Safety Relays....

Ok, getting there..
I have 7 MOVAXIS drives. and two MC07B VFD's so

7 MX80A's are 7 @ 950mw = 6.7W
+
2 MC07B VFD's @ 7.5W each = 15W (don't know why so high??)

so 21.7W total. At my 24VDC that is only 905 ma. So my 3 amp safety relay contacts are good.... !

I have a A.B. MSR138DP safety relay connected on my table to experiment and play with. So hopefully I'll eventually figure this out...
 
Looking at the drawing from above, The drives NC contacts are connected in series with the reset. That will prevent a reset but how does that trigger a stop if the drive has a problem?
 
Looking at the drawing from above, The drives NC contacts are connected in series with the reset. That will prevent a reset but how does that trigger a stop if the drive has a problem?
Short answer: It doesn't.

Hence one of the reasons to have an emergency stop device.

Back to your hazard analysis, what dangers does a failed drive cause? Generally, a drive failing and stopping isn't a problem (from a safety perspective, your production manager might not be happy, but it is safe). So does a running drive cause a dangerous situation? Any dangers of a running drive should already have it's own safeguards.

For example, if you application can't handle continuous run, think hoist rather than conveyor. You need end-of-travel limits.

Remember a safety relay doesn't have to be just emergency stop. Any type of limit can be applied. Look at Dave's example. There are many events that cause the safety relay to react. Emergency stop of course, but also a light curtain, and several guard doors opening, any one of which would cause the machine to stopping running.
 
TIMBERT,
Thank you ! You are exactly right, I was thinking of this all wrong and that's why I was so confused. And again had a risk assessment been done this would have all been apparent as well..
 
Matt, sorry for the delay in getting back to you. Timbert has kept you well informed, and I see you are reading up on safety functions, good.
You've had a eureka moment, but I think we need to hit the brakes here.

milmat1 said:
And again had a risk assessment been done this would have all been apparent as well..

No risk assessment? :rolleyes:

We want to help you Matt, but you have to remember this is your safety design and it will be your responsibility once it's a reality. So it's very important you understand what you are doing here, and why. Don't proceed with installing anything until you are fully aware of all the necessary requirements to meet the risk assessment that should be carried out. It should have been done before any safety components were even selected.

If you don't have a risk assessment Matt, what are you basing your safety measures on?

Was/is someone else over this project that has handed it over to you? If you are not able to risk assess this yourself Matt, someone who is trained to do so will have to carry it out, but it should be done.

Learn about the do's and don'ts first, then consider tackling an actual safety project. You're playing catch up here, but take your time. Don't be too willing to put your head on the block if you are not up to this just yet. I'm not trying to frighten you here, I'm just fore warning you in case of repercussions down the road.
If there is no immediate rush to do this project, then we have time to help teach you first.

We'll start with the safety relay you have to play with. The MSR138DT. I've attached the basic wiring diagram with colour coding so we can refer to it.

I wont refer to safety terminology such as PL, SIL, Stop Category, etc. any more until you're happy with how the safety relay works.
I'm going to break it down for you the best I can, and forgive me if you're already beyond some of what I'm explaining, or I'm repeating anything others have already written.

A safety relay is basically a logic solver with built in redundancy and self checking measures. It monitors one, or two normally closed input channels, depending on the level of safety required. This is usually referred to as single or dual channel. Dual channel, as mentioned earlier, provides double redundancy in the input checking circuit.
If using dual channel and one or both channels open circuits, the safety relay trips it's output channels.
The safety relays output channels can be tripped instantaneously or delayed, or have a combination of both, depending on the level of safety required. The duration of the delay should be determined by the required safe stopping time of the function controlled by the safety relays outputs.
Again, depending on the level of safety required, the safety relay may be automatically reset as soon as the input channels are closed, or manually reset using a reset push button, after the input channels are closed. Or manually reset, with monitoring of the output circuit, after the channels are closed and the output feedback circuit has closed.

Here you can see the MSR138DP has two safety input channels.

Channel 1 = Green S11,S12
Channel 2 = Orange S21,S22

These are used to monitor the safety equipment that can trip the safety relay. As Timbert mentioned, these can be any safety protection measure such as emergency stops, guard interlocks, trapped keys. Also electro-sensitive protective equipment(ESPE) such as light curtains, photoelectric switches, laser scanners and even cameras.

On this relay, as with many others, it monitors for cross faults on the two input channels.

The emergency stop has two normally closed contacts to wire the dual input channels through. So channel one goes from S11 through an emergency stop contact and back to S12. Channel two goes from S21 through the other emergency stop contact and back to S22.

S11 is a source +24VDC, so it loops to S52 to provide the +24VDC needed internally for channel two. S21 and S22 are switching -24VDC.
So on the MSR138DP, channel one switches +24VDC and channel two switches -24VDC. It's important to know this when fault finding input channel loss problems.

The reset, in Blue, can be any normally open Blue momentary push button. You wire the normally open contact from S33 and back to S34.

This relay differs from the one I posted earlier in that the reset and output monitoring is done separately. Here the output monitoring is done from Y1 and Y2, in Grey. If the manual reset is pressed, the internal logic checks if Y1 and Y2 are closed and if so, enables the reseting of the safety relay.

If a reset is attempted while the delay time is still active, the relay will not reset and will go into lockout. After the delay has timed out, you have to cycle the safety inputs, e.g. latch and unlatch an emergency stop, and wait for the delay to time out again before attempting another manual reset.

Note: this example shows the output monitoring wired to the normally closed feedback contacts of K1 and K2, in Brown, which are controlled by the two instantaneous safety outputs 13,14 and 23,24, also in Brown.

D1 and D2, in Yellow, are controlled by two of the three the delayed safety outputs 37,38 and 47,48, also in Yellow. Note: D1 and D2 are not wired for output monitoring.

57 and 58, in Pink, are the third delayed safety output, which can be wired to a PLC input for monitoring of the safety relays status.

Notice how all five of the safety outputs show dual internal contacts. If any one contact of any output fails closed, the other contact should still open, maintaining the safety function. This is double redundancy to bring the safety function of the relay to a higher level.

I think that's enough detail on the safety relay for now.
Are you happy enough yet as to how you would need to wire it all up?

milmat1 said:
I have 7 MOVAXIS drives. and two MC07B VFD's so
7 MX80A's are 7 @ 950mw = 6.7W
+
2 MC07B VFD's @ 7.5W each = 15W (don't know why so high??)
so 21.7W total. At my 24VDC that is only 905 ma. So my 3 amp safety relay contacts are good

Your MOVIAXIS should be MXA81A's, not MXA80A's.
MXA80A's are standard with no STO.
MXA81A's have one STO coil and feedback contact.
MXA82A's have two STO coils and feedback contacts.

The MOVITRAC MCO7B's have only one STO coil, no feedback contact.

I'm assuming you want to drive them all to a safe stop, but be sure that the delay you think you need, and it's duration, is required and safe to implement across all seven MOVIAXIS and both MOVITRACs.

The reason the MOVITRACs STO relay coils are 7.5W each is because they are size 3 drives. The STO safety relay also supplies the DC into the drive for the output section. So this relay is larger to facilitate the required larger DC supply.

Note: Because the MOVITRACs do not have an STO feedback contact, you will not be able to series the output monitoring circuit through these as well as the seven MOVIAXIS.

SEW also recommend that, once you have more than eight drives in group disconnection, you must wire a flywheel diode across each STO coil to protect the main safety relays output contacts.

Although the MSR138DP's safety outputs are rated for 3A/24VDC inductive, they recommend 6A slow blow, or 10A fast acting fuses upstream of the output contacts.

I'd look into that risk assessment ASAP Matt. If you need any help with that let us know.

p.s. A belated happy 50th! (y)

G.

"If you think safety is expensive, try having an accident".

MSR138DP.PNG
 
Last edited:
However note what happens when if one of the relays in a drive were to fail closed. In the configuration on page 37 the drive in question would not be disabled by the safety relay and you have to rely on the enable signal from the PLC to shut it down. If the reason you hit e-stop was that the PLC went crazy--no bueno.


Good point... PLC's are capable of "going crazy", since they are logic solving devices reliant upon a micro-processor. You know... Just like a Safety Relay. ;)
 
Bit_Bucket_07 said:
Good point... PLC's are capable of "going crazy", since they are logic solving devices reliant upon a micro-processor. You know... Just like a Safety Relay.

Geospark said:
A safety relay is basically a logic solver with built in redundancy and self checking measures.

A non safety certified PLC does not have built in redundancy and self checking measures. They do not have dedicated microprocessors for the monitoring of a safety function. They cannot, alone, provide the required Safety Integrity Level(SIL) to reliably govern safety related inputs and outputs and drive the system to a safe state in the event of a malfunction.

A SIL certified safety relay, or safety PLC, has microprocessors dedicated to the monitoring of the safety function. If there is a malfunction the self checking measures can detect this and initiate the safe state.

If a standard PLC is to be used for a safety system, there must also be a redundant PLC to provide a failsafe for the safety function. Unless both PLCs agree on a condition, the safe state is initiated.

G.
 
A Lot of my confusion has been caused by my time spent servicing Italian CNC routers (Busellato), As they used a PILZ safety relay and only had single contacts in the estops and the same loop went through all of the CB Aux contacts as well as a cable switch. Maybe they were able to do this in eurpoe ? IDK..
So my thought was to do something similar here. I always worried that if one contact block was broken or simply fell off the switch operator, The safety relay would not know and that Estop would be useless.
And when looking at this system I wanted a single loop (no dual contacts) to go through the drives. I was thinking wrong I realize now.
Thanks for all the info and help, BTW I was thrown into this position after there old school engineer became fatally ill and left quickly. Charles never done anything like that in 30 yrs. When I told my manager I was investigating doing some safety assessments he asked what I was talking about ! "Charles never done anything like that, Why do we need to" Was the response I received..
Well because my name is on all these drawings That's Why !

So Now I need to learn the proper method of doing the assessments. Are there templates or play by play instructions etc out there for risk assessment?
 

Similar Topics

Hey guys, the scenario is: I have already completed the drawing package for my system utilizing an A-B 440R-N23126 (Minotaur) safety relay. SoS...
Replies
0
Views
147
This is not exactly PLC question. I have application, where SIL 2 pressure sensors need to be used. I was not able to find any SIL 2 pressure...
Replies
6
Views
1,784
Hi all, has anyone ever had any issues with premature failure, etc. when using contactor relays on pulse monitored safety outputs? We are...
Replies
0
Views
774
I have panel which controls a batch pasteurizer. The panel has an E-Stop and a safety relay (Schneider XPSAC5121) which cuts power from all DOs of...
Replies
11
Views
4,612
Hello everyone, I have some problems with safety relays and AS-i. I need to draw project for my final exam, but I don't know how to use/wire them...
Replies
3
Views
1,635
Back
Top Bottom