turck IM12-FI01-1SF-1R User guide

Your Global Automation Partner
Safety Manual
IM(X)12-FI01-1SF-1R
Frequency Transducer

2 Hans Turck GmbH & Co. KG | T [phone] | F [phone] | [e-mail] | www.turck.com
Contents

3
V01.00 | 2020/04
1 About this Document 5
2 Scope 5
3 Safety Integrity Level 5
4 Product Description 6
4.1 Safety function 7
4.2 Safety accuracy 7
4.3 Safe state 7
4.4 Alarm state 7
5 Safety Planning 8
5.1 Architectural specications 8
5.2 Assumptions 8
5.3 FMEDA results 9
5.4 Examples for using the results 9
5.4.1 Probability of dangerous failure per hour (High Demand Mode) 9
5.4.2 Average probability of dangerous failure on demand (Low Demand Mode) 10
6 Operation Instructions 11
6.1 General 11
6.2 Before operation 12
6.3 Parameterization 14
6.3.1 Parameters 14
6.3.2 Parameter check 17
6.4 Operation 18
6.5 After operation 19
7 Appendix: Connection and Wiring Diagrams 20
8 Appendix: Terms and Abbreviations 21
9 Appendix: Proof Test 22
10 Appendix: Document History 22
Contents

4 Hans Turck GmbH & Co. KG | T [phone] | F [phone] | [e-mail] | www.turck.com

5
V01.00 | 2020/04
1 About this Document
This safety manual contains all information that is required to operate the device in functional
safety systems. Read this manual carefully before using the device.
This document addresses only functional safety according IEC 61508. Other, e.g. intrinsic safety,
is not considered.
All instructions must be followed in order to assure functional safety.
Always make sure that this is the latest version of the safety manual at www.turck.com.
TheEnglish versionis considered the definitive document. Care was taken in the production of
the translations of this document. If there is any uncertainty in its interpretation. Always refer to
theEnglish version of the safety manual or contact Turck directly.
2 Scope
This safety manual is valid for the following devices:
Product
Number
Product Name Number of
Channels
Terminal Block Design Power-Bridge-
Connection
Intrinsic Safety
7580200 IMX12-FI01-1SF-1R-PR/24VDC 1 screw clamps yes yes
7580201 IMX12-FI01-1SF-1R-0/24VDC 1 screw clamps no yes
7580202 IMX12-FI01-1SF-1R-PR/24VDC/CC 1 spring-type terminals yes yes
7580203 IMX12-FI01-1SF-1R-0/24VDC /CC 1 spring-type terminals no yes
7580220 IM12-FI01-1SF-1R-PR/24VDC 1 screw clamps yes no
7580221 IM12-FI01-1SF-1R-0/24VDC 1 screw clamps no no
7580222 IM12-FI01-1SF-1R-PR/24VDC/CC 1 spring-type terminals yes no
7580223 IM12-FI01-1SF-1R-0/24VDC /CC 1 spring-type terminals no no
In the following chapters the devices are divided
■IMX12-FI01-1SF-1R
■IM12-FI01-1SF-1R
3 Safety Integrity Level
The devices are rated to a SIL of
SIL 2

6 Hans Turck GmbH & Co. KG | T [phone] | F [phone] | [e-mail] | www.turck.com
Product Description
4 Product Description
In the following chapter the individual variants are described:
All information provided in this chapter is not part of safety function.
IMX12-FI01-1SF-1R Single-channel rotation speed monitor/frequency converter
Frequency range 0…20 kHz.
With intrinsically safe ex protection.
Reaction time digital output is 50 ms
Parameterization via switches
Inputs
– NAMUR-Sensors according to EN 60947-5-6, line monitoring (up to 20 kHz)
– potential free contacts (up to 10 kHz)
Outputs
– Common alarm output (MOSFET), potential free
– Relay output SPDT
– monitoring overshoot/undershoot and window limits
– working direction adjustable
– reaction time digital output < 50 ms
IM12-FI01-1SF-1R Single-channel rotation speed monitor/frequency converter
Frequency range 0…20 kHz.
Reaction time digital output is 50 ms
Parameterization via switches
Inputs
– NAMUR-Sensors according to EN 60947-5-6, line monitoring (up to 20kHz)
– PNP/NPN-sensors
– potential free contacts (up to 10 kHz)
– external signal source
– 0-signal 0…3 V
– 1-signal 5…30 V
Outputs
– Common alarm output (MOSFET), potential free
– Relay output SPDT
– monitoring overshoot/undershoot and window limits
– working direction adjustable
– reaction time digital output < 50 ms

7
V01.00 | 2020/04
4.1 Safety function
IMX12-FI01-1SF-1R
IM12-FI01-1SF-1R
The measured or monitored value at input [E1] are transmitted to the output [A1D] according to
parameterization and within the local process safety time observing the permissible safety accuracy.
Local process safety time is:
■fin > 1,124 Hz: 1 s
■fin < 1,124 Hz:1/f+110 ms
The power bridge is not part of safety-function.
The LED are not part of the safety-function.
The common alarm output is not part of safety function.
Two devices must not be used for the safety-function, e. g. to increase the hardware fault toler-
ance to achieve a higher SIL.
A 1oo2 architecture does not achieve a SIL3.
The safety function is executed2 safter power-on.
The frequency limits for the inputs are:
■NAMUR-Sensors according to EN 60947-5-6, line monitoring ,1 µHz…10 kHz, pulse pause
ratio > 50 µs
■PNP/NPN-sensors,1 µHz…to 10 kHz, pulse pause ratio > 50 µs
■potential free contacts,1 µHz… 10 kHz,pulse pause ratio > 50 µs
■external signal source,1 µHz… to 10 kHz, pulse pause ratio >50 µs
ū0-signal 0…3 V
ū1-signal 5…30 V
The local process safety time is the periodical internal diagnostic check (900 ms) + reaction
time.
4.2 Safety accuracy
The safety accuracyΔtotaldepends on the variant and its configuration.
In order to evaluate the safety accuracy for an individual configuration the following informa-
tion is required:
■Δ[Ex] is < 0.1 % of input frequency
Assignment [E] to [A] Δtotal
[E1] [A1D] Δtotal=Δ[E1]
4.3 Safe state
IMX12-FI01-1SF-1R
IM12-FI01-1SF-1R
The safe state is defined as the output is de-energized (A1D).
4.4 Alarm state
Internal diagnostics are provided in order to detect random hardware failures that result in
a failure of the function. If a failure is detected the device goes into the alarm state. The time
between the occurance of the failure and the time to achieve the alarm state is less than 1s.
The device remains in alarm state as long as the failure persists, at least for 1s.
IMX12-FI01-1SF-1R
IM12-FI01-1SF-1R
The alarm state is defined as the output is de-energized (A1D).

8 Hans Turck GmbH & Co. KG | T [phone] | F [phone] | [e-mail] | www.turck.com
Safety Planning
5 Safety Planning
This chapter provides information for planning a safety-related loop.
The device is not specified for a certain application. Make sure that the data provided in this
chapter is valid for your target application.
Special application-specific factors may cause the premature wear of the device and must be
taken into consideration when planning systems; take special measures to compensate for a
lack of experience based values, e.g. through implementation of shorter test intervals.
The suitability for specific applications must be assessed by considering the particular overall
safety-related system with regard to the requirements of IEC 61508.
Safety-planning must only be carried out by trained and qualified personnel.
If there is any doubt contact Turck directly.
5.1 Architectural specications
Due to architectural considerations the following characteristics are specified:
Type B
HFT 0
Experience has shown that the useful lifetime often lies within a range of 8 to 12 years. It can
be significantly less if elements are operated near their specification limits. However, it can
be extended by appropriate measures. For example, heavy temperature fluctuations could
potentially decrease the useful lifetime, as constant temperature below 40 °C could potentially
increase the useful lifetime.
The relay [A1D] must be protected against an over current (cos phi = 1, I = 2 A AC).
For the relay outputs the useful lifetime is 8 to 12 years or 30.000 switching cycles.
5.2 Assumptions
■Failure rates are constant for 10 years, wear out mechanisms are not included
■Propagation of failures are not relevant
■External power supply failure rates are not included
■All components that are not part of the safety function and cannot influence the safety func-
tion (feedback immune) are excluded.
■Only one input and one output are part of the safety function

9
V01.00 | 2020/04
5.3 FMEDA results
The following safety characteristic are results of FMEDA.
Digital output λSD λSU λDD λDU λAU Noeect DC [λDD/λD] SFF
IMX12-FI01-1SF-1R 0 FIT 196.5 FIT 249.5 FIT 38 FIT 0 FIT 409.4 FIT 86,78 % 92.15 %
IM12-FI01-1SF-1R 0 FIT 196.5 FIT 249.5 FIT 38 FIT 0 FIT 409.4 FIT 86,78 % 92.15 %
The stated Safe Failure Fraction (SFF) is for reference only. The complete subsystem will need
to be evaluated to determine the overall SFF. The failure rates used in this analysis are the basic
failure rates from the Siemens standard SN 29500 based on the average ambient temperature
of components of 40 °C.
“No effect” is a failure mode of a component that plays part in implementing the safety func-
tion but is neither a safe nor a dangerous failure. According to IEC 62061, it would be possible
to classify the“No effect” failures as“Safe Undetected”failures. Not doing so represents the
worst-case.
5.4 Examples for using the results
5.4.1 Probability of dangerous failure per hour (High Demand Mode)
The sum of the diagnostic test interval and the time to achieve the specified safe/alarm state is
less than 1s. The ratio of the diagnostic test rate to the demand rate shall equal or exceed 100.
Digital Output PFH
IMX12-FI01-1SF-1R 39.99E-09 1/h
IM12-FI01-1SF-1R 39.99E-09 1/h

10 Hans Turck GmbH & Co. KG | T [phone] | F [phone] | [email protected] | www.turck.com
Safety Planning
5.4.2 Average probability of dangerous failure on demand (Low Demand Mode)
With the FMEDA results and the values specified in the following table the average frequency of
dangerous failure can be calculated as an example:
T1 8760 h
MTTR 24 h
Digital output PFDavg
IMX12-FI01-1SF-1R 1.73E-04
IM12-FI01-1SF-1R 1.73E-04