
DescriptionTerm
Optional ATEX-certified thermistor protection module for potentially explosive
atmospheres
FPTC-02
Optional pulse encoder interface module for safety encoderFSE-31
Safety functions module which supports the FSE-31 module and the use of
safety encoders
FSO-21
Safety functions module which does not support the use of encodersFSO-12
Hardware fault tolerance (IEC 61508)HFT
Inverter bridge, related components and drive DC link capacitors enclosed in
a metal frame or enclosure. Intended for cabinet installation.
Inverter module
Inverter module(s) under control of one control unit, and related components.
One inverter unit typically controls one motor.
Inverter unit
Mean time to dangerous failure: (Total number of life units) / (Number of
dangerous, undetected failures) during a particular measurement interval
under stated conditions (EN ISO 13849-1)
MTTFD
Average probability of dangerous failure on demand (IEC 61508)PFDavg
Average frequency of dangerous failures per hour (IEC 61508)PFH
Performance level. Levels a...e correspond to SIL (EN ISO 13849-1)PL
Periodic test performed to detect failures in a safety-related system so that,
if necessary, a repair can restore the system to an “as new” condition or as
close as practical to this condition. (IEC 61508, IEC 62061)
Proof test
Safe acceleration rangeSAR
Safe brake controlSBC
Systematic capability (IEC 61508)SC
Safe failure fraction (%) (IEC 61508)SFF
Safety integrity level (1…3) (IEC 61508, IEC 62061, IEC 61800-5-2)SIL
Safe motor temperature (IEC/EN 61800-5-2)SMT
Safe stop 1 (IEC/EN 61800-5-2)SS1
Safe stop emergencySSE
Safe torque off (IEC/EN 61800-5-2)STO
There are three categories of stop functions defined by IEC/EN 60204-1:
•stop category 0: an uncontrolled stop where power to the machine actuators
is removed immediately (for example, STO)
•stop category 1: a controlled stop where the machine actuators have power
for stopping, after which the power is removed (SS1)
• stop category 2: a controlled stop where the machine actuators continue
to have power (SS2).
Stop category
Proof test interval. Defines the probabilistic failure rate (PFH or PFDavg) for
the safety function or subsystem. Performing a proof test at a maximum in-
terval of T1is required to keep the SIL capability valid. The same interval must
be followed to keep the PL capability (EN ISO 13849) valid. Note that any T1
values given cannot be regarded as a guarantee or warranty.
T1
Mission time: the period of time covering the intended use of the safety
function/device. After the mission time elapses, the safety device must be
replaced. Note that any TMvalues given cannot be regarded as a guarantee
or warranty. (EN ISO 13849-1, IEC 61800-5-2)
TM
The Equipment and Protective Systems Intended for Use in Potentially Explos-
ive Atmospheres Regulations 2016 (+ amendment SI 2019 No. 696)
UKEX
Confirmation by, for example, analysis that the safety system meets the
functional safety requirements of the specific application.
Validation
Confirmation by, for example, testing that the safety system meets the re-
quirements set by the specification.
Verification
Potentially explosive atmosphere. Hazardous areas are divided into zones,
based on the frequency and duration of the occurrence of an explosive atmo-
sphere. (IEC/EN 60079-10)
Zone
14 Introduction to the manual