Safe Stop - GE AF-650 GP Design And Installation Manual

Application Setup Examples
Figure 6.28 Electronic Thermal Overload: The X-axis shows the
ratio between I and I nominal. The Y- axis shows the
motor motor
time in seconds before the Electronic Thermal Overload cuts off
and trips the drive. The curves show the characteristic nominal
speed, at twice the nominal speed and at 0.2 x the nominal
speed.
At lower speeds, the Electronic Thermal Overload cuts off at
lower heat due to less cooling of the motor. In that way, the
motors are protected from being overheated even at low
speeds.

6.10 Safe Stop

The AF-650 GP can perform the safety function Safe Torque
Off (STO, as defined by EN IEC 61800-5-2
Category 0 (as defined in EN 60204-1
Prior to integration and use of safe stop in an installation,
a thorough risk analysis must be carried out on the instal-
lation in order to determine whether the safe stop
functionality and safety levels are appropriate and
sufficient. It is designed and approved as suitable for the
requirements of:
- Safety Category 3 in EN 954-1 (and EN ISO
13849-1)
- Performance Level "d" in EN ISO 13849-1:2008
- SIL 2 Capability in IEC 61508 and EN 61800-5-2
- SILCL 2 in EN 62061
1) Refer to EN IEC 61800-5-2 for details of Safe torque off
(STO) function.
2) Refer to EN IEC 60204-1 for details of stop category 0
and 1.
Activation and Termination of Safe Stop
The Safe Stop (STO) function is activated by removing the
voltage at Terminal 37 of the Safe Inverter. By connecting
the Safe Inverter to external safety devices providing a safe
delay, an installation for a safe Stop Category 1 can be
TM
AF-650 GP Design and Installation Guide
obtained. The Safe Stop function of AF-650 GP can be
used for asynchronous, synchronous motors and
permanent magnet motors.
After installation of Safe Stop (STO), a commissioning test
must be performed. A passed commissioning test is
mandatory after first installation and after each change to
the safety installation.
Safe Stop Technical Data
The following values are associated to the different types
of safety levels:
Reaction time = delay between de-energizing the STO
input and switching off the drive output bridge.
1
) and Stop
2
).
SISTEMA Data
Functional safety data is available from GE via a data
library for use with the SISTEMA calculation tool from the
IFA (Institute for Occupational Safety and Health of the
German Social Accident Insurance) and data for manual
calculation. The library is complete and continually
extended.
DET-767A
WARNING
Reaction time for T37
- Typical reaction time: 10 ms
Data for EN ISO 13849-1
- Performance Level "d"
- MTTF (Mean Time To Dangerous Failure): 24816
d
years
- DC (Diagnostic Coverage): 99%
- Category 3
- Lifetime 20 years
Data for EN IEC 62061, EN IEC 61508, EN IEC 61800-5-2
- SIL 2 Capability, SILCL 2
- PFH (Probability of Dangerous failure per Hour) =
7e-10FIT = 7e-19/h
- SFF (Safe Failure Fraction) > 99%
- HFT (Hardware Fault Tolerance) = 0 (1oo1
architecture)
- Lifetime 20 years
Data for EN IEC 61508 low demand
- PFDavg for 1 year proof test: 3.07E-14
- PFDavg for 3 year proof test: 9.20E-14
- PFDavg for 5 year proof test: 1.53E-13
6 6
6-29