SICK UE4470 IP20 Safety Network Controller for DeviceNet Safety Operating instructions

OPERATING INSTRUCTIONS

UE4470

IP20 Safety Network Controller

for DeviceNet Safety

GB

Operating Instructions

UE4470

Subject to change without notice

This document is protected by copyright. The rights established in this way reside with the SICK AG. Any dupli-

cation of this document or of parts thereof is only permitted within the bounds of the statutory provisions of the

German Copyright Law. Any modification or abridging of this document without the express prior written permis-

sion of SICK AG is prohibited.

Operating Instructions

UE4470

Subject to change without notice

Contents

1 About this document.........................................................................................................8

1

.1 Function of this document....................................................................................8

1.2 Target group ..........................................................................................................8

1.3 Scope .....................................................................................................................8

1.4 Depth of information............................................................................................. 9

1.5 Abbreviations and definitions...............................................................................9

1.6 Symbols used ......................................................................................................12

2 On safety...........................................................................................................................13

2.1 Qualified safety personnel..................................................................................13

2.2 Safety concept.....................................................................................................14

2.2.1 Functional safety per IEC 61508.....................................................14

2.2.2 Risk assessment...............................................................................15

2.2.3 Hardware configuration ....................................................................15

2.2.4 Programming requirements..............................................................15

2.2.5 Communication .................................................................................16

2.2.6 Response time ..................................................................................16

2.3 Applications of the device...................................................................................16

2.3.1 Additional precautions according to UL 1604.................................17

2.4 General safety notes and protective measures ................................................18

2.4.1 General requirements.......................................................................19

2.4.2 Compliance with EMC directive........................................................20

2.4.3 Compliance with Low Voltage Directive ...........................................20

2.4.4 Compliance with EC directives .........................................................20

2.4.5 Reducing noise..................................................................................21

2.5 Environmental protection ...................................................................................21

2.5.1 Disposal.............................................................................................21

2.5.2 Separation of materials ....................................................................21

2.6 Suitability for use ................................................................................................22

2.7 Specification changes, errors and omissions....................................................22

3 Product description.........................................................................................................23

3.1 Product overview.................................................................................................23

3.2 Device construction ............................................................................................25

3.3 Model designation overview...............................................................................26

3.4 Operating principle of the device .......................................................................26

3.4.1 DeviceNet overview...........................................................................26

3.4.2 DeviceNet Safety overview ...............................................................26

3.4.3 The operating principle of the UE4470............................................26

3.5 Properties of the UE4470...................................................................................27

3.6 Examples of range of use ...................................................................................27

3.7 Local configurable functions ..............................................................................28

3.7.1 Configuration of safety capable inputs ............................................28

3.7.2 Configuration of local test/signal (standard) outputs.....................33

3.7.3 Configuration of local safety capable outputs.................................34

3.7.4 DeviceNet configuration ...................................................................34

3.8 Selection principles.............................................................................................35

3.8.1 Safety capable input/test output field signal connections.............35

3.8.2 Functions of the safety capable output field signal

connections .......................................................................................38

3.9 Status indicators .................................................................................................40

Operating Instructions

UE4470

Subject to change without notice

Contents

4 Mounting..........................................................................................................................42

4.1 Mounting the UE4470........................................................................................ 42

5 Local Connections ..........................................................................................................45

5.1 General instructions in wiring ............................................................................ 46

5.2 Power supply selection.......................................................................................48

5.3 Connecting input/output power and signal cables........................................... 49

5

.4 Connecting DeviceNet communication cables ................................................. 54

5.5 Connection of a USB configuration cable.......................................................... 56

5.6 MAC ID node address setting ............................................................................ 56

5.7 Communication rate (baud rate) setting ........................................................... 57

5.8 Stand-alone mode (DeviceNet communication disabled)................................ 58

6 Remote connections....................................................................................................... 59

6.1 Example network topologies .............................................................................. 59

6.1.1 Safety control system UE4470 DeviceNet Safety originator

function ............................................................................................. 59

6.1.2 Mixed system: safety and monitoring control systems .................. 60

6.1.3 Mixed system of safety distributed control and centralized

monitoring......................................................................................... 61

6.1.4 Stand-alone mode (DeviceNet communication disabled).............. 63

6.2 Connecting the UE4470 to DeviceNet and DeviceNet Safety ......................... 64

6.2.1 Connection to DeviceNet (Safety) using PCMCIA interface

card.................................................................................................... 64

6.2.2 Connection to DeviceNet (Safety) using USB on UE4470.............. 65

6.3 Remote input/output allocation ........................................................................ 66

6.3.1 Remote input/output allocation overview....................................... 66

6.3.2 Hold last data/data clear on error condition ..................................67

6.3.3 Status information............................................................................ 68

6.4 Functioning as a DeviceNet Safety originator................................................... 70

6.4.1 DeviceNet Safety originator function specification.........................70

6.4.2 DeviceNet Safety target allocation .................................................. 70

6.4.3 Safety connection parameters......................................................... 71

6.5 DeviceNet Safety target function....................................................................... 72

6.5.1 DeviceNet Safety target function specification............................... 73

6.5.2 Define input or output data set ....................................................... 73

6.5.3 Allocate the UE4470 target connection to a DeviceNet

Safety originator device.................................................................... 73

6.6 DeviceNet slave function ................................................................................... 74

6.6.1 Remote I/O communication as DeviceNet slave............................ 74

6.6.2 DeviceNet slave function specification ........................................... 74

6.6.3 Creating DeviceNet slave input and output data (slave I/O) ......... 75

7 Configuration................................................................................................................... 76

7.1 Delivery status .................................................................................................... 76

7.2 Overview.............................................................................................................. 76

7.3 Planning ..............................................................................................................78

7.4 UE4470 configuration ........................................................................................ 79

7.4.1 Setting a password ........................................................................... 79

7.4.2 Configuration of Field Signal Devices.............................................. 79

7.4.3 Configuration of logic........................................................................ 80

7.5 Safety network requirements............................................................................. 80

Operating Instructions

UE4470

Subject to change without notice

Contents

8 Logic programming — function blocks..........................................................................81

8.1 Function block overview .....................................................................................82

8.2 Function block properties...................................................................................84

8.3 Function block input and output signal connections........................................84

8.3.1 Function block input connections ....................................................84

8.3.2 Single channel evaluation ................................................................85

8

.3.3 Dual channel equivalent evaluation ................................................85

8.3.4 Dual channel complementary evaluation........................................86

8.3.5 Two dual channel equivalent evaluation .........................................87

8.3.6 Two dual channel complementary evaluation.................................88

8.3.7 Function block output connections..................................................90

8.4 Function block parameterization .......................................................................91

8.4.1 Discrepancy time...............................................................................91

8.4.2 Synchronization time ........................................................................92

8.4.3 Function test......................................................................................93

8.4.4 Fault Present .....................................................................................94

8.5 Logical function blocks .......................................................................................95

8.5.1 Logical function block NOT ...............................................................95

8.5.2 Logical function block AND...............................................................96

8.5.3 Logical function block OR .................................................................98

8.5.4 Logical function block Exclusive OR (XOR) ................................... 101

8.5.5 Logical function block Exclusive NOR (XNOR) .............................. 102

8.5.6 Logical function block Routing (ROUTE) ....................................... 103

8.5.7 RS Flip-Flop function block ............................................................ 104

8.5.8 Edge Detection function block ...................................................... 105

8.5.9 Clock Generator function block..................................................... 106

8.5.10 UP, DOWN and UP/DOWN Event Counter function blocks .......... 107

8.6 Application specific function blocks................................................................ 110

8.6.1 Application-specific function block RESET.................................... 110

8.6.2 Application-specific function block RESTART ............................... 112

8.6.3 Application-specific function block Emergency Stop (ESTOP)..... 114

8.6.4 Application-specific function block Light Curtain Monitoring

(AOPD)............................................................................................. 116

8.6.5 Application-specific function block Safety Gate Monitoring

(SGATE)........................................................................................... 118

8.6.6 Application-specific function block Two-Hand Control (THC)....... 121

8.6.7 Application-specific function block OFF-Delay Timer (OFF

DELAY) ............................................................................................ 124

8.6.8 Application-specific function block ON-Delay Timer (ON

DELAY) ............................................................................................ 125

8.6.9 Application-specific function block User Mode Switch (UMS) ..... 126

8.6.10 Application-specific function block External Device

Monitoring (EDM) ........................................................................... 129

8.6.11 Multi-Operator function block........................................................ 131

8.6.12 Single and Directional Valve Monitoring function block .............. 133

8.6.13 Magnetic Switch function block (e.g. RE300) .............................. 137

Operating Instructions

UE4470

Subject to change without notice

Contents

8.7 Muting function blocks for parallel, sequential and crossed sensors...........138

8

.7.1 General description ........................................................................138

8.7.2 Muting sensors ...............................................................................141

8.7.3 Muting/override lamp.....................................................................141

8.7.4 Function block parameters ............................................................142

8.7.5 Cabling considerations...................................................................150

8.7.6 Transition from IDLE to EXECUTING behavior...............................151

8.7.7 Fault conditions and reset information .........................................151

8.7.8 Implementing muting using two parallel sensor pairs .................152

8.7.9 Implementing muting using sequential sensor pairs ...................154

8.7.10 Function block Muting with crossed sensors — forward or

reverse direction only .....................................................................157

8.7.11 Function block Muting with crossed sensors — bidirectional.......159

8.8 Press application function blocks....................................................................162

8.8.1 Eccentric Press Contact function block.........................................162

8.8.2 Universal Press Contact function block.........................................168

8.8.3 Press Setup function block ............................................................174

8.8.4 Press Single Stroke function block................................................177

8.8.5 Press Automatic function block .....................................................181

8.8.6 N-Break Press function block.........................................................184

9 Commissioning..............................................................................................................191

9.1 UE4470 device states......................................................................................191

9.1.1 Device state functionality...............................................................192

9.1.2 Device state changes .....................................................................192

9.1.3 Automatic execution state and normal state................................193

9.2 Technical commissioning.................................................................................193

9.2.1 Commissioning UE4470 devices...................................................193

9.2.2 Transferring the configuration .......................................................194

9.2.3 Verifying/validating UE4470 device behavior...............................194

9.2.4 LOCK the configuration ..................................................................194

9.2.5 System self-test after switching on................................................195

9.2.6 General acceptance of the UE4470..............................................195

10 Fault diagnosis..............................................................................................................196

10.1 What to do in case of faults .............................................................................196

10.2 SICK support .....................................................................................................196

10.3 Error types.........................................................................................................196

10.4 Error display information..................................................................................197

10.5 Error history information ..................................................................................200

10.6 System behavior based on power supply problems .......................................203

10.6.1 Behavior during low voltage conditions.........................................203

10.6.2 Automatic recovery from low voltage conditions ..........................203

10.7 System performance in the case of malfunctions in connected devices......203

10.7.1 Effect on the UE4470.....................................................................203

10.7.2 Effect on the safety-rated inputs ...................................................203

10.7.3 Effect on the safety-rated outputs .................................................204

10.7.4 Effect on the safety-rated controller/the process image .............204

10.8 Reset function...................................................................................................205

10.8.1 Reset type .......................................................................................205

10.8.2 Reset type and UE4470 status......................................................205

Operating Instructions

UE4470

Subject to change without notice

Contents

11 Maintenance ................................................................................................................. 206

11.1 Cleaning............................................................................................................ 206

11.2 Inspection......................................................................................................... 206

11.3 Replacing units................................................................................................. 207

12 Technical specifications.............................................................................................. 208

12.1 Data sheet ........................................................................................................ 208

12.2 Response time ................................................................................................. 212

12.2.1 UE4470 operational flow and cycle time...................................... 213

12.2.2 Calculation of the response time .................................................. 217

12.2.3 Elements of the response time ..................................................... 217

12.2.4 Response time calculation examples ........................................... 219

12.2.5 Verifying the response time........................................................... 221

12.2.6 Input response times ..................................................................... 221

12.3 Dimensional drawing ....................................................................................... 222

13 Ordering information.................................................................................................... 223

13.1 UE4470 Safety Network Controller................................................................. 223

13.2 UE4470 Safety Network Controller accessories ............................................ 223

14 Annex ............................................................................................................................. 225

14.1 Planning table for the configuration ............................................................... 225

14.2 DeviceNet/DeviceNet Safety connection types ............................................. 227

14.3 Explicit messaging............................................................................................ 228

14.3.1 General information ....................................................................... 228

14.3.2 Receiving an Explicit Message ...................................................... 230

14.3.3 Initiating an Explicit Message transmission ................................. 232

14.4 EC declaration of conformity ........................................................................... 233

14.5 Checklist for the manufacturer ....................................................................... 235

14.6 Glossary ............................................................................................................ 236

14.7 List of tables..................................................................................................... 238

14.8 List of illustrations............................................................................................ 242

Chapter 1 Operating Instructions

UE4470

Subject to change without notice

About this document

1 About this document

Thank you for purchasing the UE4470 IP20 Safety Network Controller for DeviceNet

Safety. Please read this chapter carefully before working with this documentation and the

UE4470.

1.1 Function of this document

These operating instructions are designed to address the technical personnel of the ma-

chine manufacturer or the machine operator with regard to the safe mounting, installation,

configuration, electrical installation, commissioning, operation and maintenance of the

UE4470.

These operating instructions do not provide instructions for operating machines on which

the UE4470 has been, or could be, integrated. Information on this is to be found in the

appropriate operating instructions of the machine provided by the machine manufacturer.

1.2 Target group

These operating instructions are intended to be used by planning engineers, developers

and the operators of plants and systems which are to be protected by one or several safety

systems in connection with the UE4470. People who integrate the UE4470 into a ma-

chine/system, initialize its use, or who are in charge of servicing and maintaining the de-

vice should also reference these operating instructions.

1.3 Scope

These operating instructions are original operating instructions.

These operating instructions are applicable to the UE4470 Safety Network Controllers with

one of the following entries on the type label in the field Operating instructions:

• 8011218/R646

• 8011218/TF87

This document is part of SICK part number 8011218 (operating instructions “UE4470 —

IP20 Safety Network Controller for DeviceNet Safety” in all available languages).

These operating instructions are applicable to the UE4470 Safety Network Controllers with

the following type-label entry in the Firmware Revision field: 1.12 or later.

Note

Operating Instructions Chapter 1

UE4470

Subject to change without notice

About this document

1.4 Depth of information

T

hese operating instructions contain the following information about the UE4470:

 installation and mounting

 electrical installation

 putting into operation and configuration

 integration into other safety systems

(examples of circuits)

 care and maintenance

 fault, error diagnosis and trouble-

shooting

 part numbers

 conformity and approval

Planning and using protective devices such as the UE4470 also requires specific technical

skills which may not be detailed in this documentation. When operating the UE4470, the

national, local and statutory rules and regulations must be observed.

General information on health and safety using Active Optical-electronic Protective Devices

(AOPDs) is contained in the brochure “Safe Machines with Opto-Electronic Protective

Devices” from SICK.

We also refer you to the SICK homepage on the Internet at

www.sick.com

Here you will find information on:

 sample applications

 a list of frequently asked questions about the UE4470

 these operating instructions for viewing and printing

1.5 Abbreviations and definitions

The logical state of an input or function block that represents a logical “1”.

Application Diagnostic Output = configurable signal output that indicates a specific device

status (e.g. SICK C4000 safety light curtain).

Indicates status of very high error occurrence on communication cables. Detects problem

when the internal error counter counts more errors than the perdetermined threshold

figure.

C4000 series safety light curtain from SICK.

SICK Configuration & Diagnostic Software = software for the configuration of the UE4470.

A device configured to produce change-of-state (COS) message will produce data when-

ever the data changes, or at a base heartbeat rate. This adjustable heartbeat rate provides

a way for the consuming device to know that the producer is still alive and active.

Logical communication channel between DeviceNet (Safety) nodes. Connections may be

e.g. master-slave or target-originator.

A device configured to produce a cyclic I/O message will produce its data at a precisely de-

fined interval. This type of I/O messaging allows the user to configure the system to pro-

duce data at a rate appropriate for the application. Depending on the application this can

reduce the amount of traffic on the wire and more efficiently use the available bandwidth.

Note

Active

ADO

Busoff

C4000

CDS

Change of State (COS)

Connection

Cyclic

Chapter 1 Operating Instructions

UE4470

Subject to change without notice

About this document

Used to denote the dangerous state of the machine represented as a movement of a ma-

chine part. In practical operation, there may be a number of different dangerous states for

a single machine, e.g.

 machine movements

 electrical conductors

 visible or invisible radiation

 a combination of several risks and hazards

A digital, multi-drop field bus network that connects and serves as a communication net-

work between industrial controllers and I/O devices managed by the Open DeviceNet Ven-

dors Association (ODVA) in accordance with EN 50325L2.

A safety rated version of the DeviceNet field bus communication protocol.

Electronic Data Sheet. An electronic file that provides device specific information used in

the configuration of a device on to the DeviceNet/DeviceNet Safety network.

Expected Packet Interval. A parameter in DeviceNet and DeviceNet Safety that defines the

frequency of data transmission between two network connections, e.g. devices.

Electro-sensitive protective equipment, e.g. SICK C4000 safety light curtain.

The logical state of an input or function block that represents a logical “0”.

M4000 series multiple light beam safety devices (perimeter guards).

Media Access Code Identifier. The address of a device on DeviceNet or DeviceNet Safety.

Available MAC IDs range from 0L63. Each node on the network must have a unique MAC ID

in order to function properly.

Mean Time Between Failure. The average time between failure occurrences.

Normally Closed Contact (e.g. 2NC = 2 Normally Closed Contacts).

Normally Open Contact (e.g. 2NO = 2 Normally Open Contacts).

Open DeviceNet Vendor Association. A non-profit association of vendors established for

the promotion of DeviceNet/DeviceNet Safety.

A DeviceNet Safety device that configures and requests information from a target device.

An originator device on DeviceNet Safety corresponds to a master device on standard

DeviceNet.

Output signal switching device (e.g. PNP Semiconductor-based safety output).

Originator Unique Identifier.

The Probability of Failure on Demand in accordance with the functional safety testing

requirements outlined in IEC 61508.

The Probability of Failure per Hour in accordance with the functional safety testing

requirements outlined in IEC 61508.

(Safety) Programmable Logic Controller.

A slave configured for polled I/O will receive “output” data from the master device in a

sequential order that is defined by the master’s scan list. The master’s polling rate is

determined by the number of nodes in the scan list, the DeviceNet baud rate, the size of

messages produced by the master and each node in its scan list and the internal timing of

the master device. For a given system configuration, this messaging method will provide

deterministic behavior. Polled I/O “output” data can be Single-Cast or Multi-Cast.

A periodic test performed to detect failures in a safety-rated system so that, if necessary,

the system can be restored to an “as new” condition or as close as practical to this

condition.

S3000 series safety laser scanners from SICK

Dangerous State

DeviceNet

DeviceNet Safety

EDS

EPI

ESPE

Inactive

M4000

MAC ID

MTBF

NC

NO

ODVA

Originator

OSSD

OUNID

PFD

PFH

PLC (SPLC)

Polled

Proof Test

S3000

Operating Instructions Chapter 1

UE4470

Subject to change without notice

About this document

A programmable logic controller third-party certified as a safety rated device (e.g. SICK

Safety Network Controller or other third-party safety-rated controller).

Safety Configuration Identifier. Also known as a configuration signature. The value of the

SCID is a concatenation of the configuration CRC and a Time Stamp. The SCID is used to

ensure that a DeviceNet Safety device has the expected configuration.

Safety data link = SICK safety interface (connection of OSSDs and EFI) using devices such

as SICK C4000 series safety light curtains or S3000 series safety laser scanners.

Refers to the manufacturer of this device SICK AG, and all SICK AG subsidiary companies.

Safety Integrity Level in accordance with IEC 61508 standard.

Safety Network Configuration Tool used for the configuration of DeviceNet Safety-capable

devices (i.e. SICK DeviceNet Safety Configuration Tool with Safety Extensions)

Safety Network Number. A DeviceNet Safety attribute which allows for multiple virtual

safety networks on a single physical network.

When a scanner module issues a strobe command to all the devices in its scan list, those

devices that are configured for strobed messaging will respond with data.

A connection on DeviceNet Safety in which the target device responds to an originator with

the information that the originator device has requested. A target device on DeviceNet

Safety corresponds to a slave device on standard DeviceNet.

Target Unique Identifier.

Unconnected Message Manager.

All IP20 remote I/O bus nodes of the UE4470 family. In the context of this document, the

UE4470 definition does not include the DeviceNet Safety IP67 bus nodes that utilize a

similar naming convention (e.g. UE4420 or UE4450).

Uninterrupted supply voltage for use by device logic and safety capable input circuitry

(including test/signal outputs).

Interruptible (switchable) supply voltage for use by safety capable output circuitry.

The person or persons that implement the UE4470 and all devices connected to UE4470

into a safety-relevant application. “User” generically describes personnel from original

equipment manufacturers (OEMs), system integrators and end-users.

Safety-rated controller

S

CID

SDL

SICK

SIL

SNCT

SNN

Strobe

Target

TUNID

UCMM

UE4470

U

L

, U

L1

, U

L2

U

S

User

Chapter 1 Operating Instructions

UE4470

Subject to change without notice

About this document

1.6 Symbols used

R

ecommendations are designed to give users assistance in their decision-making process

with respect to a certain function or a technical measure.

Refer to notes for special features of the device.

L

ED symbols indicate the status of an LED on the UE4470:

T

he LED is off.

The LED turns red.

The LED flashes red.

Display indicators show the status of the 7Lsegment display

 Constant display of characters, e.g. 8

 Flashing display of characters, e.g. 8

 Changing display of characters, e.g. L and 2

Software notes provide additional information regarding how to configure the UE4470

Safety Network Controller using the UE4470 plug-in for SICK DeviceNet Safety

Configurator or other safety network configuration tool (UE4470).

Instructions for taking action are shown by an arrow. Carefully read and follow the instruc-

tions for action.

Sender and receiver

In drawings and diagrams, the symbol  denotes the sender and the symbol  denotes

the receiver of an electro-sensitive protective equipment (ESPE) (e.g. safety light curtain

such as SICK C4000).

Warning!

A warning notice indicates an actual or potential risk or health hazard. They are designed

to help users prevent accidents. Carefully read and follow the warning notices!

DeviceNet and DeviceNet Safety are registered trademarks of the Open DeviceNet Ven-

dor Association, Inc. (ODVA). Other product names and company names referenced in this

manual are trademarks or registered trademarks of their respective companies.

Recommendation

Notes

,  Red,  Red



 Red

 Red

, , 



 Take action …

 



WARNING

Trademark

Operating Instructions Chapter 2

UE4470

Subject to change without notice

On safety

2 On safety

This chapter deals with your own safety and the safety of the equipment operators.

Please read this chapter carefully before starting to work with the UE4470 or with

machinery that utilizes the UE4470 as part of the machine safeguarding strategy.

2.1 Qualified safety personnel

The UE4470 and the components connected to it may only be assembled, operated and

maintained by qualified safety personnel. Qualified safety personnel are defined as

persons who …

 have undergone the appropriate technical training

and

 have been instructed by the responsible machine operator in the operation of the

machine and the current valid safety guidelines

and

 are sufficiently familiar with the applicable official health and work safety regulations,

directives and generally recognized engineering practice (e.g. DIN standards, VDE

stipulations, engineering regulations from other EC member states) that they can

assess the work safety aspects of the power-driven equipment

and

 have access to the operating instructions for the UE4470 flexible safety controller

(8011215) and have read them

and

 have access to the user manual Configuration System DeviceNet Safety (8011293) and

have read them

and

 have access to the operating instructions “DeviceNet Planning and Installation Manual”

of the Open DeviceNet Vendor Association (ODVA) (www.odva.org) and have read them

and

 have access to the installation and operating instructions for protective devices (e.g.

C4000 or S3000) connected to the UE4470, either directly or via remote I/O, and have

read them.

Prior to the implementation of a UE4470, qualified safety personnel should conduct a risk

assessment on the machine to determine its suitability for the application.

Chapter 2 Operating Instructions

UE4470

Subject to change without notice

On safety

2.2 Safety concept

T

he UE4470 has been third party certified as safety-rated device in accordance with the

standards and testing criteria current at the time of certification. The safety tests consist

of test routines that run during all operating phases of the device.

Applicable standards include, but are not limited to, the following:

 EN ISO 13849L1 (UE4470 supports applications up to category 4, performance level e).

 IEC 61508 (UE4470 supports applications to SIL3).

In general, the UE4470 requires that all safety-relevant input devices have to indicate a

normal run by “ON” state. The “OFF” state is considered to be the safe state.

All safety capable inputs and safety capable outputs should be Inactive (fault detected

state) during any fault or safety trip condition.

2.2.1 Functional safety per IEC 61508

Functional safety of electrical/electronic/programmable electronic (E/E/PE) safety-related

devices is now guided by international standard IEC 61508. Use of these devices involves

identifying specific hazardous conditions that may lead to serious consequences and then

establishing the maximum tolerable frequency.

IEC 61508 defines functional safety integrity targets for the maximum tolerable failure

rate for each piece of equipment, based on that equipment’s relative contribution to the

hazard being considered. These “safety integrity levels” (SIL) fall into two classifications:

low demand mode of operation and high demand mode of operation. The following table

defines the SIL levels for high demand mode of operation.

Safety Integrity Level High demand mode of operation

(probability of a dangerous failure per hour)

4  10

–9

to < 10

–8

3  10

–8

to < 10

–7

2  10

–7

to < 10

–6

1  10

–6

to < 10

–5

The UE4470 is certified as meeting SIL3 requirements in accordance with IEC 61508

Part 1.

Tab.

1

:

SIL definition for high

demand mode of operation

Operating Instructions Chapter 2

UE4470

Subject to change without notice

On safety

2.2.2 Risk assessment

A risk assessment must be completed in order to determine the tasks and hazards asso-

ciated with a machine and what methods are utilized to reduce or eliminate the hazards

associated with each task. Standards and technical reports that describe the process of

risk assessment include, but are not limited to, the following:

 EN ISO 14121L1

 ANSI/RIA R15.06

 ANSI B11.TR3

Risk assessment is an iterative process. Once tasks and hazards have been identified and

a risk has been determined, the process of risk reduction begins. This entails the selection

and implementation of safeguards to mitigate the hazard. After consideration of imple-

mentation of the safeguard(s), the next step is to perform a subsequent risk assessment

based on the changes. Additional risk reduction may be necessary for any residual risks

that may exist.

Before the first commissioning, perform a risk assessment!

Consult your local, regional and national regulations/standards/technical reports for

additional details regarding the performance of risk assessment and implementation of

risk reduction requirements.

2.2.3 Hardware configuration

 To ensure safety-rated operation, use only SICK configuration software in conjunction

with the corresponding SICK safety-rated device.

 Follow the specifications outlined in these operating instructions.

 UE4470 is designed to utilize safety-rated input devices that have “closed” contacts

that indicate a normal run (e.g. Active) state. The Inactive or “open” state is considered

to be the safe state.

 Connect only equipment that can be isolated safely from the main power source.

Only use safety-relevant hardware and software for safety-relevant applications!

Hardware modules and software components that are not safety-rated may be used to

process non-safety-rated signals and only monitor safety-rated signals. However, these

devices cannot be used to carry out safety-related task processing.

2.2.4 Programming requirements

The UE4470 supports safety capable inputs, test/signal outputs and safety capable

outputs. It is imperative that only safety-relevant signals from the UE4470 are utilized for

safety-relevant logic.

You may only use safety-relevant signals for implementing safety-relevant logic. Since the

UE4470 cannot determine whether standard devices or safety-relevant devices have been

connected to the UE4470 or associated remote I/O devices, the user of these device(s)

must be sure that the signals used in any safety-relevant control strategy are appropriate

and correct.



WARNING



WARNING

Chapter 2 Operating Instructions

UE4470

Subject to change without notice

On safety

2.2.5 Communication

The UE4470 communicates via DeviceNet and DeviceNet Safety via the five-pole terminal

block located on the front of the unit. For configuration of the UE4470, utilize the UE4470

plug-in software provided with SICK DeviceNet Safety Configurator or optional UE4470

plug-in software in conjunction with a compatible safety network configuration tool.

You must ensure that the data that is transmitted via DeviceNet Safety is suitable for

your application logic!

Data that is transmitted from a remote DeviceNet Safety Target device (e.g. bus node) to

the UE4470 is communicated via a safety rated protocol. It is the user’s responsibility to

ensure that the data is utilized by the UE4470 correctly. The UE4470 cannot determine

whether the sensor/actuator that is attached to the DeviceNet Safety Target device is a

standard device or a safety-rated device. Therefore, users must ensure that the data uti-

lized for the relevant safety logic is suitable for their application.

2.2.6 Response time

It is imperative that all safeguarding devices be implemented to prevent access to all

hazards. A key factor in determining device location is the minimum safety distance.

Formulas that describe minimum safety distance vary based on device type, safeguard

orientation, resolution, system response time, and more. Consult applicable machine

standards and regulations for information regarding safeguarding device implementation

requirements.

The response time associated with the UE4470 is described in section 12.2 “Response

time” on page 212.

2.3 Applications of the device

The UE4470 is a safety-rated programmable logic controller with local safety capable in-

puts, local safety capable outputs, test/signal outputs with the capability to communicate

with remote I/O devices via DeviceNet and DeviceNet Safety.

It can be used

 in accordance with IEC 61508 to SIL3

 in accordance with EN 62061 to SILCL3

 in accordance with EN ISO 13849L1 to category 4 or performance level e

The degree of safety actually attained depends on the external circuit, the design of the

wiring, the parameter configuration, the selection of the control switches and their

placement on the machine.



W

ARNING

Operating Instructions Chapter 2

UE4470

Subject to change without notice

On safety

The UE4470 may be used to acquire or provide data to other devices. The UE4470 may be

u

tilized as a:



DeviceNet Safety originator device to acquire data via connection with remote I/O devi-

ces (e.g. SICK UE4400 IP67 remote I/O, SICK UE4421 IP20 remote I/O or a different

SICK UE4470);

 DeviceNet Safety target device to provide data via connection with a DeviceNet Safety

originator (e.g. a different SICK UE4470);

 DeviceNet slave device to provide data via connection with a DeviceNet master (e.g.

third-party DeviceNet scanner, programmable logic controller or human-machine

interface)

Standard devices may be connected to the safety capable inputs as long as the data

generated by the UE4470 based on these devices is not used for safety-relevant logic.

Only DeviceNet Safety originator devices may control safety capable outputs.

Signals generated by any device must be suitable for the application logic.

Since non-safety-rated devices can be connected to the safety capable inputs or safety

capable outputs of the UE4470, it is imperative that

 all safety capable input signals are suitable for the application when implemented in

safety-relevant applications

and

 all safety capable output signals are suitable for the application when implemented in

safety-relevant applications.

Control logic that utilizes information from the UE4470 must consider whether these devi-

ces are suitable for the application. Safety devices should satisfy the rating required for

the application (e.g. a type 4 safety light curtain should be implemented to satisfy type 4

machine safeguarding requirements).

The implementation of devices on the UE4470 must meet regulatory requirements!

The UE4470 is suitable for safety-related applications in accordance with IEC 61508 up to

Safety Integrity Level (SIL) 3 and up to category 4, performance level e of EN ISO 13849L1.

However, the user is responsible for insuring that all devices connected to the UE4470 are

suitable for their intended purpose and that the logic, wiring, installation and implementa-

tion (including configuration, etc.) of these devices is in accordance with the application

requirements, regulations (including local, regional and national) and standards.

2.3.1 Additional precautions according to UL 1604

This equipment is suitable for use in Class I, Div. 2, Group A, B, C, D or non-hazardous

locations only.

Warning: Explosion hazard!

Substitution of components may impair suitability for Class I, Div. 2!

 Do not disconnect equipment unless power has been switched off or the area is known

to be non-hazardous!

 Do not disconnect the USB cable unless power has been switched off or the area is

known to be non-hazardous!



WARNING



WARNING

Chapter 2 Operating Instructions

UE4470

Subject to change without notice

On safety

2.4 General safety notes and protective measures

P

ay attention to the safety notes!

Please observe the following directives, regulations and standards to ensure the correct

and safe use of the UE4470.

The national and international legislative provisions apply to the installation and use of the

UE4470 and the safety components connected to it, e.g. a programmable safety-rated

device, a safety light curtain or components with a contact output; these legislative provi-

sions apply also to the commissioning and recurring technical examinations, in particular:

For North America:

 Regulations and requirements administrated by the Occupational Safety and Health

Administration (OSHA). These include those regulations outlined in Title 29 of the Code

of Federal Regulations Part 1910 Subpart O [29CFR1910 Subpart O].

 Ministry of Labor regulations (Canada)

 other relevant health and safety regulations

For Europe:

 Machinery Directive 2006/42/EC

 Low Voltage Directive 2006/95/EC

 EMC Directive 2004/108/EC

 Work Equipment Directive 89/655/EEC

 work safety regulations and safety rules

 other relevant health and safety regulations

For Japan:

 article 42 of the Industrial Safety and Health Law

 article 44 of the Industrial Safety and Health Law

 other relevant health and safety regulations

“Type Test” requirements are provided in Article 44 of the Industrial Safety and Health

Law. The requirements apply to complete systems and not specifically to a single compo-

nent within the system. Use of components as a “safety device for press machines or

shearing tool” in accordance with Article 42 of the Industrial Safety and Health Law re-

quires that the entire system be approved for that purpose.

The UE4470 has been third party certified as compliant with the following:

European Union (EU) legislation compliance:

 Machinery Directive 2006/42/EC

 Low Voltage Directive 2006/95/EC

 EMC Directive 2004/108/EC

European standards compliance:

 IEC 61508 (SIL1 through SIL3)

 EN ISO 13849L1 (performance level a through performance level e)

 EN 61131-2

 EN ISO 13850

 EN 60204-1



WARNING

Note

Operating Instructions Chapter 2

UE4470

Subject to change without notice

On safety

International standards compliance:

 IEC 61508 (SIL1 through SIL3)

 IEC 61131L2

 IEC 60204L1

 IEC 61000L6L2



IEC 61000L6L4

North American standards compliance:

 ANSI/RIA R15.06

 ANSI B11.19

 UL 508

 UL 1604

 CSA 22.1 No. 14

 CSA 22.2 No. 213

Open DeviceNet Vendor Association compliance:

 DeviceNet conformance test

 DeviceNet Safety conformance test

2.4.1 General requirements

 Manufacturers and operators of the machine with which the UE4470 is implemented

are responsible for obtaining and observing all applicable safety regulations and rules.

 The notes in these operating instructions (e.g. on use, mounting, installation or integra-

tion into the existing machine control system) must be observed. The test procedures in

the operating instructions of all connected components must be observed.

 The tests must be carried out by qualified safety personnel or specially qualified and

authorised personnel and must be recorded and documented to ensure that the tests

can be reproduced and retraced at any time by third parties.

 Use only appropriate components or devices that comply with relevant safety standards

corresponding to the required performance level according to EN ISO 13849L 1 and

safety integrity level (SIL). Conformity to the requirements of the required performance

level and safety integrity level must be determined for the entire system. It is recom-

mended to consult with a certification body regarding assessment of conformity to the

required safety integrity level.

 The user must confirm compliance with the applicable standards for the entire system.

 Disconnect the module from the power supply before wiring. Devices connected to the

module may operate unexpectedly if wiring is performed while power is supplied.

 Discharge any electrostatic charge before handling the UE4470. An electrostatic charge

can damage the electronics boards internal to the UE4470.

 Do not get your fingers caught when handling/inserting the terminal blocks.

 The life of the module depends on switching conditions. Always conduct trial operation

under actual conditions on the machine that the module is being implemented to con-

firm operation and using a switching frequency that will not exceed performance levels.

Chapter 2 Operating Instructions

UE4470

Subject to change without notice

On safety

 The testing of the components and overall system must be carried out by qualified

s

afety personnel as defined in chapter 2.1 “Qualified safety personnel” on page 13 that

have been authorized to perform this function. Testing must be recorded and

documented to ensure that the tests can be reconstructed and retraced at any time by

third parties.

 The operating instructions must be made available to the personnel operating the

machine in which the UE4470 has been implemented.

2

.4.2 Compliance with EMC directive

SICK industrial safety devices are designed for local DC supply applications only!

Machines where safety devices are used must be installed and designed according to the

Lightning Protection Zone (LPZ) EN 62305L1. Required immunity levels can be achieved

through the use of external protective devices. The installed surge protective devices (SPD)

should meet the requirements of EN 61643L11.

The installation must prevent disturbances according to IEC 61000L 4L16 (common mode

disturbances in the frequency range of 0 Hz to 150 kHz).

The UE4470 complies with the relevant EMC standards so that it can be easily integrated

into the overall machine control system. The user, however, must confirm system confor-

mance. Conditions vary based on configuration, wiring and other conditions of the equip-

ment or control panel that the UE4470 is installed in. The user is therefore responsible for

performance of the final check to confirm that devices and the overall machine conform to

EMC standards.

2.4.3 Compliance with Low Voltage Directive

Always ensure that devices operating at voltages of 50 V AC to 1000 V AC and 75 V DC to

1500 V DC meet the necessary safety standards for the Controller (EN 61131L2).

2.4.4 Compliance with EC directives

DeviceNet products that comply with EC directives must be installed as follows:

 All UE4470 devices must be installed within control panels rated IP 54 minimum.

 Satisfy the power supply requirements outlined in section 5.2 “Power supply selection”

on page 48.

 The UE4470 also conforms to the Common Emission Standard (EN 50081L2). Radiated

emission characteristics (10-m regulations) may vary depending on the configuration of

the control panel used, other devices connected to the control panel, wiring and other

conditions. You are responsible for confirming that the overall machine or equipment

conforms to EC directives.



WARNING

Page is loading ...

SICK UE4470 IP20 Safety Network Controller for DeviceNet Safety Operating instructions

Related papers

Other documents