SEW-Eurodrive MOVIAXIS MMD60B User manual

Drive Technology \ Drive Automation \ System Integration \ Services
Manual
Decentralized Servo Inverter
MOVIAXIS
®
MMD60B
Functional Safety
Edition 06/2012 16980026 / EN

SEW-EURODRIVE—Driving the world

Manual – MOVIAXIS® MMD60B - Functional Safety 3
Contents
Contents
1 General Information ............................................................................................ 4
1.1 Use of this documentation .......................................................................... 4
1.2 Structure of the safety notes ....................................................................... 4
1.3 Rights to claim under limited warranty ........................................................ 5
1.4 Exclusion of liability..................................................................................... 5
1.5 Copyright..................................................................................................... 5
1.6 Document content....................................................................................... 5
1.7 Other applicable publications...................................................................... 5
1.8 Product names and trademarks.................................................................. 5
2 Integrated Safety Technology............................................................................ 6
2.1 Safe condition ............................................................................................. 6
2.2 Safety concept ............................................................................................ 7
2.3 Safety functions .......................................................................................... 8
2.4 Restrictions ............................................................................................... 10
3 Safety Conditions.............................................................................................. 11
3.1 Approved device combinations ................................................................. 11
3.2 Requirements on the installation............................................................... 12
3.3 Requirements on the external safety controller ........................................ 13
3.4 Requirements on startup........................................................................... 15
3.5 Requirements on operation....................................................................... 15
4 Connection Variants ......................................................................................... 16
4.1 Position of the plug connector for safe torque off (STO)........................... 16
4.2 Assignment of the plug connector for safe torque off (STO)..................... 16
4.3 Connection of an external safety relay for STO ........................................ 17
4.4 Connection of an external safety controller for STO ................................. 18
5 Technical Data ................................................................................................... 19
Index................................................................................................................... 20

4Manual – MOVIAXIS® MMD60B - Functional Safety
1Use of this documentation
General Information
MOVIAXIS® MMD60B - Functional S afety
1 General Information
1.1 Use of this documentation
The documentation is an integral part of the product and contains important information
on operation and service. The documentation is written for all employees who assemble,
install, start up, and service this product.
The documentation must be accessible and legible. Make sure that persons responsible
for the system and its operation, as well as persons who work independently on the unit,
have read through the documentation carefully and understood it. If you are unclear
about any of the information in this documentation, or if you require further information,
contact SEW-EURODRIVE.
1.2 Structure of the safety notes
1.2.1 Meaning of signal words
The following table shows the grading and meaning of the signal words for safety notes,
warnings regarding potential risks of damage to property, and other notes.
1.2.2 Structure of the section-related safety notes
Section-related safety notes do not apply to a specific action, but to several actions
pertaining to one subject. The used symbols indicate either a general or a specific
hazard.
This is the formal structure of a section-related safety note:
1.2.3 Structure of the embedded safety notes
Embedded safety notes are directly integrated in the instructions just before the descrip-
tion of the dangerous action.
This is the formal structure of an embedded safety note:
•SIGNAL WORD Nature and source of hazard.
Possible consequence(s) if disregarded.
– Measure(s) to prevent the danger.
Signal word Meaning Consequences if disregarded
DANGER Imminent danger Severe or fatal injuries
WARNING Possible dangerous situation Severe or fatal injuries
CAUTION Possible dangerous situation Minor injuries
NOTICE Possible damage to property Damage to the drive system or its
environment
INFORMATION Useful information or tip: Simpli-
fies the handling of the drive
system.
SIGNAL WORD
Type and source of danger.
Possible consequence(s) if disregarded.
• Measure(s) to prevent the danger.

Manual – MOVIAXIS® MMD60B - Functional Safety 5
1
Rights to claim under limited warranty
General Information
1.3 Rights to claim under limited warranty
A requirement of fault-free operation and fulfillment of any rights to claim under limited
warranty is that you adhere to the information in the documentation. Read the documen-
tation before you start working with the unit!
1.4 Exclusion of liability
You must comply with the information contained in this documentation to ensure safe
operation and to achieve the specified product characteristics and performance
features. SEW-EURODRIVE assumes no liability for injury to persons or damage to
equipment or property resulting from non-observance of these operating instructions. In
such cases, any liability for defects is excluded.
1.5 Copyright
© 2012 – SEW-EURODRIVE. All rights reserved.
Unauthorized duplication, modification, distribution or any other use of the whole or any
part of this documentation is strictly prohibited.
1.6 Document content
This publication contains conditions and amendments related to MOVIAXIS®MMD60B
in safety-related applications.
The system comprises a frequency inverter with motor and safety-tested external
disconnecting device.
1.7 Other applicable publications
This document supplements the "MOVIAXIS®MMD60B" operating instructions and
limits the application notes according to the following information.
The "MOVIAXIS®MMD60B" operating instructions must always be observed.
1.8 Product names and trademarks
All product names in this documentation are trademarks or registered trademarks of
their respective titleholders.

6Manual – MOVIAXIS® MMD60B - Functional Safety
2Safe condition
Integrated Safety Technology
2 Integrated Safety Technology
The safety technology of MOVIAXIS®MMD60B described below has been developed
and tested in accordance with the following safety requirements:
• Performance level d according to EN ISO 13849-1
• SIL 2 according to IEC 61800-5-2
This was certified by TÜV Nord. Copies of the TÜV certificate and the corresponding
report are available from SEW-EURODRIVE on request.
2.1 Safe condition
For safety-related operation of MOVIAXIS®MMD60B , safe torque off is defined as
safe condition (see STO safety function). The safety concept is based on this definition.

Manual – MOVIAXIS® MMD60B - Functional Safety 7
2
Safety concept
Integrated Safety Technology
2.2 Safety concept
• The MOVIAXIS®MMD60B frequency inverter can be connected to an external
safety controller or safety relay. This de-energizes all active elements that generate
the pulse trains to the power output stage (IGBT) by switching off the safety-related
24 V supply when a connected control device (e.g. emergency stop button with latch-
ing function) is activated. This ensures that the frequency inverter no longer supplies
power to the motor for generating torque.
• Disconnecting the 24 V power supply ensures that the voltage supplies required for
operation of the drive are safely interrupted.
• Instead of galvanic isolation of the drive from the supply system using contactors or
switches, the disconnection of the 24 V supply described here safely prevents the
gating of the power semiconductors in the frequency inverter. The rotary-field gener-
ation for the respective motor is deactivated even though the line voltage is still pres-
ent.
2.2.1 Schematic representation of the "safety concept for MOVIAXIS®MMD60B"
2949504779
[1] MOVIAXIS®MMD60B
[2] 24 V power supply
[3] CPU
[4] Power semiconductor
[5] X50 connection for safe torque off (STO)
[6] Emergency stop relay (external)
24V
[6]
[2]
M
12
5
43
[3]
[4]
[1]
[5]
STO+
0V24
STO-
+24 V

8Manual – MOVIAXIS® MMD60B - Functional Safety
2Safety functions
Integrated Safety Technology
2.3 Safety functions
The following drive-related safety functions can be used:
•STO (safe torque off according to IEC 61800-5-2) by disconnecting the safety-
related 24 V supply.
If the STO function is activated, the frequency inverter no longer supplies power to
the motor for generating torque. This safety function corresponds to a non-controlled
stop according to EN 60204-1, stop category 0.
The safety-related 24 V power supply must be switched off by a suitable external
safety controller or a suitable external safety relay.
The following figure shows the STO function:
2463228171
V Velocity
tTime
t1Time at which STO is triggered
Disconnection range
v
t
t1

Manual – MOVIAXIS® MMD60B - Functional Safety 9
2
Safety functions
Integrated Safety Technology
•SS1(c) (safe stop 1, function variant c according to IEC 61800-5-2) by means of suit-
able external control (e.g. safety relay with delayed disconnection)
The following sequence is mandatory:
– Deceleration of the drive using an appropriate brake ramp specified via setpoints
– Disconnect the safety-related 24 V power supply (= triggering the STO function)
after a specified safety-related time delay.
This safety function corresponds to a controlled stop according to EN 60204-1, stop
category 1.
The following figure illustrates the SS1(c) function:
2463226251
V Velocity
tTime
t1Point of time when the brake ramp is initiated
t2Point of time when STO is triggered
∆tTime between initiating the brake ramp and STO
Normal operation
Disconnection range
v
t
t1tt
2

10 Manual – MOVIAXIS® MMD60B - Functional Safety
2Restrictions
Integrated Safety Technology
2.4 Restrictions
• The brake controller integrated in MOVIAXIS®MMD60B and the standard brake
integrated in brakemotors is not safety-related and therefore not part of the safety
functions mentioned above. If the brake controller and/or the motor brake fails, the
drive can coast for much longer depending on the application (i.e. the friction and
inertia of the system). In case of regenerative loads (e.g. lifting axes, declining
conveying lines), the drive can even accelerate. This must be taken into account in
a risk assessment of the system/machine. Additional safety measures might have to
be implemented (e.g. safety brake system).
→MOVIAXIS®MMD60B cannot be used without an additional brake system for
application-specific safety functions that require active deceleration (braking) of the
dangerous movement.
• When using the SS1(c) function as described in chapter "Safety functions", the brake
ramp of the drive is not monitored with respect to safety. In case of a fault, the drive
might not be decelerated after the delay time, or it might be accelerated in the worst
case. In this case, the STO function (see chapter "Safety functions") is only activated
after the set time delay has elapsed. The resulting danger must be taken into account
in the risk assessment of the system/machine. Additional safety measures might
have to be implemented.
• A system/machine-specific risk assessment must be carried out through the
system/machine manufacturer and taken into account for the use of the drive system
with MOVIAXIS®MMD60B.
WARNING
The safety concept is only suitable for performing mechanical work on the system/
machine components.
When the 24 V power supply is disconnected, the line voltage is still present at the
frequency inverter DC link.
Severe or fatal injuries from electric shock.
• Before working on the electric part of the drive system, disconnect it from the
supply system using an appropriate external disconnecting device and secure it
against unintentional reconnection to the power supply.