................................. 26

CONTENTS

8019465/2016-03-10 | SICK O P E R A T I N G I N S T R U C T I O N S | Safeguard Detector 3Subject to change without notice

Page 4: Functional safety system - LC Automation

8.1 Validation................................................................................................... 26

9 Repair.................................................................................................. 289.1 Regular thorough check........................................................................... 28

10 Troubleshooting................................................................................. 29

11 Disposal.............................................................................................. 30

12 Technical data.................................................................................... 3112.1 Safety-related parameters....................................................................... 3112.2 General sensor data................................................................................. 3112.3 Sensor dimensional drawing.................................................................... 32

13 Ordering information........................................................................ 3313.1 Ordering information for the Safeguard Detector application package 3313.2 Ordering information for accessories...................................................... 34

14 Annex.................................................................................................. 3514.1 Compliance with EU directives................................................................. 3514.2 Checklist for initial commissioning and commissioning........................ 36

15 Glossary.............................................................................................. 37

16 List of figures..................................................................................... 39

17 List of tables....................................................................................... 40

CONTENTS

4 O P E R A T I N G I N S T R U C T I O N S | Safeguard Detector 8019465/2016-03-10 | SICKSubject to change without notice

Page 5: Functional safety system - LC Automation

1 About this document

1.1 Function of this document

These operating instructions contain the information needed during the life cycle of theSafeguard Detector application package. This document describes:

• The system components• The project planning• The mounting and electrical installation• The configuration• The necessary thorough checks• The commissioning• The maintenance• The troubleshooting• The dismantling and disposal

1.2 Scope

These operating instructions are included with SICK part number 8019464 (all availa‐ble languages of this document).

Furthermore, the following documents also contain information about individual compo‐nents of the Safeguard Detector application package:

Document Title Part number

Operating instructions Flexi Soft modular safety con‐troller hardware

8012999

Operating instructions Flexi Soft in the Flexi SoftDesigner software

8012998

Table 1: Underlying operating instructions

NOTICEThe operating instructions of the individual components apply. These operating instruc‐tions contain requirements that have priority. If the operating instructions of the compo‐nents contradict these operating instructions, the information given in these operatinginstructions apply.All operating instructions must be made available to all people who work with the appli‐cation package.Please read all operating instructions carefully and make sure that you understand thecontent fully before working with the Safeguard Detector application package.

1.3 Target groups and structure of these operating instructions

These operating instructions are intended for the following target groups: project devel‐opers (planners, developers, designers), installers, electricians, operators, and mainte‐nance personnel.

The structure of these operating instructions is based on the life cycle phases of theapplication: project planning, mounting, electrical installation, commissioning, opera‐tion, and maintenance.

1.4 Further information

www.sick.com

The following information is available via the Internet:

ABOUT THIS DOCUMENT 1

8019465/2016-03-10 | SICK O P E R A T I N G I N S T R U C T I O N S | Safeguard Detector 5Subject to change without notice

Page 6: Functional safety system - LC Automation

■ Other language versions of these operating instructions■ Viewable and printable Flexi Soft operating instructions in different languages■ The Flexi Soft Designer configuration software■ Pre-configured project files for both sensor variants (2 Hz and 10 Hz)■ Downloadable example applications■ Guide for Safe Machinery (“Six steps to a safe machine”)■ Type examination by TÜV Süd

1.4.1 Example projects

Example projects are available for this application package for the Flexi Soft Designerconfiguration software. These are based on the components of the Safeguard Detectorapplication package.

The example projects can be downloaded at www.sick.com/Safeguard_Detector .

WARNINGThe example projects are solely application examples for a safety function for fulfillingmachine safety. They can be used as a foundation for programming a specific safetyapplication of a machine, but qualified safety personnel must first make adjustments inline with the specific safety requirements. The project planning software in the exampleprojects does not satisfy the safety requirements for your application without additionalprogramming.

The example projects have been tested and comply with the description of this docu‐ment.

Sensor variant Language Configuration checksum

2 Hz DE 0x4F8C33B9

10 Hz DE 0x41372A36

2 Hz EN 0x4F8C33B9

10 Hz EN 0xB27A2512

Table 2: Available example projects

Use of example projects see "Application logic", page 22.

1.5 Symbols and document conventions

The following symbols and conventions are used in this document:

Safety notes and other notes

DANGERIndicates a situation presenting imminent danger, which will lead to death or seriousinjuries if not prevented.

WARNINGIndicates a situation presenting possible danger, which may lead to death or seriousinjuries if not prevented.

CAUTIONIndicates a situation presenting possible danger, which may lead to moderate or minorinjuries if not prevented.

1 ABOUT THIS DOCUMENT

6 O P E R A T I N G I N S T R U C T I O N S | Safeguard Detector 8019465/2016-03-10 | SICKSubject to change without notice

Page 7: Functional safety system - LC Automation

NOTICEIndicates a situation presenting possible danger, which may lead to property damage ifnot prevented.

NOTEIndicates useful tips and recommendations.

Instructions to action

b The arrow denotes instructions to action.

1. The sequence of instructions for action is numbered.2. Follow the order in which the numbered instructions are given.

ABOUT THIS DOCUMENT 1

8019465/2016-03-10 | SICK O P E R A T I N G I N S T R U C T I O N S | Safeguard Detector 7Subject to change without notice

Page 8: Functional safety system - LC Automation

2 Safety information

This chapter contains general safety information about the Safeguard Detector applica‐tion package. Further information about specific product use situations can be found inthe relevant chapters.

DANGERWhen using the Safeguard Detector application package, please also follow the safetynotes in the underlying operating instructions.

2.1 General safety notes

DANGERHazard due to lack of effectiveness of the protective deviceIt is possible for people to interrupt the hazardous area when the machine is running.

b Follow all safety notes in this document.b The sensors are not safety components according to the EU Machinery Directive.b Only qualified safety personnel are permitted to perform connection, mounting,

and configuration work see "Requirements for the qualification of personnel",page 9.see "Requirements for the qualification of personnel", page 9.

b Read the operating instructions before commissioning.b Protect the devices from moisture and contamination.

2.2 Intended use

MultiPulse photoelectric proximity sensor

The MultiPulse photoelectric proximity sensor (hereinafter referred to as “sensor”) is anopto-electronic photoelectric proximity sensor with background suppression and is usedfor the optical, non-contact detection of objects. If the product is used for any other pur‐pose or modified in any way, any warranty claim against SICK AG shall become void.

Safeguard Detector application package

The Safeguard Detector Core application package is used on machines with materialtransportation systems, such as a carton magazine on a packaging machine, to preventthe risk of people getting injured by the empty material transportation system in theevent of interrupting the machine.

Overall, sensors and safety controllers are certified as a “logic unit for fulfilling a safetyfunction” according to the Machinery Directive, Annex IV, Item 21 and can be used forsafety-related tasks following these operating instructions.

The Safeguard Detector application package fulfills the requirements for a PDDB inaccordance with EN 60947-5-3.

The degree of risk corresponds to performance level d according to EN ISO 13849-1and EN 60947-5-3, as well as SILCL2 according to EN 62061.

UL applications

The following must be observed for UL applications:• Only for use in applications in accordance with NFPA 79• The devices must be fused with a 1 A fuse that is suitable for 30 V DC• UL-listed adapters with connecting cables are available• The enclosure rating corresponds to UL enclosure type 1

2 SAFETY INFORMATION

8 O P E R A T I N G I N S T R U C T I O N S | Safeguard Detector 8019465/2016-03-10 | SICKSubject to change without notice

Page 9: Functional safety system - LC Automation

2.3 Requirements for the qualification of personnel

The Safeguard Detector application package must be configured, mounted, connected,commissioned, and serviced by qualified safety personnel only.

Project planning

For project planning, a person is considered qualified when he/she has expertise andexperience in the selection and use of protective devices on machines and is familiarwith the relevant technical rules and national work safety regulations.

Mechanical mounting and commissioning

For mechanical mounting and commissioning, a person is considered qualified whenhe/she has the expertise and experience in the relevant field and is sufficiently familiarwith the application of the protective device on the machine to be able to assesswhether it is in an operationally safe state.

Electrical installation and validation

For electrical installation and commissioning, a person is considered qualified whenhe/she has the expertise and experience in the relevant field and is sufficiently familiarwith the application of the protective device on the machine to be able to assesswhether it is in an operationally safe state.

Configuration

For configuration, a person is considered qualified when he/she has the expertise andexperience in the relevant field and is sufficiently familiar with the application of theprotective device on the machine to be able to assess whether it is in an operationallysafe state.

Operation and maintenance

For operation and maintenance, a person is considered qualified when he/she has theexpertise and experience in the relevant field and is sufficiently familiar with the appli‐cation of the protective device on the machine and has been instructed by the user ofthe machine in its operation.

SAFETY INFORMATION 2

8019465/2016-03-10 | SICK O P E R A T I N G I N S T R U C T I O N S | Safeguard Detector 9Subject to change without notice

Page 10: Functional safety system - LC Automation

3 Product description

3.1 Application description

The Safeguard Detector Core application package is used on machines with materialtransportation systems, such as a carton magazine on a packaging machine, to preventthe risk of people getting injured by the empty material transportation system in theevent of interrupting the machine.

The transportation opening to a packaging machine is monitored by at least two sen‐sors. If there is carton in the magazine, an interruption is not possible because thematerial acts like a physical guard. The same principle applies in other plants for otherobjects acting as a physical guard (e.g., transport containers).

Figure 1: Material in the detection zone: carton magazine sufficiently filled

If the magazine is not sufficiently filled or is empty, a person can interrupt the machine.This represents a dangerous state. The task of the Safeguard Detector applicationpackage is to prevent this case by reacting in a safety-related manner and switching offthe system.

Figure 2: No material or too little material in the detection zone: carton magazine not sufficientlyfilled

Limits of the system

The figure below shows the limits of the Safeguard Detector application package. Thesystem considered ends at the outputs of the SICK safety controller. Furthermore, theuser is solely responsible for the safe design of the entire system.

3 PRODUCT DESCRIPTION

10 O P E R A T I N G I N S T R U C T I O N S | Safeguard Detector 8019465/2016-03-10 | SICKSubject to change without notice

Page 11: Functional safety system - LC Automation

Figure 3: Block diagram of the safety chain and limits of the system

The Safeguard Detector application package represents the part of the safety chainthat combines the sensors and safety controller. This combination carries out a sub-safety function. The safety chain can be expanded with additional logic elements(e.g., a higher-level control).

3.2 Safety function

The sensors are evaluated by means of a SICK safety controller. If the system detectsthat the machine opening is not sufficiently covered by suitable objects, meaning thatan interruption or access to the hazardous point is not reliably prevented, the accord‐ingly configured outputs of the safety controller are switched off.

The objects to be detected act as physical guards. They must be selected such that theycarry out their separating function sufficiently and reliably.

The separating function must also be effective during the lapsing of the safety functionresponse time (e.g., while hazardous system movements are stopping after the safetyfunction has been triggered).

DANGERThe technical process parameters must be set to ensure that so many objects are inthe infeed so that they still function as physical guards after the system is switched offby the application package.This means that the application package must switch off the system before the neces‐sary number of objects in the infeed for maintaining protection is undercut. Otherwise,this would mean that the user is at risk.

3.3 Safe state

In the safe state, the accordingly configured safe outputs are in the off state. Themachine is and remains switched off. The safe state is initiated in the following cases:

• No object is detected in the protective field in the time in which the sensors arebeing evaluated; the output of at least one sensor is therefore in the off state.

• The connection between at least one sensor and the SICK safety controller hasbeen interrupted.

• The power supply of at least one sensor and/or the SICK safety controller hasbeen interrupted.

• An error is diagnosed in at least one sensor.

PRODUCT DESCRIPTION 3

8019465/2016-03-10 | SICK O P E R A T I N G I N S T R U C T I O N S | Safeguard Detector 11Subject to change without notice

Page 12: Functional safety system - LC Automation

• The safety controller receives implausible output signals from the two sensorsbeyond the duration of the configured maximum discrepancy time.

• An internal error has occurred in the SICK safety controller or in one of its compo‐nents.

3.4 System components

The Safeguard Detector application package consists of the following components:

• A sensor package consisting of two identical MultiPulse photoelectric proximitysensors (2x2 or 2x10 Hz).

• A SICK safety controller

For product packages and accessories that can be ordered, see "Ordering information",page 33.see "Ordering information", page 33.

Sensor technology

The sensor part of the system consists of two sensors, both of which are able to triggerthe safety function. As a result of this dual-channel structure (“1 out of 2”), the systemand sensor are single-failure-proof.

Two sensor variants with various pulse rates and response times are available.

Designation Description Part number

SAPP02D-06A0002 2 MultiPulse photoelectric proximity sensors,pulse rate: 2 Hz; detection zone:30 … 100 mm; response time: 500 ms

1066074

SAPP02D-06A0001 2 MultiPulse photoelectric proximity sensors,pulse rate: 10 Hz; detection zone:30 … 100 mm; response time: 100 ms

1068895

Table 3: Safeguard Detector sensor package (with two MultiPulse photoelectric proximity sen‐sors)

NOTICE

• The permissible sensor variants for the Safeguard Detector application packagecannot be configured. The customer is responsible for selecting the correct variantand testing it during the validation.

• Which sensor variant is suitable depends on the logic execution time of the safetycontroller, among other things, see "General sensor data", page 31.see "Generalsensor data", page 31.

• Only sensor variants listed here may be used.• Only sensor pairs with the same pulse rate may be used. A 2 Hz sensor may not be

combined with a 10 Hz sensor.

The detection zone of the sensors is 30 to 100 mm:• Output Q vibrates at 2 or 10 Hz 1) and the yellow status LED lights up if there is an

object in the detection zone.• Output Q switches off and the yellow status LED goes out if there is an object

within 0 … 30 mm.

1) Depending on the selected sensor variant.

3 PRODUCT DESCRIPTION

12 O P E R A T I N G I N S T R U C T I O N S | Safeguard Detector 8019465/2016-03-10 | SICKSubject to change without notice

Page 13: Functional safety system - LC Automation

Figure 4: Switching behavior of output Q

Safety controller

The logic part of the system consists of a Flexi Soft main module and at least one FlexiSoft I/O module. The Flexi Soft modular safety controller can be configured using theFlexi Soft Designer configuration software.

Designation Part number

FX3-CPU000000 1043783

FX3-CPU130002 1043784

FX3-CPU230002 1058999

FX3-CPU320002 1059305

Table 4: Possible variants of the Flexi Soft main module

Designation Part number

FX3-XTIO84002 1044125

FX3-XTDI80002 1044124

FX3-XTDS84002 1061777

Table 5: Possible variants of the Flexi Soft I/O modules

PRODUCT DESCRIPTION 3

8019465/2016-03-10 | SICK O P E R A T I N G I N S T R U C T I O N S | Safeguard Detector 13Subject to change without notice

Page 14: Functional safety system - LC Automation

4 Project planning

This chapter includes important information about the proper integration of the Safe‐guard Detector application package for planners, developers, and designers.

4.1 Security

DANGERDangerous state of the machine

b Make sure that the dangerous state of the machine is and remains switched offduring mounting, electrical installation, and commissioning.

b Make sure that the safety controller outputs do not affect the machine duringmounting, electrical installation, and commissioning.

DANGERHazard due to lack of effectiveness of the protective deviceIf insufficiently mounted or subjected to excessive vibrations, the sensors may becomedetached or damaged.It is possible for people to interrupt the hazardous area when the machine is running.

b Where necessary, take suitable vibration reduction measures.

DANGERThe path of the beam between the sensor and the object being detected must alwaysbe kept free and must not be disrupted or manipulated by any other objects.

4.2 Prerequisites

Structural prerequisites

The system only detects the surfaces of objects and not intervention by a person intothe hazardous area of the machine. For this reason, ensure that the detected objectcovers the hazardous area in a manner that sufficiently prevents access or interruption.

The distance between the object (e.g., carton blanks) and the machine must not be sobig that an interruption by a person is possible or else there may still be a hazarddespite an object having been detected (which is the movable physical guard).

If the object moves to the side in the magazine, an interruption opening may be cre‐ated, which, in some circumstances, may not be detected by the sensors. Correspond‐ing countermeasures must be taken by the machine user.

Optical properties of objects

DANGERTransparent objects (film packing , bottles, etc.) may cause availability problems as aresult of their direction-changing effect on light and may lead to safety-relevant incor‐rect switching. For this reason, such objects must be kept out of the sensing range ofthe sensors.

The objects to be detected must have the following properties:• The remission of the objects must be between 6 % and 90 % of a diffusely scatter‐

ing nature. This corresponds to black to white carton surfaces.• Very dark and retroreflective or shiny objects may cause availability problems.

4 PROJECT PLANNING

14 O P E R A T I N G I N S T R U C T I O N S | Safeguard Detector 8019465/2016-03-10 | SICKSubject to change without notice

Page 15: Functional safety system - LC Automation

4.3 Setup location

Positioning the sensors

It must be ensured that enough objects are in the magazine to effectively prevent inter‐vention.

The sensors must be positioned so that they trigger the safety function before therespective quantity of objects is undercut.

4.4 Response time

When configuring the machine, the response time of the entire system must be takeninto consideration. If interruption is possible when a magazine is empty, the stoppingtime of the system must be calculated and the distances to the hazardous points nec‐essary based on this must be complied with.

When calculating the total response time, the following possible influences must betaken into consideration:• Sensor response time• Safety controller response time• Signal transit time between OSSD and actuator• Actuator stopping/run-down time

4.5 Integrating into the electrical control

DANGERIf there is a foreign object in the sensor detection zone, this is not detected as an errorduring normal operation. The same applies if the sensor becomes detached from itsposition due to a mounting error and therefore constantly detects a foreign object, suchas the floor. An error of this kind is discovered by a plausibility check.

b The logic program must check the plausibility of the sensor signals by evaluatingthe discrepancy time, for examplesee "Application logic", page 22.

Restart interlock and reset

The sensors cannot differentiate between an object in the magazine and body parts. Ifit is possible that a person could interrupt the hazardous area and therefore cancel outthe safe state, a restart interlock is required.

In this, the result of the series-connected frequency monitoringand the tolerant dual-channelevaluation function blocks is sufficient as the condition for a restart.

The user is responsible for deciding whether or not a restart interlock is required.

Cross-circuit detection

The dual-channel integration of the sensors requires a detection or the prevention ofcross-circuits between the cables of the sensors to the SICK safety controller. This twosensors must have separate power supplies and cabling in different rooms.

To protect the sensors from overvoltage, the sensors must be supplied with power viathe Flexi Soft safety controller, see "Wiring notes", page 20.

A corresponding configuration must be carried out in the SICK safety controller logicprogram.

4.6 Testing plan

Various tests are required for the Safeguard Detector to function correctly:

PROJECT PLANNING 4

8019465/2016-03-10 | SICK O P E R A T I N G I N S T R U C T I O N S | Safeguard Detector 15Subject to change without notice

Page 16: Functional safety system - LC Automation

• A thorough check must be carried out during commissioning and following modifi‐cations, see "Validation", page 26.

• In many cases, depending on the application conditions, the risk assessmentdetermines that regular checks are required, see "Recommendations for regularchecks", page 16.see "Recommendations for regular checks", page 16.

The manufacturer and user must define the type and frequency of the thorough checkson the basis of the application conditions and the risk assessment.

Determination of the thorough checks must be documented in a traceable manner.

4.6.1 Recommendations for regular checks

In many cases, depending on the application conditions, the risk assessment deter‐mines that regular checks are required.

The regular thorough checks serve to investigate the effectiveness of the protectivedevice and discover defects because of modifications or external influences (such asdamage or tampering).

The definition of the necessary intervals and reasons is dependent on vibrations on themachine, among other things, which can be transferred onto the sensors.

Possible regular thorough check intervals or reasons:• When the batch is changed• When the system has been switched off because no object has been detected

(e.g., when the carton magazine is empty)• During repair or maintenance breaks

In many cases, it makes sense to carry out the following checks regularly:• Thorough visual check of the machine and the protective device, page 16• Thorough check of the principal function of the protective device, page 17• Inspection of whether the sensors are still in the correct position• Check of the relevant validation points, see "Validation", page 26• Thorough check of the relevant points on the checklist, see "Checklist for initial

commissioning and commissioning", page 36

If a thorough check discovers a fault, the machine must be shut down immediately. Inthis case, the mounting and electrical installation of application package must bechecked by appropriately qualified safety personnel.

4.6.2 Carrying out thorough checks

Thorough visual check of the machine and the protective device

SICK recommends the following procedure:

b Check whether the machine or the protective device has been modified or manipu‐lated so that the effectiveness of the protective device may be impaired.

b Check the following points in particular.

° Has the machine been retrofitted?

° Have machine parts been removed?

° Have modifications been made to the surroundings of the machine?

° Are there any defective cables or open cable ends?

° Has the protective device been completely or partially dismantled?

° Is the protective device damaged?

° Is the protective device severely contaminated?

° Are the front screens of the sensors contaminated, scratched, or destructed?

° Has the alignment of the sensors been changed?

° Are there any objects (e.g., cables, reflective surfaces) in the detection zone?

4 PROJECT PLANNING

16 O P E R A T I N G I N S T R U C T I O N S | Safeguard Detector 8019465/2016-03-10 | SICKSubject to change without notice

Page 17: Functional safety system - LC Automation

If one of the points applies, the machine must be shut down immediately. In this case,the machine and the protective device must be checked by appropriately qualifiedsafety personnel.

Thorough check of the principal function of the protective device

SICK recommends the following procedure:

b Test the function of the protective device by triggering the protective function andobserving the reaction of the safe outputs using the reaction of the machine, forexample.

° Move an object into the beam of light of the first sensor so that the beam oflight hits the object at a distance of < 30 mm from the sensor (minimumsensing range = 30 ). The OSSD switching outputs of the Flexi Soft safetycontroller must switch to the safe status and stop the dangerous movement.

° Remove the material from the maximum sensing range of the sensor(> 100 mm). The OSSD switching outputs of the Flexi Soft safety controllermust switch to the safe status and stop the dangerous movement.

° Repeat the thorough checks with the second sensor.

If a thorough check discovers a fault, the machine must be shut down immediately. Inthis case, the mounting and electrical installation of application package must bechecked by appropriately qualified safety personnel.

PROJECT PLANNING 4

8019465/2016-03-10 | SICK O P E R A T I N G I N S T R U C T I O N S | Safeguard Detector 17Subject to change without notice

Page 18: Functional safety system - LC Automation

5 Mounting

5.1 Placing the sensors

Correct distance between the sensors and the material

The sensors must be mounted so that the limits of the detection zone – i.e., the valuesfor the minimum and maximum distance to the object being detected – are compliedwith. The minimum distance is 30 mm; the maximum permissible distance is 100 mm.

Sufficient distance between the light points of the sensors

The sensors must detect the material at two different points. Otherwise, reliable detec‐tion is not possible.

Furthermore, the light points of the two sensors must be far enough from one anotherto eliminate the risk of mutual interference between the sensors.

Positioning the sensors in relation to one another

The sensors should be positioned at a slight angle to the object being detected (seefigure 5). Otherwise, the beam of light could pass through a gap between the objectsand not be reflected inside the detection zone despite material being present. This canlead to an unintended shut-down.

Furthermore, the sensors should be mounted at different heights. The paths of thebeams of the sensors must not run parallel to one another. These measures increaseavailability because this practically eliminates the risk of mutual interference betweenthe sensors.

Figure 5: Sensors aligned at an angle to the material

Interference of the sensors

DANGERThe following types of interference must be ruled out because they could impair thesafety function.• Mirrored, reflective, shiny, or transparent surfaces and holograms are not permit‐

ted in the detection zone.• No light source and no reflective or retroreflective objects may be located in the

extension of the beam path outside of the detection zone (i.e. behind the object tobe detected).

• Direct sunlight or very bright sunlight must be prevented from interrupting thedetection zone of the sensors.

• The sensors must not be illuminated with low-frequency ambient light in the areaaround 100 Hz or with high-frequency ambient light in the kHz range.

5 MOUNTING

18 O P E R A T I N G I N S T R U C T I O N S | Safeguard Detector 8019465/2016-03-10 | SICKSubject to change without notice

Page 19: Functional safety system - LC Automation

5.2 Mounting the sensors

b The sensors are mounted using a suitable mounting bracket, see "Ordering infor‐mation for accessories", page 34.

b Use self-locking nuts.b Do not screw the fixing screws tightly yet because the sensor needs to be real‐

igned after electrical installation, see "Positioning and aligning the sensors",page 22.see "Positioning and aligning the sensors", page 22.

b The maximum permissible tightening torque of the fixing screws is 0.8 Nm.

MOUNTING 5

8019465/2016-03-10 | SICK O P E R A T I N G I N S T R U C T I O N S | Safeguard Detector 19Subject to change without notice

Page 20: Functional safety system - LC Automation

6 Electrical installation

6.1 Security

DANGERHazard due to electrical voltageHazard due to unexpected starting of the machine

b Make sure that the machine is and remains disconnected from the power supplyduring the electrical installation.

b Make sure that the dangerous state of the machine is and remains switched off.b Always use a suitable power supply.b Make sure that the outputs of the safety controller have no effect on the machine

during electrical installation.

6.2 Wiring notes

Connecting the sensors

The sensors must be connected in a voltage-free state (Uv = 0 V).

+ (L+)

- (M)

Q

brn

blu

blk

1

3

4

Figure 6: Connection example for the MultiPulse photoelectric proximity sensor

PNP: load => M

Wiring the components

The components must be wired as shown in the figure.

Figure 7: Wiring the components

1 Supply voltage2 Contactor3 Lamp4 Example actuator engineering

Power supply and overvoltage protection

The SICK safety controller must be supplied by a SELV/PELV power supply unit.

6 ELECTRICAL INSTALLATION

20 O P E R A T I N G I N S T R U C T I O N S | Safeguard Detector 8019465/2016-03-10 | SICKSubject to change without notice

Page 21: Functional safety system - LC Automation

To protect the sensors effectively against overvoltage on the supply cable, the +24 Voperating voltage for the sensors must be taken from an output of the SICK safety con‐troller rather than directly from a power supply unit (e.g., from output Q1 of an I/O mod‐ule of the SICK safety controller that is permanently set to high).

Prevention of cross-circuits by separate cabling

A cross-circuit between the cables of the sensor to the SICK safety controller may insome circumstances not be detected by the SICK safety controller and must thereforebe prevented by suitable measures when laying or selecting cables.

6.3 Interfaces

Inputs

The input interfaces of the application package are only the power supplies of the FlexiSoft safety controller.

On the SICK safety controller, other interfaces may be used for other functions if theydo not affect the fields of application of the Safeguard Detector application packagethat are described in this document.

Outputs

The output interfaces of the application package are only the safe outputs of the SICKsafety controller that must be configured by the user.

On the SICK safety controller, other interfaces may be used for other functions if theydo not affect the fields of application of the Safeguard Detector application packagethat are described in this document.

ELECTRICAL INSTALLATION 6

8019465/2016-03-10 | SICK O P E R A T I N G I N S T R U C T I O N S | Safeguard Detector 21Subject to change without notice

Page 22: Functional safety system - LC Automation

7 Configuration

7.1 Safety

DANGERTest the protective device after any changes!The entire protective device must be tested for correct operation after each change ofthe configuration.

7.2 Positioning and aligning the sensors

DANGERThe detection zone of the sensors (30 to 100 mm) cannot be changed. This is why cor‐rect positioning of the sensor is decisive for safe functioning of the Safeguard Detectorapplication package.The application package must switch off the system before the necessary number ofobjects in the infeed for maintaining protection is undercut. Otherwise this would meanthat the user is at risk.

b Apply/switch on power supply (UV = 24 V). The green status LED lights up on thesensor.

b Align the objects how they should be detected in use.b Fill the magazine with objects until intervention is effectively prevented.b Align the sensor at an angle to the front object, see "Positioning the sensors in

relation to one another", page 18.b The red emitted light beam must hit the object within the detection zone (30 to

100 mm). The yellow status LED must light up.b Remove the object so far from the object that the maximum detecting of 100 is

barely exceeded. The yellow Status LED may not light up.b Fix the sensor in the desired position. Observe the maximum permissible tighten‐

ing torque of the fixing screws of 0.8 Nm.b Repeat the procedure for the second scanner.

NOTE

• Ensure that the optical opening (front screen) of the sensor is completely clear.• The sensors are set ex works and ready for operation. No further configuration

adjustments can be made.

7.3 Configuration software

The Flexi Soft modular safety controller can be configured using the Flexi Soft Designerconfiguration software.

You will find the most recent version of the configuration software at www.sick.com.

7.4 Application logic

Pre-configured project files

At www.sick.com/Safeguard_Detector there are downloadable, pre-configured projectfiles for the two sensor variants.

7 CONFIGURATION

22 O P E R A T I N G I N S T R U C T I O N S | Safeguard Detector 8019465/2016-03-10 | SICKSubject to change without notice

Page 23: Functional safety system - LC Automation

NOTE

• User-defined function blocks are used in the pre-configured project files. Whenfirst opening the project in the Flexi Soft Designer, the user must confirm theimport of these function blocks.

• The function blocks in the project files are pre-configured with the correct values(“plug and play”).

• The parameters of the function blocks (e.g., the discrepancy time) can be changedin the Flexi Soft Designer, see "Configuring the function blocks", page 23.

Example logic

NOTE

• The following example logic shows the minimum configuration of the applicationpackage. This configuration can be expanded as required and integrated into ahigher-level logic program. Ensure that other functions do not affect the fields ofapplication of the Safeguard Detector application package that are described inthis document.

• One safety controller may be used to monitor more than one sensor pair.

At least the following function blocks must be used for the application package logicprogram:

• Frequency monitoring• Tolerant dual-channel evaluation

The two function blocks stated above must be wired exactly as shown in the figure toachieve the defined functionality.

Figure 8: Wiring of the necessary function blocks (example from Flexi Soft Designer 1.7.0)

The release output signal of the tolerant dual-channel evaluation function block can beoptionally used for the following functional expansions:

• External device monitoring• To prevent the machine from starting up unintentionally (reset and restart inter‐

lock)

Configuring the function blocks

DANGERThe parameters stated in this chapter are relevant to safety. The values of these param‐eters must match the values stated here in every application.Exception: parameters that can be changed by the customer or defined depending theapplication specification are identified in the tables.

Configure the frequency monitoring function block for frequency 1 and frequency 2 so thatthey are identical to the following values:

CONFIGURATION 7

8019465/2016-03-10 | SICK O P E R A T I N G I N S T R U C T I O N S | Safeguard Detector 23Subject to change without notice

Page 24: Functional safety system - LC Automation

Parameter Value

Min. period duration For 2 Hz variant: 340 msFor 10 Hz variant: 70 ms

Max. period duration For 2 Hz variant: 680 msFor 10 Hz variant: 120 ms

Average pulse duration 0 ms (deactivated)

Pulse duration tolerance 0 ms (deactivated)

Frequency x error output 1 All errors

Table 6: Configuration of the frequency monitoring function block

1 This parameter can be changed depending on the application.

Configure the tolerant dual-channel evaluation function block with the following values:

Parameter Value

Input mode Equivalent

Evaluate mode Dual-channel / AND mode

Max. time for AND mode 0 s

Discrepancy time monitoring when switching on Active

Discrepancy time monitoring when switching off Active

Discrepancy time 1 3000 ms

Use input for switch-off delay Not active

Switch-off delay time 0 ms (not active)

Use outputs status input A and status input B 2 Any

Table 7: Configuration of the tolerant dual-channel evaluation function block

1 This parameter can be changed depending on the application. Select as low a discrepancy time as possi‐ble in consideration of availability.

2 This parameter can be changed depending on the application.

Discrepancy time

The discrepancy time parameter in the tolerant dual-channel evaluation function block deter‐mines how long the two inputs may show discrepant values after changing one of thetwo input signals without this being seen as an error. Outputs discrepancy error input Aand discrepancy error input B show which input has not followed in the expected time. Adiscrepancy error (timeout) is reset when the active status has been reached, i.e. a cor‐rect sequence is upheld and the release output therefore becomes High.

The discrepancy time affects the response time of the system and must be consideredwhen designing the entire safety function.

For more information on setting the parameter in the tolerant dual-channel monitoring func‐tion block, see the “Flexi Soft in the Flexi Soft Designer software” operating instruc‐tions.

NOTEThe Evaluate mode parameter of the tolerant dual-channel evaluation function blockmust be configured to Dual-channel / AND mode. The function block then changes to ANDmode when a falling edge occurs at the Actuator released input. In the AND mode, thetolerant dual-channel evaluation function block does not monitor discrepancy time.Otherwise, the function block could detect a discrepancy error when refilling the cartonmagazine, for example, and go into the error state even though the machine hasalready been stopped.

7 CONFIGURATION

24 O P E R A T I N G I N S T R U C T I O N S | Safeguard Detector 8019465/2016-03-10 | SICKSubject to change without notice

Page 25: Functional safety system - LC Automation

Calculation of the response time of the Safeguard Detector application package

The following formula can be used to calculate the response time of the sub-application(sensor - logic - I/O module output):

Response time of the sensors 2 Hz variant: 500 ms10 Hz variant: 100 ms

+ response time of the Flexi Softsafety controller

For information on calculating the responsetime of the Flexi Soft safety controller, see the“Flexi Soft modular safety controller hardware”operating instructions.

Response time of the sub-application

Table 8: Calculation the response time of the Safeguard Detector application package

CONFIGURATION 7

8019465/2016-03-10 | SICK O P E R A T I N G I N S T R U C T I O N S | Safeguard Detector 25Subject to change without notice

Page 26: Functional safety system - LC Automation

8 Commissioning

DANGERHazard due to lack of effectiveness of the protective device

b Before operating the protected machine for the first time, make sure that themachine is first checked and released by qualified safety personnel.

b Only operate the machine when the protective device is functioning properly.

8.1 Validation

The protective device and its application must be thoroughly validated in the followingcases:■ Before commissioning■ After changes to the configuration or the safety function■ After changes to the mounting, the alignment, or the electrical connection■ After exceptional events, such as after manipulation has been detected, after

modification of the machine, or after replacing components

The user is responsible for testing that the Safeguard Detector application package hasbeen mounted and functions correctly on the machine. The following aspects must bechecked and considered during this validation:■ Each of the sensors must be able to request the execution of the safety function

separately.■ The requirements of these operating instructions and the operating instructions of

the individual components have been observed■ Correct selection, combination, arrangement, assembly, and installation of devi‐

ces, including cabling, wiring, and connections■ Detection or effective prevention of cross-circuits between the cables of the sen‐

sors to the SICK safety controller■ Flexi Soft safety controller main module firmware version ≥ V3.00.0■ Suitability of the created logic program■ Suitability of the response time of the Safeguard Detector application package■ Suitability of the discrepancy time in the event of different output signals in the

two sensors■ Prevention of possibilities for manipulation, especially due to changing the posi‐

tion of the sensors or bringing an object into the detection zone of the sensors■ Protection of the Flexi Soft safety controller configuration set by means of a pass‐

word or archiving the validated version, for example■ Compliance with the maximum sensing range if the sensors – no detection if the

hazardous point is not sufficiently covered by a suitable object (e.g., when the car‐ton magazine is empty)

■ Necessity and, if necessary, implementation of a reset function■ Correct mounting position and alignment of the sensors (consideration of the sys‐

tem response time)■ Prevention of light point interference or mutual interference between the sensors■ Assessment of possible errors by the user■ Assessment of possible influences from the machine, workpieces, the process, or

the environment■ Correct configuration of the SICK safety controller outputs in accordance with the

target category or target performance level or SILCL■ Thorough visual check of the machine and the protective device, page 16■ Thorough check of the principal function of the protective device, page 17■ The documentation corresponds to the state of the machine, including the protec‐

tive device■ The verified configuration report corresponds to the desired project planning

8 COMMISSIONING

26 O P E R A T I N G I N S T R U C T I O N S | Safeguard Detector 8019465/2016-03-10 | SICKSubject to change without notice

Page 27: Functional safety system - LC Automation

■ Thorough check of the relevant points on the checklist, see "Checklist for initialcommissioning and commissioning", page 36

■ Make sure that the operating personnel has been instructed in the function of theprotective device before starting work on the machine. The instruction is theresponsibility of the user of the machine and must be carried out by qualifiedsafety personnel

The validation must be carried out by qualified safety personnel or specially qualifiedand authorized personnel and must be documented in a traceable manner.

COMMISSIONING 8

8019465/2016-03-10 | SICK O P E R A T I N G I N S T R U C T I O N S | Safeguard Detector 27Subject to change without notice

Page 28: Functional safety system - LC Automation

9 Repair

SICK sensors are maintenance-free.

We do, however, recommend that the following activities are undertaken regularly:• Cleaning the front screens• Checking the screw connections and plug connectors

No modifications may be made to devices.

9.1 Regular thorough check

The protective device must be checked regularly. The type and frequency of thoroughchecks is defined by the manufacturer and the user of the machine, see "Testing plan",page 15.see "Testing plan", page 15.

The regular thorough checks serve to investigate the effectiveness of the protectivedevice and detect any ineffectiveness due to modifications or external influences (suchas damage or manipulation).

b Carry out the thorough checks according to the instructions from the manufacturerand the machine user.

9 REPAIR

28 O P E R A T I N G I N S T R U C T I O N S | Safeguard Detector 8019465/2016-03-10 | SICKSubject to change without notice

Page 29: Functional safety system - LC Automation

10 Troubleshooting

This chapter describes how you can identify and remedy faults that interrupt the func‐tion.

DANGERIn the event of unclear faults, cease operation! Stop the machine if you cannot clearlyidentify or allocate the error and if you cannot safely rectify the malfunction.

LED indicator / error pat‐tern

Possible causes Possible measures

Green status LED does notlight up

No voltage or voltage belowthe limit values

Check the power supply, check allelectrical connections (cables andplug connections)

Green status LED does notlight up

Voltage interruptions Ensure there is a stable power supplywithout interruptions

Green status LED does notlight up

Sensor is faulty If the power supply is OK, replace thesensor

Yellow status LED flashing Sensor is still ready foroperation, but the operat‐ing conditions are not ideal

Check the operating conditions:• Fully align the beam of light

(light spot) with the object• Clean the optical surfaces

• Check compliance of the detec‐tion zone and adjust mountingposition if necessary

Yellow status LED lights up,no object in the path of thebeam

Distance between the sen‐sor and the background istoo short

Adjust mounting position: greater dis‐tance to the background

Object is in the path of thebeam, yellow status LEDdoes not light up

Distance between the sen‐sor and the reflector is toogreat

Adjust mounting position: greater orshorter distance to the object

Table 9: Sensor fault diagnosis

For information on SICK safety controller diagnostics and troubleshooting, see the“Flexi Soft modular safety controller hardware” and “Flexi Soft in the Flexi Soft Designersoftware” operating instructions.

TROUBLESHOOTING 10

8019465/2016-03-10 | SICK O P E R A T I N G I N S T R U C T I O N S | Safeguard Detector 29Subject to change without notice

Page 30: Functional safety system - LC Automation

11 Disposal

The sensor must be disposed of according to the applicable country-specific regula‐tions. Efforts should be made during the disposal process to recycle the constituentmaterials (particularly precious metals).

11 DISPOSAL

30 O P E R A T I N G I N S T R U C T I O N S | Safeguard Detector 8019465/2016-03-10 | SICKSubject to change without notice

Page 31: Functional safety system - LC Automation

12 Technical data

12.1 Safety-related parameters

Safety integrity level 1 SIL2 (IEC 61508)

SIL claim limit 1 SILCL2 (EN 62061)

Category Sensors: category 3Logic: category 4Overall subsystem (sensors + safety controller): cate‐gory 3(EN ISO 13849-1)

Performance level 1 PL d (EN ISO 13849-1)

PFHD 1.8 × 10–7

DCavg 91 % (medium) (EN ISO 13849-1)

MTTFd 63 years (high) (EN ISO 13849-1)

CCF Fulfilled (EN ISO 13849-1)

TM (mission time) 20 years (EN ISO 13849-1)

Table 10: Safeguard Detector application package safety technology parameters

1 For detailed information on the safety configuration of your machine/plant, please consult your relevantSICK subsidiary.

NOTEFor information on calculating the response time, see the “Flexi Soft modular safetycontroller hardware” operating instructions.

12.2 General sensor data

2 Hz variant 10 Hz variant

Connection type M8 male connector, 3-pin

Maximum length of cable betweensensor and safety controller

10 m

Detection zone 1 30 … 100 mm

Light spot diameter / distance 7 mm/50 mm

Type of light Visible red light

Wavelength 650 nm

Power supply Via Flexi Soft

Output current Imax 100 mA

Pulse rate 2 Hz 10 Hz

Max. switching sequence 3 2 Hz 10 Hz

Max. response time 4 500 ms 100 ms

Maximum permitted safety controllercycle time 5

148 ms 28 ms

Enclosure rating IP 67 (EN 60529)

Protection class III

Circuit protection 6 A, C, D

Table 11: General sensor data

TECHNICAL DATA 12

8019465/2016-03-10 | SICK O P E R A T I N G I N S T R U C T I O N S | Safeguard Detector 31Subject to change without notice

Page 32: Functional safety system - LC Automation

2 Hz variant 10 Hz variant

Ambient operating temperature(UL/CSA: ambient temperature)

-40 … +60 °C

Table 11: General sensor data

1 Object with 90 % remission (based on standard white DIN 5033).2 Limit value: operation in short-circuit protection mains max. 8 A; residual ripple max. 5 Vss3 With light/dark ratio 1:1.4 Signal transit time with resistive load.5 Maximum permitted logic execution time of the Flexi Soft safety controller in which the respective sensor

signal (2 Hz or 10 Hz respectively) can still be evaluated correctly.6 A = UV-connections reverse polarity protected

C = interference suppressionD = outputs overcurrent and short-circuit protected

NOTEFor the technical data on the Flexi Soft modular safety controller, see the “Flexi Softmodular safety controller hardware” operating instructions.

12.3 Sensor dimensional drawing

Figure 9: Sensor dimensional drawing

Dimensions in mm (inch)1 Direction of movement of the object being detected2 Optical axis, sender3 Optical axis, receiver4 Status LED, yellow: status of the received beam of light5 Status LED, green: power supply6 M3 threaded mounting hole7 Connector

12 TECHNICAL DATA

32 O P E R A T I N G I N S T R U C T I O N S | Safeguard Detector 8019465/2016-03-10 | SICKSubject to change without notice

Page 33: Functional safety system - LC Automation

13 Ordering information

13.1 Ordering information for the Safeguard Detector application package

Product Type code Part number

Safeguard Detector Core complete package

Complete package, consisting of two MultiPulse photoelectric proximity sensors and Flexi Softmain module FX3-CPU0, system plug FX3-MPL0, and I/O module FX3-XTIO

2 Hz variant: 2 Hz pulse rate, 500 ms responsetime

SAPP02D-06AP002 1066072

10 Hz variant: 10 Hz pulse rate, 100 ms responsetime

SAPP02D-06AP001 1065548

Safeguard Detector Core sensor package

Sensor package, consisting of two MultiPulse photoelectric proximity sensors

2 Hz variant: 2 Hz pulse rate, 500 ms responsetime

SAPP02D-06A0002 1066074

10 Hz variant: 10 Hz pulse rate, 100 ms responsetime

SAPP02D-06A0001 1068895

Flexi Soft modular safety controller

Flexi Soft main module FX3-CPU0 1Note: other Flexi Soft main modules can be used

FX3-CPU000000 1043783

Flexi Soft I/O module FX3-XTIONote: other Flexi Soft I/O modules can be used

FX3-XTIO84002 1044125

Flexi Soft system plug FX3-MPL0System plug for FX3-CPU0 or FX3-CPU1 2

FX3-MPL000001 1043700

Table 12: Ordering information for the Safeguard Detector application package

1 Firmware version ≥ V3.00.0 required. You will find the firmware version of the Flexi Soft modules on thetype label of the Flexi Soft modules in the firmware version field.

2 A Flexi Soft system plug FX3-MPL1 must be used when using a Flexi Soft main module FX3-CPU2 or FX3-CPU3.

ORDERING INFORMATION 13

8019465/2016-03-10 | SICK O P E R A T I N G I N S T R U C T I O N S | Safeguard Detector 33Subject to change without notice

Page 34: Functional safety system - LC Automation

13.2 Ordering information for accessories

Product Type code Part number

Safeguard Detector individual sensors

2 Hz variant: 2 Hz pulse rate, 500 ms responsetime

WTB4-3P2100S14 1079439

10 Hz variant: 10 Hz pulse rate, 100 ms responsetime

WTB4-3P2100S13 1075282

Safety controller

Flexi Soft main module FX3-CPU1 1 FX3-CPU130002 1043784

Flexi Soft main module FX3-CPU2 1 FX3-CPU230002 1058999

Flexi Soft main module FX3-CPU3 FX3-CPU320002 1059305

Flexi Soft I/O module FX3-XTDI FX3-XTDI80002 1044124

Flexi Soft I/O module FX3-XTDS FX3-XTDS84002 1061777

Flexi Soft system plug FX3-MPL1System plug for FX3-CPU2 or FX3-CPU3 2

FX3-MPL100001 1047162

Switch

Emergency stop pushbutton ES11(combined emergency stop and reset)

ES11-SC4D8 6051329

Cables

M8, 2 m, 3-wire, straight male connector, orange,PVC

DOL-0803-G02M 6010785

M8, 2 m, 3-wire, straight male connector, black,PUR

DOL-0803-G02MC 6025888

M8, 2 m, 3-wire, angled male connector, orange,PVC

DOL-0803-W02M 6008489

M8, 2 m, 3-wire, angled male connector, black,PUR

DOL-0803-W02MC 6025891

Mounting bracket

Mounting bracket for the sensor BEF-KHS-N08 2051607

Table 13: Ordering information for accessories

1 Firmware version ≥ V3.00.0 required. You will find the firmware version of the Flexi Soft modules on thetype label of the Flexi Soft modules in the firmware version field.

2 A Flexi Soft system plug FX3-MPL0 must be used when using a Flexi Soft main module FX3-CPU0 or FX3-CPU1.

13 ORDERING INFORMATION

34 O P E R A T I N G I N S T R U C T I O N S | Safeguard Detector 8019465/2016-03-10 | SICKSubject to change without notice

Page 35: Functional safety system - LC Automation

14 Annex

14.1 Compliance with EU directives

EU declaration of conformity (excerpt)

The undersigned, representing the following manufacturer herewith declares that theproduct is in conformity with the provisions of the following EU directive(s) (including allapplicable amendments), and that the respective standards and/or technical specifica‐tions are taken as the basis.

Complete EU declaration of conformity for download

You can call up the EU declaration of conformity and the current operating instructionsfor the protective device by entering the part number in the search field atwww.sick.com (part number: see the type label entry in the “Ident. no.” field).

ANNEX 14

8019465/2016-03-10 | SICK O P E R A T I N G I N S T R U C T I O N S | Safeguard Detector 35Subject to change without notice

Page 36: Functional safety system - LC Automation

14.2 Checklist for initial commissioning and commissioning

Checklist for the manufacturer/installer

The details on the items listed below must be available when the system is commis‐sioned for the first time at the latest, depending, however, on the various applications,the requirements of which must be reviewed by the manufacturer/installer.

This checklist should be retained and kept with the machine documentation to serve asreference during recurring thorough checks.

This checklist does not replace the initial commissioning, nor the periodic thoroughcheck by qualified safety personnel.

Have the safety rules and regulations been observed in compliance with thedirectives/standards applicable to the machine?

Yes ⃞ No ⃞

Are the applied directives and standards listed in the declaration of conformity? Yes ⃞ No ⃞Does the protective device correspond to the required PL/SILCL in accordancewith EN ISO 13849-1/EN 62061?

Yes ⃞ No ⃞

Is access to the hazardous area/hazardous point effectively prevented by themonitored material?

Yes ⃞ No ⃞

Have appropriate measures been taken to protect (mechanical protection) ormonitor (protective devices) any persons or objects in the hazardous area whenprotecting a hazardous area or hazardous point, and have these devices beensecured or locked to prevent their removal?

Yes ⃞ No ⃞

Are additional mechanical protective measures fitted and secured againstmanipulation which prevent reaching under, above, or around the ESPE?

Yes ⃞ No ⃞

Has the maximum shutdown and/or stopping time of the machine been meas‐ured, specified, and documented (at the machine and/or in the machine docu‐mentation)?

Yes ⃞ No ⃞

Are the sensors properly mounted and secured against manipulation afteradjustment?

Yes ⃞ No ⃞

Are the required protective measures against electric shock in effect (protectionclass)?

Yes ⃞ No ⃞

Is the control switch for resetting the protective device or restarting the machinepresent and correctly installed?

Yes ⃞ No ⃞

Are the outputs of the protective device integrated according to the required PL/SILCL in accordance with EN ISO 13849-1/EN 62061 and does the integrationcorrespond to the circuit diagrams?

Yes ⃞ No ⃞

Has the protective function been checked in compliance with the test notes ofthis documentation?

Yes ⃞ No ⃞

Are the given protective functions effective at every adjustable operating mode? Yes ⃞ No ⃞Are the switching elements activated by the protective device, e.g., contactors,valves, monitored?

Yes ⃞ No ⃞

Is the protective device effective over the entire period of the dangerous state? Yes ⃞ No ⃞Once initiated, will a dangerous state be stopped when switching the protectivedevices off or when changing the operating mode, or when switching to anotherprotective device?

Yes ⃞ No ⃞

Has the information label for the daily thorough check been attached such thatit is well visible for the operator?

Yes ⃞ No ⃞

14 ANNEX

36 O P E R A T I N G I N S T R U C T I O N S | Safeguard Detector 8019465/2016-03-10 | SICKSubject to change without notice

Page 37: Functional safety system - LC Automation

15 Glossary

Response time The protective device’s response time is the maximum timebetween the occurrence of the event leading to the sensor’sresponse and supply of the switch-off signal to the protective devi‐ce’s interface (for example OFF state of the OSSD pair).

OFF state The OFF state is the status of the outputs of the protective device,where the controlled machine is triggered to quit its dangerousstate and the start-up of the machine is prevented (e.g., the volt‐age at the OSSDs is LOW, so that the machine is switched off andremains still).

CCF Common cause failure. Failures of various units due to a singleevent, whereby these failures do not cause each other.

DCavg Average diagnostic coverage (ISO 13849/EN ISO 13849)

Dangerous state A dangerous state is a status of the machine or facility, where peo‐ple may be injured. Protective devices prevent this risk if themachine is operated within its intended use.The figures in this document always show the dangerous state ofthe machine as movement of a machine part. In practice, thereare different dangerous states, such as:

• Machine movements

• Electrical parts

• Visible and invisible beam

• A combination of multiple hazards

MTTFd Mean time to dangerous failure (ISO 13849/EN ISO 13849)

OSSD Output signal switching device: signal output for the protectivedevice, which is used for stopping the dangerous movement.An OSSD is a safety switching output. The functionality of eachOSSD is tested periodically. OSSDs are always connected in pairsand must undergo dual-channel analysis for safety reasons. AnOSSD pair is formed from two OSSDs that are connected and ana‐lyzed together.

PDDB Proximity device with defined behavior under fault conditions: (IEC60947-5-3/EN 60947-5-3)

PFHD Probability of dangerous failure per hour

PL Performance Level (ISO 13849/EN ISO 13849)

Retroreflector A retroreflector is a reflective material that extensively reflects theincoming beam regardless of the alignment of the reflector mainlyin the direction back to the source of the beam (retroflection). Incontrast to this, other bright or reflective materials reflect theincoming light in another direction (incoming angle equals outgo‐ing angle). Examples of retroflectors include rear reflectors onbicycles, high-visibility vests, and the reflective points on guide‐posts.

GLOSSARY 15

8019465/2016-03-10 | SICK O P E R A T I N G I N S T R U C T I O N S | Safeguard Detector 37Subject to change without notice

Page 38: Functional safety system - LC Automation

Reset When a protective device has sent a stop command, the stoppedstate must be maintained until a reset device is activated and themachine can be restarted in a second step.The reset brings the protective device back to the monitoring stateafter it has sent a stop command. The reset also quits the start-upor restart interlock of a protective device, so that the machine canbe restarted in a second step.The reset must only be possible, when all safety functions and pro‐tective devices are functional.The reset of the protective device must not introduce any move‐ment or dangerous situations itself. The machine is only permittedto start after the reset once a separate start command has beensent.

• Manual resets are performed using a separate, manuallyoperated device, such as a reset pushbutton.

• Automatic resets by the protective device are only permittedin special cases, if one of the following conditions is met:

° It must not be possible for people to be in the hazard‐ous area without triggering the protective device.

° It must be ensured that no people are in the hazardousarea during or after the reset.

Protective field The protective field protects the hazardous area of a machine orvehicle. As soon as the electro-sensitive protective device detectsan object in the protective field, it switches the associated safetyoutputs to the OFF state. This signal can be passed to controllersresulting in the dangerous state coming to an end, e.g. to stop themachine or the vehicle.A horizontal or vertical protective field is required, depending onthe application. The electro-sensitive protective device can there‐fore be mounted in horizontal or vertical alignment, depending onthe requirements.

External device monitoring The external device monitoring (EDM) monitors the status of down‐stream contactors.In order to use the external device monitoring, positively guidedcontactors must be used to switch off the machine. If the auxiliarycontacts of the positively guided contactors are connected to theexternal device monitoring, the external device monitoring checkswhether the contactors drop off when the OSSDs are switched off.

SIL Safety integrity level

SILCL SIL claim limit: (IEC 62061/EN 62061)

Restart interlock The restart interlock prevents the machine from automaticallystarting up, for example after a protective device has respondedwhile the machine is operating or after changing the machine’soperating mode.The restart interlock can be implemented in the protective deviceor in the safety controller.A command to reset the protective device must be given, for exam‐ple using a reset pushbutton, before the machine can berestarted.

15 GLOSSARY

38 O P E R A T I N G I N S T R U C T I O N S | Safeguard Detector 8019465/2016-03-10 | SICKSubject to change without notice

Page 39: Functional safety system - LC Automation

16 List of figures

1. Material in the detection zone: carton magazine sufficiently filled........................ 102. No material or too little material in the detection zone: carton magazine not

sufficiently filled..........................................................................................................103. Block diagram of the safety chain and limits of the system....................................114. Switching behavior of output Q..................................................................................135. Sensors aligned at an angle to the material.............................................................186. Connection example for the MultiPulse photoelectric proximity sensor.................207. Wiring the components.............................................................................................. 208. Wiring of the necessary function blocks (example from Flexi Soft Designer 1.7.0)

..................................................................................................................................... 239. Sensor dimensional drawing......................................................................................32

LIST OF FIGURES 16

8019465/2016-03-10 | SICK O P E R A T I N G I N S T R U C T I O N S | Safeguard Detector 39Subject to change without notice

Page 40: Functional safety system - LC Automation

17 List of tables

1. Underlying operating instructions................................................................................52. Available example projects...........................................................................................63. Safeguard Detector sensor package (with two MultiPulse photoelectric proximity

sensors).......................................................................................................................124. Possible variants of the Flexi Soft main module...................................................... 135. Possible variants of the Flexi Soft I/O modules........................................................136. Configuration of the frequency monitoring function block...................................... 247. Configuration of the tolerant dual-channel evaluation function block....................248. Calculation the response time of the Safeguard Detector application package....259. Sensor fault diagnosis................................................................................................2910. Safeguard Detector application package safety technology parameters............... 3111. General sensor data...................................................................................................3112. Ordering information for the Safeguard Detector application package.................. 3313. Ordering information for accessories........................................................................34

17 LIST OF TABLES

40 O P E R A T I N G I N S T R U C T I O N S | Safeguard Detector 8019465/2016-03-10 | SICKSubject to change without notice

Page 41: Functional safety system - LC Automation

LIST OF TABLES 17

8019465/2016-03-10 | SICK O P E R A T I N G I N S T R U C T I O N S | Safeguard Detector 41Subject to change without notice

Page 42: Functional safety system - LC Automation

17 LIST OF TABLES

42 O P E R A T I N G I N S T R U C T I O N S | Safeguard Detector 8019465/2016-03-10 | SICKSubject to change without notice

Page 43: Functional safety system - LC Automation

LIST OF TABLES 17

8019465/2016-03-10 | SICK O P E R A T I N G I N S T R U C T I O N S | Safeguard Detector 43Subject to change without notice

Page 44: Functional safety system - LC Automation

More representatives and agencies at www.sick.com

AustraliaPhone +61 3 9457 0600 1800 334 802 – tollfreeE-Mail [email protected]

AustriaPhone +43 (0)22 36 62 28 8-0E-Mail [email protected]

Belgium/LuxembourgPhone +32 (0)2 466 55 66E-Mail [email protected]

BrazilPhone +55 11 3215-4900E-Mail [email protected]

CanadaPhone +1 905 771 14 44E-Mail [email protected]

Czech RepublicPhone +420 2 57 91 18 50E-Mail [email protected]

ChilePhone +56 2 2274 7430E-Mail [email protected]

ChinaPhone +86 4000 121 000E-Mail [email protected]

DenmarkPhone +45 45 82 64 00E-Mail [email protected]

FinlandPhone +358-9-2515 800E-Mail [email protected]

FrancePhone +33 1 64 62 35 00E-Mail [email protected]

GemanyPhone +49 211 5301-301E-Mail [email protected]

Great BritainPhone +44 (0)1727 831121E-Mail [email protected]

Hong KongPhone +852 2153 6300E-Mail [email protected]

HungaryPhone +36 1 371 2680E-Mail [email protected]

IndiaPhone +91–22–4033 8333E-Mail [email protected]

IsraelPhone +972-4-6881000E-Mail [email protected]

ItalyPhone +39 02 27 43 41E-Mail [email protected]

JapanPhone +81 (0)3 5309 2112E-Mail [email protected]

MalaysiaPhone +603 808070425E-Mail [email protected]

NetherlandsPhone +31 (0)30 229 25 44E-Mail [email protected]

New Zealand Phone +64 9 415 0459 0800 222 278 – tollfreeE-Mail [email protected]

Norway Phone +47 67 81 50 00E-Mail [email protected]

PolandPhone +48 22 837 40 50E-Mail [email protected]

RomaniaPhone +40 356 171 120 E-Mail [email protected]

RussiaPhone +7-495-775-05-30E-Mail [email protected]

SingaporePhone +65 6744 3732E-Mail [email protected]

SlovakiaPhone +421 482 901201E-Mail [email protected]

SloveniaPhone +386 (0)1-47 69 990E-Mail [email protected]

South AfricaPhone +27 11 472 3733E-Mail [email protected]

South KoreaPhone +82 2 786 6321E-Mail [email protected]

SpainPhone +34 93 480 31 00E-Mail [email protected]

SwedenPhone +46 10 110 10 00E-Mail [email protected]

SwitzerlandPhone +41 41 619 29 39E-Mail [email protected]

TaiwanPhone +886 2 2375-6288E-Mail [email protected]

ThailandPhone +66 2645 0009E-Mail [email protected]

TurkeyPhone +90 (216) 528 50 00E-Mail [email protected]

United Arab EmiratesPhone +971 (0) 4 88 65 878E-Mail [email protected]

USA/MexicoPhone +1(952) 941-6780 1 (800) 325-7425 – tollfreeE-Mail [email protected]

VietnamPhone +84 8 62920204E-Mail [email protected]

SICK AG | Waldkirch | Germany | www.sick.com

8019

465/

2016

-03-

10/e

n