IDEC FS1A User Manual

Download

FS9Z-B1073

FS1A

SERIES

Safety Controller

SafetyOne

User’s manual

SAFETY PRECAUTIONS

z Carefully read this user’s manual to ensure correct operation before starting installation, wiring,

operation, maintenance, and inspection of the SafetyOne.

z In this user’s manual, safety precautions are categorized in order of importance- Warning and

Caution, as follows:

Warning

Caution

z Do not disassemble, repair, or modify SafetyOne. This will cause impairment of the safe

z Turn off the power to SafetyOne before starting installation, removing, wiring, maintenance, or

z Before operating SafetyOne, carefully read the instruction sheet and this manual, and ensure that

z The installation, wiring, configuration, and operation of SafetyOne must be performed only by

z SafetyOne must be subjected to regular proof test verification that each function of SafetyOne is

z An operational check must be performed daily on the SafetyOne. z Installation of SafetyOne must be performed according to the instructions found in the instruction

z Do not use the monitor outputs or solenoid/lamp outputs as a safety outputs. When there is a

z Do not use the start input and the external device monitor input as a safety input. When there is a

z Use the SafetyOne in compliance with laws and regulations of the country in which it is being

z Use safety inputs and safety outputs in circuit configurations conforming to the application

Warning notices are used to emphasize that improper operation may cause severe personal

injury or death.

Caution notices are used where inattention might cause personal injury or damage to

equipment.

operability of SafetyOne.

inspection of SafetyOne. This can cause electrical shocks or fire hazard.

the environment conforms to the requirements of SafetyOne specifications. If SafetyOne is operated in an environment that exceeds the specifications of SafetyOne, it causes impairment of the safe operation of SafetyOne.

“Safety responsible persons”. Safety responsible persons are personal who have requisite qualification authorizing them as being capable of safely carrying out each step including the designing, installation, operation, maintenance, and disposal of SafetyOne. Persons without this technical expertise must not use SafetyOne.

performing up to the required standard.

sheet and this manual. Improper installation may cause the SafetyOne to fail.

failure in SafetyOne or peripheral devices, Impairment of the safe operation of the system is possible.

failure in SafetyOne or peripheral devices, Impairment of the safe operability of the system is possible.

used.

according to the usage, and the safety requirements.

Warning

z Calculate respective safety distances, taking into consideration the response time of the

z Applicable safety performance is dependent on each system configuration. z Use a power supply that meets following required specifications:

z Ground the V- line (0V DC) for ground diagnosis. z In the case of a new configuration or modified installation, be sure to perform a check for each

z Implement protective measures that personal, other than safety responsible persons operating

z Separate SafetyOne from devices and wires which are not according to class 2 circuit

SafetyOne, safety devices to be connected to the SafetyOne, and each other device that forms a part of the system configuration.

-Conforms to the power supply rating of SafetyOne

-The primary and secondary circuits are separated by double insulation or reinforced insulation.

-Has the functionality or the functional equivalent of the control voltage and current of class 2 circuit, as defined in UL508 or UL1310.

-Is in compliance with safety laws and regulations relating to electrical safety, EMC, and like under the laws and regulations of the country in which it is being used.

input and output function.

the SafetyOne, are unable to modify the configuration.

requirements.

Warning

z Do not connect devices having input and output specifications that do not satisfy the

Connected Control Device Requirements

requirements of the SafetyOne. Refer to the following for information on the requirements of connected devices.

Emergency stop switch

Interlock switch, limit switch

Safety switch with lock Spring lock safety switch with solenoid

Mode select switch

Enabling switch Device conforming to IEC/EN60947-5-8 (or IEC/EN60947-5-1)

Solid state output device

Non-contact interlock switch IDEC HS7A series

Safety relay

Contactor (electromagnetic switch)

Other control devices

Muting sensor

Muting lamp

z Make sure that the end-user thoroughly understands the contents of this user’s manual.

Note 1: The SafetyOne reads input data at a fixed interval. Therefore, if a connected device does

not satisfy the conditions below, the SafetyOne may not be able to process the input data normally. ・Connectable solid state output device: Pulse output off cycle of 40ms or more and an off time of 1ms or less.

The device may not be usable even if the above specifications are satisfied. Be sure to

thoroughly confirm operations using the actual device.

Device equipped with a direct opening action mechanism conforming to IEC/EN60947-5-5 or indicated in IEC/EN60947-5-1

Device equipped with a direct opening action mechanism indicated in IEC/EN60947-5-1

Device conforming to regulations of the country where used and required categories (for example, switch conforming to IEC/EN60947-1)

Device conforming to regulations of the country where used (for example, safety light curtain conforming to IEC/EN61496-1)

PNP output (See Note 1)

Relay equipped with forced guide mechanism or conforming to EN50205

Contactor equipped with forced guide mechanism

Use start switches and other devices that conform to the regulations of the country where used.

Device conforming to IEC/EN60947-5-2 as shown below

-3 wire transmission (dark on) photoelectric switch which has a PNP open collector output.

-3 wire (normal open) proximity switch which has a PNP open collector output.

Incandescent bulb indicator light conforming to IEC/EN60947-1 or IEC/EN60947-5-1

Note 2: It is not possible to detect a disconnection of the muting lamp when using an LED indicator light.

Caution

z SafetyOne is designed for installation within an enclosure. Do not install SafetyOne outside an

enclosure. Install SafetyOne in enclosure rated IP54 or higher.

z Install SafetyOne in environments described in the catalog, instruction sheet, and user’s manual.

If SafetyOne is used in places where the SafetyOne is subjected to high temperature, high

humidity, condensation, corrosive gases, excessive vibrations, and excessive shocks then

electrical shocks, fire hazard, or malfunction may result.

z Environment for using the SafetyOne is “Pollution degree 2”. Use SafetyOne in environments of

pollution degree 2 (according to IEC/EN60664-1).

z Prevent SafetyOne from falling while moving or transporting of the SafetyOne, otherwise damage

or malfunction of the SafetyOne may result.

z Prevent metal fragments and pieces of wire from dropping inside the SafetyOne housing. Put a

cover on the SafetyOne during installation and wiring. Ingress of such fragments and chips may

cause fire hazard, damage or malfunction.

z Install SafetyOne, so that there is adequate distance from the walls, heat generating bodies, and

peripherals, taking into consideration space requirements for maintenance and ventilation.

z Install SafetyOne on 35mm DIN rails with BNL6 mounting clips (sold separately) on both sides of

SafetyOne.

z Wire the connectors with conforming cables or ferrules. z Ground FE terminal to assure electromagnetic compatibility. z Use common 0V DC, if different power supplies are used for SafetyOne and other devices (ex.

safety light curtain.

z Wire the inputs and outputs so that they are separated from power lines. z When overcurrent flows into output terminals, the protective function turns off the output. However,

when overcurrent status lasts long, internal protective elements will fuse. To protect the internal

elements, insert fuses of double the rated value to each terminal.

z Use IEC60127 approved fuses on the power line of SafetyOne. (This is required for equipment

incorporating SafetyOne that is destined for Europe.)

z When disposing of SafetyOne, handle it under the laws and regulations of the country in which it

is disposed.

BEFORE GETTING STARTED

Thank you for your purchase of the IDEC SafetyOne (Type Number FS1A-C01S). This user’s manual describes the specifications, and the procedures for installing and operating the SafetyOne. Read this manual carefully before using the SafetyOne so that you have an adequate understanding of its functions and performance.

 About directives and standards

SafetyOne is approved for following directives and standards by TÜV SÜD.

1. EU directives

-Machinery Directive: Directive 98/37/EC

-EMC Directive: Directive 89/336/EEC

2. EN standards / IEC standards / ISO standards

-IEC 61508 Part1-7, EN 954-1, ISO 13849-1, IEC/EN 62061, IEC/EN 61496-1, IEC/EN 61000-6-2, IEC/EN 61000-6-4

SafetyOne is approved for following directives and standards by UL.

1. UL standards

- UL 508

2. CSA standards

- CSA C22.2 No.142

NOTE

• The reproduction, transfer, sale, assignment, or loan of any or a part of this manual is strictly

prohibited.

• The contents of this manual are subject to change without notice.

• Thorough measures have been taken in preparing the contents of this manual; however, in the

case you find an error or the like, please bring it to the attention of your IDEC sales representative.

CONTENTS

Chapter1 OVERVIEW .......................................................................................................................................................... 1-1

About the SafetyOne .............................................................................................................................................. 1-1

Features of the SafetyOne ..................................................................................................................................... 1-2

Chapter2 PRODUCT SPECIFICATIONS ............................................................................................................................. 2-1

Chapter3 INSTALLATION AND WIRING ............................................................................................................................. 3-1

Installation method................................................................................................................................................. 3-3

Wiring method......................................................................................................................................................... 3-6

Chapter4 BASIC OPERATIONS .......................................................................................................................................... 4-1

Turning on the power ............................................................................................................................................. 4-2

Using the protective cover..................................................................................................................................... 4-2

Logic configuration ................................................................................................................................................ 4-3

Timer configuration ................................................................................................................................................ 4-5

Cancellation the Protection state .......................................................................................................................... 4-7

Canceling the Stop state........................................................................................................................................ 4-8

Chapter5 LOGIC .................................................................................................................................................................. 5-1

Logic 1: General purpose logic for various apparatuses.................................................................................... 5-1

Logic 2: General purpose logic for NO/NC contact inputs................................................................................ 5-10

Logic 3: General purpose logic for apparatuses with openings....................................................................... 5-20

Logic 4: Muting function logic for apparatuses with openings ........................................................................ 5-30

Logic 5: General purpose logic for devices for which sync time between contacts cannot be specified .... 5-40

Logic 6: The logic applicable for selection of active safety input device........................................................ 5-49

Logic 7: Partial stop 1 logic for various apparatuses........................................................................................ 5-59

Logic 8: Partial stop 2 logic for various apparatuses........................................................................................ 5-70

Logic functions..................................................................................................................................................... 5-80

Chapter6 TROUBLE SHOOTING ........................................................................................................................................ 6-1

Error descriptions and troubleshooting ............................................................................................................... 6-1

Chapter7 APPENDIX ........................................................................................................................................................... 7-1

Minimum Distance .................................................................................................................................................. 7-1

Maintenance and Inspection.................................................................................................................................. 7-6

Chapter1 OVERVIEW

This chapter provides an understanding of the SafetyOne. Make efficient use of the SafetyOne by thoroughly familiarizing yourself with its functions.

About the SafetyOne

The FS1A series of SafetyOneTM controllers provides safeguard measures for various factory automation equipment and systems, including robots, production machinery, semiconductor manufacturing apparatus, food packaging machinery, and printing machinery. You can easily configure the safety circuits by using multiple safety inputs and outputs and selecting the circuit (logic) built into the SafetyOne.

1-1

Features of the SafetyOne

z You can configure safety circuits without the use of complicated external wiring or

special software, thereby greatly reducing the number of development man-hours required for product certification and the training time of safety responsible persons.

z You can use the DIP switches to select from eight different types of logic circuits and set

the OFF-delay timer value to best match your application.

The SafetyOne has 16 DIP switches and an ENTER button, which can be used to set the built-in types of logic and the delay timer values for the safety output is OFF. Select from the following eight logic configurations. Logic 1: General-purpose logic for various apparatuses Logic 2: General-purpose logic for NO/NC contact inputs Logic 3: General-purpose logic for apparatuses with openings Logic 4: Muting function logic for apparatuses with openings Logic 5: General-purpose logic for devices for which sync time between contacts cannot be specified Logic 6: Mode switching logic for teaching and other device changes Logic 7: Partial stop 1 logic for various apparatuses Logic 8: Partial stop 2 logic for various apparatuses You can set the timer value to 0, 0.1, 0.5, 1, 2, 5, 15, or 30 seconds. You can set the stop category to 0 or 1.

z Conforms to the international safety standards IEC 61508 SIL 3 and ISO 13849-1 PL e

(Category 4).

The SafetyOne can be used for the functional safety standard IEC 61508 series and IEC 62061 SIL 1 to 3, which define the safety performance of machinery that uses microprocessors and software, and for performance levels a to e of ISO 13849-1 and Control category B to 4 of EN954-1, which define safety performance of machinery control systems.

z You can directly connect an emergency stop switch, interlock switch, light curtain, and

other various safety devices.

The SafetyOne provides dual channel direct opening inputs such as an emergency stop switch and interlock switch; dual channel NO/NC inputs such as a non-contact interlock switch; and dual channel solid state inputs such as a safety light curtain and safety laser scanner. These inputs can be enabled by selecting a certain type of logic, thereby enabling the various safety devices.

z The SafetyOne comes with monitor outputs and solenoid/lamp outputs, which can be

used as control signals.

With monitor outputs, you can monitor the status of the SafetyOne, including safety inputs and outputs and error information. When connected to a PLC, the SafetyOne can be used to control all apparatuses and the entire system. The SafetyOne is also provided with solenoid/lamp outputs, which can be used to directly control spring lock safety switches with solenoids. In logic4, muting lamps can be connected to solenoid/lamp outputs.

z Obtain detailed diagnostic information with the LED displays.

The SafetyOne has two 7-segment LED displays for displaying internal information and 30 LED lights for displaying status. You can use these to display input and output information and to obtain detailed diagnostic information on the status of the SafetyOne.

z Control multiple safety devices (12 safety inputs and 4 safety outputs) by a single unit.

The SafetyOne has 12 safety inputs and 4 safety outputs, and it can be configured for up to 6 dual channel inputs 2 dual channel outputs.

1-2

Chapter2 PRODUCT SPECIFICATIONS

This chapter describes product specifications of the SafetyOne.

Parts Descriptions

⑪

①

ENTER

TIMER

(S)

0 .1 .5 1 2 5 15 30

⑧

LOGIC No.

1 2 3 4 5 6 7 8

⑤ ⑥

④

②

LOGICLOGIC ERRORERROR

T0T0 T1T1 T2T2 T3T3 T4T4 T5T5 T6T6 T7T7 T1T100 T1T111 T1T122 T1T133 T1T144 T1T155 X1X166

00.1.1 .5.5 11225511553030

SSAFE-INAFE-IN

X0X0 X1X1

X2X2 X3X3

X4X4 X5X5

X6X6 X7X7

X1X1 00X1X111

X1X1 22X1X133

ININININ

X1X1 44X1X155

X0X0

SSTTA RARTT-IN-IN

X1X1

X1X1 66X1X1 77

X2X2 X3X3

OUOUTT

X4X4

Y0Y0 Y2Y2

X5X5

Y4Y4

X6X6

Y6Y6

X7X7

Y1Y100

X1X100

Y1Y122

X1X111

Y1Y144

X1X122

Y1Y166

X1X133

Y20Y20

X1X144

V+

X1X155

FEFE

X1X177

TIMERTIMER

SSAFE-OUAFE-OU TT

Y0Y0 Y1Y1

Y2Y2 Y3Y3

SOLENOIDSOLENOID

-OU -OUTT

Y1Y1 77 Y20Y20

（（SS））

LOGICLOGIC ERRORERROR

⑦

T0T0 T1T1 T2T2

OUOUTT

Y1Y1 Y3Y3 Y5Y5 Y7Y7 Y1Y111 Y1Y133 Y1Y155 Y1Y177 N.CN.C VFEFE

③

T3T3 T4T4 T5T5 T6T6 T7T7 T1T100 T1T111 T1T122 T1T133 T1T144 T1T155 X1X166

00.1.1 .5.5 11225511553030

SSAFE-INAFE-IN

X0X0

X2X2

X4X4

X6X6 X7X7

X1X1 00X1X1 11

X1X1 22X1X1 33

ININININ

X1X1 44X1X1 55

X0X0

SSTTA RARTT-IN-IN

X1X1

X1X1 66X1X1 77

X2X2 X3X3

OUOUTT

X4X4

Y0Y0 Y2Y2

X5X5

Y4Y4

X6X6

Y6Y6

X7X7

Y1Y100

X1X100

Y1Y122

X1X111

Y1Y144

X1X122

Y1Y166

X1X133

Y20Y20

X1X144

V+

X1X155

FEFE

X1X177

X1X1

X3X3

X5X5

TIMERTIMER

SSAFE-OUAFE-OU TT

Y0Y0 Y1Y1

Y2Y2 Y3Y3

SOLENOIDSOLENOID

-OU -OUTT

Y1Y1 77 Y20Y20

OUOUTT

Y1Y1 Y3Y3 Y5Y5 Y7Y7 Y1Y111 Y1Y133 Y1Y155 Y1Y177 N.CN.C VFEFE

The protective cover is closed The protective cover is open

1. Protective cover: The cover protects unauthorized changing of configuration switches by use of a locking hole.

2. Input connector: Spring clamp connector for input devices.

(Crimp connector can also be used.)

3. Output connector: Spring clamp connector for output devices and power supply.

(Crimp connector can also be used)

4. Logic LED: The 7-segment green LED indicates the number of logic pattern selected.

5. Error LED: The 7-segment red LED indicates an error in the SafetyOne and peripherals.

6. Timer LED: The eight Timer LEDs indicate the selected timer value.

7. Input/output status LED: The input LEDs indicate the state of inputs.

The output LEDs indicate the state of outputs.

z SAFE-IN: Status of safe inputs, e.g. X0 … X15 z START-IN: Status of start inputs, e.g. X16, 17 z SAFE-OUT: Status of safe outputs, e.g. Y0 … Y3 z SOLENOID-OUT: Status of solenoid outputs, e.g. Y17, 20

8. Logic switch: DIP switch for selecting the internal logic.

9. Timer switch: DIP switch for selecting the OFF-delay time for the safe output.

10. Enter button: button for activation of parameter changes.

11. Lock hole: hole for locking the protective cover

⑩

⑨

2-1

Dimensions

72.0

109.5

113.5

114.5

122.0

1.7

1.5

Locking hole

Detail of locking hole

133.5

2-2

General specifications

Operating conditions

Operating temperature (Surrounding air temperature)

Relative operating humidity 10 to 95% (non-condensing)

Storage temperature -40 to +70℃ (no freezing)

Relative storage humidity 10 to 95% (non-condensing)

Pollution degree 2（IEC/EN 60664-1） Degree of protection IP20（IEC/EN 60529） Corrosion immunity Atmosphere be free from corrosive gas Operation: 0 to 2,000m (0 to 6,565 feet)

Altitude

Vibration resistance

Shock resistance

Connector durability 50 times maximum

Operation strength of configuration switches Operation strength of enter button

Enclosure material modified-Poly Phenylene Ether (m-PPE) Weight Approximately 330g Electrical conditions

Rated voltage 24V DC

Allowable voltage range 20.4V DC to 28.8V DC

Maximum power consumption Allowable momentary power interruption

Reaction time

Start-up time Between live part and FE terminal: 500VAC, 1 minute

Dielectric strength

Insulation resistance

DC power terminals: 1.0 kV, 50 ns to 1 µs

Noise immunity (Noise simulator)

Inrush current Grounding Type D grounding (Type 3 grounding)

Reverse polarity: No operation, no damage

Affect of improper power supply connection

Note4

6s maximum

-10 to +55℃ (no freezing)

Transportation: 0 to 3,000m (0 to 9,840 feet) Vibration （IEC/EN 61131-2）:

5 to 8.4 Hz amplitude 3.5 mm,

8.4 to 150 Hz acceleration 9.8 m/s

(1G),

2 hours per each of XYZ axes Bump （IEC/EN 61496-1）: Acceleration 98 m/s each of XYZ axes 147 m/s

(15G), 11 ms duration, 3 times per each of XYZ axes

(10G), 16ms duration, 1000 times per

（IEC/EN 61131-2）

100 operations maximum (per 1 switch)

1000 operations maximum

48W （at 24V DC, all inputs and outputs are ON,

includes output loads）

10ms minimum (at rated voltage DC)

Note1

ON to OFF: 40 ms maximum : 100ms maximum

OFF to ON: 100 ms maximum

Between enclosure and FE terminal: 500VAC, 1 minute

Note2

Note3

Between live part and FE terminal: 10M minimum （at 500V DC me

er） Between enclosure and FE terminal: 10M minimum （at 500V DC megger）

I/O terminals: 2.0 kV, 50 ns to 1 µs (with coupling adapter) 25A maximum

Improper voltage: Permanent damage may occur

2-3

Note1. Time to shut OFF safety outputs after safety inputs are turned OFF or input monitor error is detected (in case of OFF-delay timer is 0s). If the timer value except 0s, add the selected OFF-delay time to this reaction time. Note2. Time to shut OFF safety outputs after error (except input monitor error) is detected, or configuration change is detected. This reaction time does not depend on OFF-delay timer value. Note3. Time to turn ON safety outputs after safety inputs are turned ON (in case of auto start). In case of manual start, it means time turn ON safety outputs after start input is turned ON. In case of control start, it means time to turn ON safety outputs after start input transits from ON to OFF. Note4. Time to change to Run state after power ON.

2-4

Applicable standards

Standard Title

IEC 61508 Part1-7

EN 954-1

ISO 13849-1

IEC/EN 62061

IEC/EN 61496-1

IEC/EN 60204-1 Safety of electrical machinery – General standard IEC/EN 61131-2 Programmable controllers Part 2: Equipment requirements and tests

IEC/EN 61000-6-2

IEC/EN 61000-6-4

NFPA 79 Electrical Standard for Industrial Machinery

ANSI/RIA R15.06

ISO 10218-1 Manipulating industrial robots – Safety requirements – Part 1:Robot

ANSI B11.19

SEMI S2 0706

UL 508 Industrial control equipment CSA C22.2 No.142 Process control equipment UL1998 Standard for Software in Programmable Components UL1740 Standard for Robots and Robotic Equipment

Functional safety of electrical/electronic/programmable electronic safety-related systems Safety of Machinery -- Safety-related Parts of Control Systems -- Part 1: General Design Principles Safety of machinery -- Safety-related parts of control systems -- Part 1: General principles for design Safety of machinery - Functional safety of safety-related electrical, electronic and programmable electronic control systems Safety of machinery - Electro-sensitive protective equipment - Part 1: General requirements and tests

Electromagnetic compatibility (EMC) – Part 6-2: Generic standards – Immunity for industrial environments Electromagnetic compatibility (EMC) – Part 6-4: Generic emission standards – Residential, commercial, and light industry

American National Standard for Industrial Robot and Robot System – Safety Requirements

American National Standard for Machine Tools – Safeguarding when referenced by the other B11 Machine Tool Safety Standards Performance criteria for the design, construction, care, and operation Environmental, Health, and Safety Guideline for Semiconductor Manufacturing Equipment (Standard)

2-5

Safety performance

SafetyOne can be used in a system for control category B to 4.

Average probability of failure on demand （PFD） and Probability of a dangerous failure per hour（PFH）

The following table describes PFD and PFH. They are needed for calculation of safety integrity level (SIL) which is applied to a system with SafetyOne. SafetyOne can be used in a system for SIL 1 to 3.

Proof test interval

Note1

Average Probability of Failure on Demand （PFD）

6 months < 1.8 x 10-5 1 year < 3.1 x 10-5 2 years < 5.7 x 10-5

5 years < 13.4 x 10-5

Note1: Refer to Maintenance and Inspection in “Chapter 7 APPENDIX” for proof test procedure.

Mean Time To dangerous Failure (MTTF

The following table describes MTTF

) and diagnostic coverage (DC)

and DC. They are needed for the calculation of

Performance Level (PL) which is applied to a system with SafetyOne. SafetyOne can be used

in a system for PL a to e. Mean time to dangerous failure (MTTFd) Average Diagnostic Coverage (DC) 100 years 99% or more

Probability of a dangerous Failure per Hour（PFH）

< 1.2 x 10-8

2-6

Safety input specifications

Drive terminal specifications （T0, T1, T2, T3, T4, T5, T6, T7, T10, T11, T12, T13, T14, T15） Rated drive voltage Power supply voltage

Minimum drive voltage Power supply voltage – 2.0V Number of drive terminals 14 Maximum drive current 20mA per port （at 28.8V DC） Receive terminal specifications （X0, X1, X2, X3, X4, X5, X6, X7, X10, X11, X12, X13, X14, X15）

Rated input voltage 24V DC Input ON voltage 15.0V DC to 28.8V DC Input OFF voltage Open or 0V DC to 5.0V DC Number of receive terminals 14 Rated input current 10mA per port (at rated voltage） Type of input Sink type input (for PNP output), Type 1（IEC/EN 61131-2）

Wiring specifications

Cable length Allowable wiring resistance 300 maximum

Note1. The drive port generates check pulses in order to diagnose input devices and internal

circuits. (Wiring and the diagnostic function are different depending on the logic selected. See “Chapter 5 LOGIC” for details. But the basic function is same.)

Note2. For cables longer than 30m between SafetyOne and connected devices, or wiring drive

In case of multiple safety input devices are connected

Note2

100m maximum (total wiring length per 1 input)

terminals and receive terminals separately, use grounded shielded cables to assure electromagnetic compatibility.

・・・

SafetyOne

Note1

n+1

・・・・・・

n+1

Safety input equivalent circuit Safety input operating range

2.2kΩ

V-

Internal Circuit

Voltag e(V)

28.8

ON area

1 6 10 12

Transition area

OFF area

Current

(mA)

2-7

Start input specifications

Rated input voltage 24V DC Input ON voltage 15.0V DC to 28.8V DC Input OFF voltage Open or 0V DC to 5.0V DC

Number of start input terminals 2 （X16,17） Input current 5mA per port (at rated voltage) Type of input Sink type input (for PNP output), Type 1 （IEC/EN61131-2）

Cable length Allowable wiring resistance 300 maximum

Note1. For cables longer than 30m between SafetyOne and connected devices, use grounded

shielded cables to assure electromagnetic compatibility.

Start input equivalent circuit

X16, X17

Start input operating range

Operating specification of start inputs are different depending on the configured logic number.

For more details, refer to “Chapter 5 LOGIC”. But the basic input specifications are not

changed.

Note1

100m maximum (total wiring length per 1 input)

4.7kΩ

Voltage(V)

28.8

OFF area

0.5 3 5 6

Internal Circuit

V-

ON area

Transition area

Current

(mA)

2-8

Warning

Do not use start inputs as safety inputs. This may cause the loss of safety functions and

possible failure in the SafetyOne or peripherals.

Safety output specifications

Output type Source output （N channel MOSFET） Rated output voltage Power supply voltage Minimum voltage Power supply voltage - 2.0V

Number of output terminals 4（Y0, Y1, Y2, Y3）

Maximum output current

Leakage current 0.1mA maximum Allowable inductive Load Allowable capacitive load 1uF maximum Cable length

Note2

100m maximum (total wiring length per 1 output)

Note1. For protection of output circuits, protection devices such as diode should be connected

to output circuits with inductive loads. Note2. For cables longer than 30m between SafetyOne and connected devices, use grounded shielded cables to assure electromagnetic compatibility.

Safety output equivalent circuit

Point 500mA maximum total 1A maximum

Note1

V+

L／R＝25ms

Internal

circuit

Logic

circuit

Y0～Y3

V-

Safety outputs of the SafetyOne are semiconductor outputs. For diagnostics of the shut-off function, the SafetyOne generates off-pulses in certain intervals when the outputs are in ON state. The specifications of the safety outputs changes depending on the Logic selected. See further information in “Chapter 5 LOGIC”. But the basic specifications are same.

OFF

OFF interval: a

rox. 40ms

OFF time: approx. 400µs

Caution

Check the response time of external devices so that they do not correspond to the off pulses. Monitor and solenoid/lamp outputs do not generate off pulses.

2-9

Monitor output specifications

Output type Source output （N channel MOSFET） Rated output voltage Power supply voltage Minimum output voltage Power supply voltage - 2.0V

Number of outputs 11（Y4, Y5, Y6, Y7, Y10, Y11, Y12, Y13, Y14, Y15, Y16）

Maximum output current

Leakage current 0.1mA maximum Cable length

Note1

100m maximum (total wiring length per 1output) Note1. For cables longer than 30m between SafetyOne and connected devices, use grounded shielded cables to assure electromagnetic compatibility.

Monitor output equivalent circuit

Point 20mA maximum total 220mA maximum

V+

Int ern al

circuit

Logic

circuit

V-

The specifications of the monitor outputs changes depending on the Logic selected. See further information in “Chapter 5 LOGIC”. The basic specifications are the same.

Warning

Do not use monitor outputs for safety related purposes. This may cause a loss of safety functions in case of failure of the SafetyOne or peripherals.

2-10

Solenoid/Lamp output specifications

Output type Source output （N channel MOSFET） Rated output voltage Power supply voltage Minimum output voltage Power supply voltage - 2.0V

Number of outputs 2 （Y17, Y20）

Maximum output current

Leakage current 0.1mA maximum Allowable Inductive Load Cable length

Note2

100m maximum (total wiring length per 1 output) Note1. For protection of output circuits, protection devices such as diodes should be connected

to output circuits with inductive loads.

Note2. For cables longer than 30m between SafetyOne and connected devices, use grounded

shielded cables to assure electromagnetic compatibility.

Solenoid/lamp output equivalent circuit

point 500mA maximum total 500mA maximum

Note1

L／R＝25ms

V+

Inte rn al

circuit

Logic

circuit

Y17,Y20

V-

The specifications of the Solenoid/Lamp outputs changes depending on the Logic selected. See further information in “Chapter 5 Logic”. But the basic specifications are the same.

Warning

Do not use solenoid/lamp outputs for safety related purposes. This may cause a loss of safety functions in case of failure of the SafetyOne or peripherals.

2-11

Indicators

(4)

(1) (2)

LOGIC ERROR

0.1.51 25

SA FE- IN

ST AR T- IN

(3)

X0 X1

X2 X3

X6 X7

X1 0 X1 1

X1 2 X1 3

X1 4 X1 5

X1 6 X1 7

15 30

TIMER

(S)

SA FE- OUT

Y0 Y1

Y2 Y3

SOLENOID

-OUT

Y1 7 Y2 0

(1) Logic LED (green) (2) Error LED (red) (3) Timer LED (green) (4) Input/Output status LED (orange)

－SAFE-IN －START-IN －SAFE-OUT －SOLENOID-OUT

(1) Logic LED

Indication Status Descriptions

“1”... “8”

The selected logic is in Run or Protection state.

Blink The selected logic is in Configuration state.

The selected logic has Configuration error

“E” Blink

(The logic is not selected or more than one logic is selected.)

Random pattern ON/Blink Initializing (Initial state)

Blank OFF Error (stop state)

(2) Error LED

Indication Status Descriptions

“1” ON

“2” ON

Input monitor error (Protection state） Wiring error at safety inputs or error in safety input circuits

“3” ON Wiring error at start inputs or error in start input circuits

“4” ON

Wiring error at safety outputs or error in safety output

circuits “5” ON Muting lamp error (disconnection) (Logic4 only) “6” ON Power supply error or internal power supply circuit error

“7” ON

Internal error, power supply error or internal power

supply circuit error “9” ON EMC disturbance

Configuration procedure is in progress (Configuration

state)

Note

(Configuration state)

“C”

Blink Configuration is valid

Random ON/Blink Initializing (Initial state)

Blank OFF Normal operation (Run state)

Note. Blinks for 1 to 5 seconds after the enter button is pressed. Releasing the button during

blinking activates the setting. The blinking LED becomes ON if the button is pressed for more than 5 seconds, and the setting becomes invalid even after the button is released.

2-12

(3) Timer LED

Indication Status Descriptions

0 ON .1 ON OFF-delay timer 0.1s .5 ON OFF-delay timer 0.5s

1 ON OFF-delay timer 1s

2 ON OFF-delay timer 2s

5 ON OFF-delay timer 5s

15 ON OFF-delay timer 15s 30 ON OFF-delay timer 30s

Each LED Blink Selected timer value (Configuration state)

Random ON/Blink Initializing (Initial state)

Blank OFF

(4) Input LED： SAFE-IN (X0 … X15), START-IN (X16, X17)

Indication Status Descriptions

ON Input ON

X0 to X15

X16, X17

Indicators specification of input LEDs are different depending on the selected logic.

(5) Output LED: SAFE-OUT (Y0 … Y3), SOLENOID-OUT (Y17, Y20)

Indication Status Descriptions

Y0 to Y3

Y17, Y20

OFF

Blink Input monitor error

ON Input ON

OFF

ON Output ON

OFF

Blink During OFF-delay timer operation

ON Output ON

OFF

No OFF-delay （safety outputs shut off immediately）

Timer value is not selected or SafetyOne is in the Stop state

Input OFF, or SafetyOne is in the Stop or Configuration state

Output OFF, or SafetyOne is in the Stop or Configuration state

2-13

Specification of configuration switches

(1) (2)

(1) Logic switch

The logic switch is an 8-digit DIP switch for use in logic configuration. When one of 8 digits is selected, the corresponding logic in the SafetyOne is activated. See “Chapter 5 Logic” for further information of each logic. The upper position of each digit is the ON state. Multiple

switches must not be selected.

(2) Timer switch

The timer switch is an 8-digit DIP switch for use in OFF-delay timer value configuration. When one of 8 digits is selected, the delay time at shut-off operation is activated. The upper position of each digit is ON state. Multiple switches must not be selected.

(3) Enter button

The enter button is used to activate the configuration of logic and timer value. Error LED will blink for 1 to 5 seconds after pressing the enter button. Releasing the button during blinking activates the setting. The blinking LED becomes ON if the button is pressed for more than 5 seconds, and the setting becomes invalid even after the button is released.

LOGIC No. TIM ER (S)

Switch (Indication) Descriptions

0 1 .1 2 OFF-delay timer 0.1s .5 3 OFF-delay timer 0.5s

1 4 OFF-delay timer 1s

2 5 OFF-delay timer 2s

5 6 OFF-delay timer 5s

15 7 OFF-delay timer 15s 30 8 OFF-delay timer 30s

ENTER

0.1.5 1 2 5153012345678

No OFF-delay （safety outputs shut OFF immediately）

(3)

(1) Logic switch (2) Timer switch (3) Enter button

2-14

Caution

For setting the swithes and enter button, use the configuration tool supplied with the Safetyone.

Connector specifications

■Input connector

T0T0 T1T1 T2T2 T3T3 T4T4 T5T5 T6T6 T7T7 T1T100 T1T111 T1T122 T1T133 T1T144 T1T155 X1X166

Connector type: - Spring clamp connector (30 poles) FS9Z-CN01 [IDEC] (Tyco Electronics AMP type Number: 2-1871940-5)

- Crimp connector (30 poles) (Tyco Electronics AMP type Number: 2-1871946-5)

Terminal

name

T0 A1 Safety input drive terminal 0 X0 B1 Safety input receive terminal 0

T1 A2 Safety input drive terminal 1 X1 B2 Safety input receive terminal 1

T2 A3 Safety input drive terminal 2 X2 B3 Safety input receive terminal 2

T3 A4 Safety input drive terminal 3 X3 B4 Safety input receive terminal 3

T4 A5 Safety input drive terminal 4 X4 B5 Safety input receive terminal 4

T5 A6 Safety input drive terminal 5 X5 B6 Safety input receive terminal 5

T6 A7 Safety input drive terminal 6 X6 B7 Safety input receive terminal 6

T7 A8 Safety input drive terminal 7 X7 B8 Safety input receive terminal 7

T10 A9 Safety input drive terminal 10 X10 B9 Safety input receive terminal 10

T11 A10 Safety input drive terminal 11 X11 B10 Safety input receive terminal 11

T12 A11 Safety input drive terminal 12 X12 B11 Safety input receive terminal 12

T13 A12 Safety input drive terminal 13 X13 B12 Safety input receive terminal 13

T14 A13 Safety input drive terminal 14 X14 B13 Safety input receive terminal 14

T15 A14 Safety input drive terminal 15 X15 B14 Safety input receive terminal 15

X16 A15 Start input terminal 16 X17 B15 Start input terminal 17

Terminal

No.

Note1. For detailed information of Crimp connector, consult Tyco Electronics AMP.

X0X0 X1X1 X2X2 X3X3 X4X4 X5X5 X6X6 X7X7 X1X100 X1X111 X1X122 X1X133 X1X144 X1X155 X1X177

Descriptions

Note1

Terminal

name

Terminal

No.

Descriptions

2-15

■Output connector

Y0Y0 Y2Y2 Y4Y4 Y6Y6 Y1Y100 Y1Y122 Y1Y144 Y1Y166 Y20Y20

V+ FEFE

Y1Y1 Y3Y3 Y5Y5 Y7Y7 Y1Y111 Y1Y133 Y1Y155 Y1Y177 N.CN.C VFEFE

Connector type: - Spring Clamp connector (22 poles) FS9Z-CN02 [IDEC] (Tyco Electronics AMP type No.:2-1871940-1)

- Crimp connector (22 poles) (Tyco Electronics AMP type No.: 2-1871946-1)

Terminal

name

Y0 A1 Safety output terminal ０ Y1 B1 Safety output terminal 1

Y2 A2 Safety output terminal 2 Y3 B2 Safety output terminal 3

Y4 A3 Monitor output terminal 4 Y5 B3 Monitor output terminal 5

Y6 A4 Monitor output terminal 6 Y7 B4 Monitor output terminal 7

Y10 A5 Monitor output terminal 10 Y11 B5 Monitor output terminal 11

Y12 A6 Monitor output terminal 12 Y13 B6 Monitor output terminal 13

Y14 A7 Monitor output terminal 14 Y15 B7 Monitor output terminal 15

Y16 A8 Monitor output terminal 16 Y17 B8 Solenoid/lamp output terminal 17

Y20 A9 Solenoid/lamp output terminal 20 N.C B9 No connection terminal

V+ A10 Power supply 24VDC terminal V- B10 Power supply 0VDC terminal

FE A11 Functional Earth terminal FE B11 Functional Earth terminal

Terminal

No.

description

Terminal

name

Terminal

No.

Description

2-16

Note1. For detailed information of the Crimp type connector, consult Tyco Electronics AMP.

Chapter3 INSTALLATION AND WIRING

This chapter describes methods and precautions for installing and wiring the SafetyOne. Before starting installation and wiring, be sure to read “SAFETY PRECAUTIONS” in the beginning of this manual and understand the precautions described under WARNING and CAUTION.

Warning

 Turn off power to SafetyOne before starting installation, removing, wiring, maintenance, or

inspection of SafetyOne. Failure to turn power off may cause electrical shocks or fire hazard.

 Before operating SafetyOne, carefully read the instruction sheet and this manual, and ensure

that the environment conforms to the requirements of SafetyOne specifications. If SafetyOne is operated in an environment that exceeds the specifications of SafetyOne, it causes impairment of the safe operation of SafetyOne.

. The installation, wiring, configuration, and operation of SafetyOne must be performed only by

“Safety responsible personnel”. Safety responsible personnel are personnel who have requisite qualifications as being capable of safely carrying out each step, including designing, installation, operation, maintenance, and disposal of SafetyOne. Personnel without the technical expertise of the safety responsible personnel must not use SafetyOne.

 Installation of SafetyOne must be performed according to the instructions found in the instruction

sheet and this manual. Improper installation may cause the SafetyOne to fail.

 Use a power supply that meets following required specifications:

-Conforms to the power supply rating of SafetyOne

-The primary and secondary circuits are separated by double insulation or reinforced insulation.

-Has the functionality or the functional equivalent of the control voltage and current of a class 2 circuit, as defined in UL 508 or UL 1310.

-Is in compliance with safety laws and regulations relating to electrical safety, and EMC, under the laws and regulations of the country in which it is being used.

 Ground the V-line (0V DC) for ground fault diagnosis.  In the case of a new configuration or modified installation, be sure to perform a check for each

input and output function.

 Separate SafetyOne from devices and wires which are not according to class 2 circuit

requirements.

Caution

 SafetyOne is designed for installation in an enclosure. Do not install SafetyOne outside an

enclosure. Install SafetyOne in enclosure with a rating of IP54 or higher.

 Install SafetyOne in environments described in the catalog, instruction sheet, and user’s manual.

If SafetyOne is used in places where the SafetyOne is subjected to high temperature, high humidity, condensation, corrosive gases, excessive vibrations, and excessive shocks, then electrical shocks, fire hazard, or malfunction may result.

 Environment for using the SafetyOne is “Pollution degree 2”. Use SafetyOne in environments of

pollution degree 2 (according to IEC/EN 60664-1).

3-1

 Prevent SafetyOne from falling while moving or transporting the SafetyOne, otherwise damage

or malfunction of the SafetyOne may result.

 Prevent metal fragments and pieces of wire from dropping inside the SafetyOne housing.  Install SafetyOne, so that there is adequate spacing from walls, heat generating bodies, and

peripherals, taking into consideration space requirements for maintenance and ventilation.

 Install SafetyOne on 35mm DIN rails with BNL6 mounting clips (sold separately) on both sides of

SafetyOne.

 Perform wiring to the connectors with proper cables or ferrules.  Ground FE terminal to assure electromagnetic compatibility (EMC)  Use common 0V DC, if different power supplies are used for SafetyOne and other devices (ex.

safety light curtains).  Install wiring for the inputs and outputs so that it is separated from power lines. .

3-2

Installation method

 Installation location and direction

When the SafetyOne is installed in an enclosure, confirm that installation environments meet

the product specifications. Using in environments such as a described below, (over the product

specifications) may cause fire hazard, damage, or malfunction.

・SafetyOne should not be exposed to excessive dust, dirt, salt, vibration or shocks.

・Do not use SafetyOne in an area where corrosive chemicals or flammable gases are present.

・Do not use SafetyOne nearby induction heat source

Mount SafetyOne with enough space from any device as shown at Fig3.1 for maintenance and

ventilation. Do not install SafetyOne near, and especially above, any heating device or heat

source.

Pannel

20mm or more

40mm or more

20mm or more

40mm or more

80mm or more

Duct

Fig. 3.1 Installation location

3-3

Mount SafetyOne on a vertical plane as shown in Fig.3.2.

All other installation directions are not allowed.

Fig. 3.2 Correct installation direction

Upwards Sideways Downwards

Fig. 3.3 Incorrect installation directions

BNL6 mounting clip

3-4

 Installing on DIN Rails

Mount and remove SafetyOne on 35mm-wide DIN rails according to the following instructions.

Applicable DIN rail: (for example) BAA1000 (IDEC)

Mounting on DIN rail

1. Fasten DIN rail to a panel using screws.

2. With the top of SafetyOne unit facing up, as shown in Fig. 3.4, insert the groove, on the rear of the unit, and press the unit in the direction of the arrow.

3. Use BNL6 mounting clips (sold separately) on both sides of SafetyOne to prevent it from moving sideways.

35mm-wideDIN rail

Clamp

Fig. 3.4 Mounting

Removing from DIN Rail

1. Insert a flat screwdriver into the slot in the clamp.

2. Pull the clamp until you hear a click, as shown in Fig. 3.5.

3. Remove SafetyOne bottom out.

35mm-wideDIN rail

Clamp

Fig. 3.5 Removing

3-5

Wiring method

SafetyOne has to two kinds of connectors = spring clamp = (optional) and crimp.

Note1

Note1. For detailed information of Crimp connector, consult Tyco Electronics AMP.

Applicable connectors and mounting to SafetyOne Applicable connectors

Type No. of pole Part No. Remarks

Spring clamp

Crimp

FS9Z-CN01

2-1871940-5

FS9Z-CN02

2-1871940-1

2-1871946-5

2-1871946-1

IDEC (optional)

Tyco Electronics AMP

IDEC (optional)

Tyco Electronics AMP

Locking parts

Tool insertion slot

Wire insertion slot

Fig. 3.6 Spring clamp connector (FS9Z-CN0*) Fig. 3.7 Clamp connector

When mounting a connector to the SafetyOne, be sure to insert the connector straight and completely in until you hear a click or feel it click into position. To remove the connector, press down on the lock completely, and then pull out the connector. If pressing down on the lock is incomplete damage to the connector and wire may occur.

 Applicable wire and ferrule sizes for Spring clamp connector AWG#18-24 (UL1007 recommended) Stripped length: 7.0±0.3mm When using ferrules, specification are shown below. Long size: 1.02mm (min.) - 1.21mm (max.) (”a” in the figure below) Short size: 0.95mm (min.) - 1.21mm (max.) (”b” in the figure below) Applicable wire: AWG#24 (UL1007 recommended)

Ferrule

erminal

Wire

Fig3.8 Applicable Ferrule

3-6

 Wiring for spring connector

Do not wire the connector while it is connected to the SafetyOne, as this can damage the connector and the SafetyOne.

To connect the wire, use a connecting tool (FS9Z-SD01 [IDEC] (Tyco Electronics AMP Type Number: 0-2040798-1) or a commercially-available screwdriver. It is recommended that you use a dedicated connecting tool to prevent any scratches or damage to the connector housing and spring. When rewiring, use wire with same gauge.

 Wiring with a connecting tool

1. Insert the connecting tool into the tool insertion slot on the connector at an angle until the tool comes to a stop.

2. Insert the wire into wire insertion slot. (If there are any loose strands, twist the wire to make it

even.)

3. With the wire pressed down, remove the connecting tool to finish the wiring. Lightly tug on the

wire to check that it is securely connected.

4. To remove the wire, press down the spring with the connecting tool, as if you are connecting

the wire, and pull out the wire.

 Wiring with a commercially-available screwdriver Use a screwdriver with a tip width that does not exceed 2.4 mm. Be careful when wiring with a screwdriver as this can damage the connector.

1. Insert the screwdriver into the tool insertion slot on the connector at an angle, and press

down so as to open the spring. Be careful not to insert the screwdriver with too much force, as this can damage the connector. Do not insert the screwdriver into the wire insertion slot.

2. With the screwdriver inserted, as described in Step 1 above, insert the wire into wire insertion

slot. (If there are any loose strands, twist the wire to make it even.)

3. With the wire pressed down, remove the screwdriver to finish the wiring. Lightly tug on the

wire to check that it is securely connected.

4. To remove the wire, press down the spring with the screwdriver, as if you are connecting the

wire, and pull out the wire.

3-7

3-8

Chapter4 BASIC OPERATIONS

This chapter describes the basic operations of SafetyOne. Make proper use of the SafetyOne by thoroughly familiarizing yourself with the basic operations and functions.

Internal states

The SafetyOne operates in five internal states, as shown in Table 4.1. The LED display and output status for each state are shown in Table 4.2. Table 4.1 Internal states

State Description

This is the state during which initial processing is performed immediately after power is

Initial

Run

Configuration

Protection

Stop

Table 4.2 LED display and output status for each state

State

Initial (1) (1) (1) □ Run Selected number Blank Selected number (2) (2) (2) □ Configuration (3) “C” (3) □ Protection Selected Number “1” Selected number □ Stop Blank (5) Blank □

(1) Random display in Initial state (2) LED display and outputs corresponding to selected logic (3) Blinking display of selected logic number and timer value LED (4) The input LEDs and monitor outputs corresponding to the input which occurred before the

(5) Display the error number occurred. Refer “Chapter2 PRODUCT SPECIFICATIONS” for detail information of LED display.

supplied to SafetyOne. During this state, the internal circuits are checked and the LED displays and lights indicate operation confirmation (blinking) for about 6s. This is the state during which the SafetyOne operates normally. Logic processing continues without failures or wiring errors.(Refer to "Chapter 5 LOGIC" for details.) This is the state for configuring the logic and OFF-delay timer values. Executing the determined configuration procedure enables the desired logic and OFF-delay timer value and restores the SafetyOne to the Run state. (Refer to "Logic configuration" and "Timer configuration" in this chapter for details.) The SafetyOne transitions to this state when there is input monitor error in the dual channel input, EDM input or muting input. After the cause that generated the Protection state is removed, the unit is restored to the Run state. (Refer to "Canceling the Protection state" in this chapter for details.) The SafetyOne transitions to this state when a failure or other error occurs in an external device or internal circuit. After the cause that generated the Stop state is removed, the Stop state can be canceled by restarting the SafetyOne (power on again). (Refer to "Canceling the Stop state" in this chapter for details.)

Logic LED

Error LED

Timer LED

Safety output

Y0…Y3 Y17,Y20 Y4…Y13 Y14 Y15 Y16

OFF

Solenoid/ lamp output

□

□ □ □

OFF

□

OFF

(4) □

OFF

□

OFF

error become pulse output. For the other LEDs and monitor outputs, the LED indications and monitor outputs are kept from just before the Run state.

Monitor output

□

■

OFF

□

OFF

■ON ■

OFF

■ON □

□

OFF

■ON □

OFF

■ON □

OFF

■ON

OFF

or □

OFF □OFF

OFF

Caution

When the state changes to the Run state from another state, solenoid/lamp outputs (Y17, Y20) are turned ON for 1s maximum. Be wary of the behavior of connected devices.

4-1

Turning on the power

After the SafetyOne is turned on, SafetyOne transitions to the Initial state and checks the internal circuits. SafetyOne changes to the appropriate state (in approximately 6s) according to the result of the internal circuit check. During the Initial state, the LEDs blink to check operation.

Logic switch and timer switch are set Logic: “1” and Timer: “1 (0s)” at the factory. When initially powering up the SafetyOne, thoroughly confirm the configuration and the operation.

Using the protective cover

●Opening and closing the protective cover

Place your finger at the bottom right of the protective cover, and open the cover to a position that enables you to view the configuration options. The protective cover can be set at two opened positions (60° or 120°). Be careful not to open the cover beyond 120°, as this causes the cover to separate from the body.

Locking the protective cover After configuration of SafetyOne and confirming, close and the protective cover. To protect the configuration, it is recommended that the protective cover be locked. Use the attached marking tie or commercially-available wire or a similar equipment to lock the protective cover. In case of using commercially-available wire, use wire that personal, other than safety responsible persons operating the SafetyOne, are not able to modify its configuration. (ex. φ1.0 or more metal wire)

The protective cover and marking tie do not ensure mechanical strength against strong force. The protective cover and marking tie can be broken with the strong force.

4-2

Logic configuration

(

The SafetyOne offers 8 types of logic, and by performing the logic configuration procedure listed below, you can enable the desired logic. The SafetyOne can transition to the Configuration state from the Run or Protection state. Configuration operations are disabled in the Initial and Stop states. Once any logic is configured, it is kept in the SafetyOne even if the power is turned off. The logic and timer settings can be configured at the same time. Confirm the configuration methods, and configure the logic and timer properly. The logic switch is set “1” at the factory. When initially powering on the SafetyOne, thoroughly confirm the configuration and the operation.

1. Open the protective cover.

Open the cover to a position that enables you to set the configuration operations. Refer to "Using the protective cover" for details.

2. Select the logic switch.

Select and operate the logic switch. When operating the logic switch, use the attached configuration tool. When the logic configuration is changed, "C" is displayed in the error LED display and the new number of the logic configuration blinks in the logic LED display. If any logic switch is not selected or multiple logic switches are selected, "E" is displayed in the logic LED display.

LOGIC No.

ENTER

TIMER (S)

0.1.51 25153012345678

Configuration tool

LOGIC

ERROR

(Blinking)

.1 .5 1 2 5 15 30

SAFE-IN

X0 X1

X2 X3

X6 X7

X10 X11

X12 X 13

X14

X15

START-IN

X16

X17

TIMER(S)

SAFE-OUT

Y0 Y1

Y2 Y3

SOLENOID

-OUT

Y17 Y2 0

Fig. 4.2 Logic switch is not selected

Configuration state)

LOGIC No.

LOGIC

ERROR

Fig. 4.1 Normally switch configuration and LED indication

LOGIC No.

LOGIC

ERROR

(Blinking)

Fig. 4.3 Logic number “7” is selected

Configuration state)

ENTER

TIMER (S)

0.1.51 2 5153012345678

.1 .5 1 2 5 15 30

SAFE-IN

X0 X1

X2 X3

X6 X7

X10 X11

X12 X1 3

X14

START-IN

X16

Run state)

ENTER

TIMER (S)

0.1.51 2 5153012345678

.1 .5 1 2 5 15 30

SAFE-IN

X0 X1

X2 X3

X6 X7

X10 X11

X12 X1 3

X14

START-IN

X16

X15

X17

X15

X17

TIMER(S)

SAFE-OUT

Y0 Y1

Y2 Y3

SOLENOID

-OUT

Y17 Y20

TIMER(S)

SAFE-OUT

Y0 Y1

Y2 Y3

SOLENOID

-OUT

Y17 Y20

4-3

3. Confirm the configuration and press the

(

)

enter button.

LOGIC No.

ENTER

TIMER (S)

0.1.51 2 5153012345678

Confirm that the selected logic switch matches

the blinking logic LED, and then press the enter button by using configuration tool. Be sure to confirm that they match. If the switch configuration and display do not match and you press the enter button, unintended logic may be

LOGIC

(Blinking)

ERROR

.1 .5 1 2 5 15 30

SAFE-IN

X0 X1

SAFE-OUT

X2 X3

X6 X7

SOLENOID

X10 X11

-OUT

X12 X1 3

X14

X15

START-IN

X16

X17

TIMER(S)

Y0 Y1

Y2 Y3

Y17 Y20

activated. Press and hold the enter button for 1 to 5s to enable the configuration. "C" blinks in the error LED display while you press the enter button. If you press the enter button for less than 1s or more than 5s, the logic is not activated.

Fig. 4.4 Confirmation of logic switch configuration and LED indication

Configuration state)

LOGIC No.

ENTER

TIMER (S)

0.1.51 251530123456 78

LOGIC

ERROR

.1 .5 1 2 5 15 30

SAFE-IN

X0 X1

SAFE-OUT

X2 X3

X6 X7

SOLENOID

X10 X11

-OUT

X12 X13

X14

X15

START-IN

X16

X17

TIMER(S)

Y0 Y1

Y2 Y3

Y17 Y20

4. Confirm that the logic is activated.

The logic LED display changes from a blinking display to solid display, the error LED turns off, and the selected logic is activated.

Fig. 4.5 LED indication during enter button is valid

Configuration state

LOGIC No.

ENTER

TIMER (S)

0.1.51 2 5153012345678

After configuring the logic, be sure to confirm that the selected logic is activated.

LOGIC

ERROR

5. Lock the protective cover.

Close and lock the protective cover. Refer to "Using the protective cover" in this

Fig. 4.6 Completion the configuration of Lo

ic “7 “(Run state)

.1 .5 1 2 5 15 30

SAFE-IN

X0 X1

X2 X3

X6 X7

X10 X11

X12 X13

X14

X15

START-IN

X16

X17

TIMER(S)

SAFE-OUT

Y0 Y1

Y2 Y3

SOLENOID

-OUT

Y17 Y20

chapter for details. To protect the configuration setting, it is recommended that the protective cover be locked.

4-4

Timer configuration

(

)

SafetyOne has an OFF-delay timer function that retains the safety outputs during the configured time and after that turns OFF the safety outputs. You can use this function to configure stop category "0" or "1". Perform the configuration procedure listed below to configure the OFF-delay timer to one of the following eight settings, using the same procedure as that for configuring the logic: 0, 0.1, 0.5, 1, 2, 5, 15, or 30 s.

Configuration operations are disabled in the Initial and Stop states. Once any timer value is configured, it is kept in the SafetyOne even if the power is turned off. Logic and timer settings can be configured at the same time. Confirm the configuration methods, and configure the logic and timer properly. The timer switch is set “1(0s)” at the factory. When initially powering on the SafetyOne, thoroughly confirm the configuration and the operation.

1. Open the protective cover.

Open the cover to a position that enables you to set configuration operations. Refer to "Using the protective cover" for details.

2. Select the timer switch.

Select and operate a timer switch. When operating a timer switch, use the configuration tool. When the timer configuration is changed, "C" is displayed in the error LED display and the timer LED light that corresponds to the selected timer configuration switch blinks.

ENTER

TIMER (S)

0.1.51 2 5153012345678

.1 .5 1 2 5 15 30

SAFE-IN

X0 X1

X2 X3

X6 X7

X10 X11

X12 X13

X14

X15

START-IN

X16

X17

TIMER(S)

SAFE-OUT

Y0 Y1

Y2 Y3

SOLENOID

-OUT

Y17 Y20

LOGIC No.

LOGIC

ERROR

Fig. 4.7 Timer switch is not selected

Configuration state)

ENTER

LOGIC No.

LOGIC

ERROR

TIMER (S)

0 .1 .5 1 2 5 1530123456 78

.1 .5 1 2 5 15 30

SAFE-IN

X0 X1

X2 X3

(Blinking)

X6 X7

X10 X11

X12 X13

X14

X15

START-IN

X16

X17

TIMER(S)

SAFE-OUT

Y0 Y1

Y2 Y3

SOLENOID

-OUT

Y17 Y20

Fig. 4.8 OFF-delay timer value “2s” is selected

Configuration state

4-5

(

)

3. Confirm the configuration and press the

enter button.

Confirm that the selected timer switch matches the blinking timer LED, and then press the enter button by using the configuration tool. Be sure to confirm that they match. If the switch configuration and display do not match and you press the enter button, an unintended delay timer may be activated. Press and hold the enter button for 1 to 5s to activate the configuration. "C" blinks in the error LED display while you press the enter button. If you press the enter button for less than 1s or more than 5s, the timer is not activated.

4. Confirm that the timer is activated.

The timer LED light changes from a blinking display to solid display, the error LED display turns off, and the selected timer value is activated. After configuring the timer, be sure to confirm that the selected timer value is activated.

5. Close and lock the protective cover.

Close and lock the protective cover. Refer to "Using the protective cover" for details. To protect the configuration setting, it is recommended that the protective cover be locked.

ENTER

LOGIC No.

LOGIC

ERROR

TIMER (S)

0.1.5 1 2 51530123456 78

.1 .5 1 2 5 15 30

SAFE-IN

X0 X1

X2 X3

(Blinking)

X6 X7

X10 X11

X12 X1 3

X14

X15

START-IN

X16

X17

TIMER(S)

SAFE-OUT

Y0 Y1

Y2 Y3

SOLENOID

-OUT

Y17 Y20

Fig. 4.9 Confirmation of timer switch configuration and LED indication

Configuration state)

ENTER

LOGIC No.

LOGIC

(Blinking)

ERROR

TIMER (S)

0.1.51 251530123456 78

.1 .5 1 2 5 15 30

SAFE-IN

X0 X1

X2 X3

(Blinking)

X6 X7

X10 X11

X12 X13

X14

X15

START-IN

X16

X17

TIMER(S)

SAFE-OUT

Y0 Y1

Y2 Y3

SOLENOID

-OUT

Y17 Y2 0

Fig. 4.10 LED indication during enter button is valid (Configuration state

ENTER

LOGIC No.

LOGIC

ERROR

TIMER (S)

0.1.51 2 5153012345678

.1 .5 1 2 5 15 30

SAFE-IN

X0 X1

X2 X3

X6 X7

X10 X11

X12 X1 3

X14

X15

START-IN

X16

X17

TIMER(S)

SAFE-OUT

Y0 Y1

Y2 Y3

SOLENOID

-OUT

Y17 Y20

Fig. 4.11 Completion the configuration of OFF-delay timer value “2s“ (Run state)

4-6

Cancelling the Protection state

SafetyOne transitions to the Protection state if a failure is detected in an external device or an error is detected in external wiring, such as when different operations are performed between dual channel inputs or two muting inputs, or when the EDM input is OFF while the safety outputs are transitioning from OFF to ON by output control. In the Protection state, the safety outputs are turned OFF and a "1" is displayed in the error LED display. The Protection state can be cancelled by the following methods.

• Cancellation by the connected control devices

•In case of an error with the dual channel input, the Protection state is cancelled by turning OFF

the appropriate dual channel input. (For example: Press an emergency stop switch or open a guard equipped with an interlock device.) But cancellation is only achieved during OFF-delay operation of safety outputs (Y0 to Y3).

•In case of an error with muting input (Logic 4 only), the Protection state is cancelled by turning

OFF of the appropriate muting input. But cancellation is only achieved during OFF-delay operation of safety outputs (Y0 to Y3).

•In case of the error with mode select input (Logic 6 only), the Protection state is cancelled by

turning OFF 1 of the appropriate 2 inputs. But the cancellation is only achieved during OFF-delay operation of safety outputs (Y0 to Y3).

•In case of an error with the EDM input, the Protection state is cancelled by turning ON the

appropriate EDM input. When 1 of EDM inputs causes an error, the corresponded safety output is not turned ON, but the another safety output can be turned ON and after approximately 1s turned OFF. For the relationship between EDM inputs and safety outputs, refer Table 4.3 shown below.

Table 4.3 EDM inputs and corresponded safety outputs EDM inputs (External Device Monitor inputs) T14-X14 Y0, Y1 T15-X15 Y2, Y3

• Cancellation by resetting power to SafetyOne

The Protection state is cancelled by restart of power to SafetyOne after removing the error factor.

If the error factor that caused the change to the Protection state has been not removed, the unit returns to the Protection state again.

• Cancellation by transition to Protection state

By the changing the configuration of a logic or timer switch, the state changes from Protection state to Configuration state.

Safety outputs

Warning

Turn OFF the power to SafetyOne before inspection and/or connecting of the wires.

4-7

Canceling the Stop state

If the SafetyOne detects any wiring errors, abnormalities or internal circuit failure, it changes to the Stop state and locks out operations. The Stop state can be cancelled by the following method.

• Cancellation by removal of power to SafetyOne

The Stop state is cancelled by restart of power to SafetyOne after removing the error factor.

Refer "Chapter 6 TROUBLESHOOTING" for information to identify the cause that generated the Protection state or Stop state.

4-8

Chapter5 LOGIC

This chapter describes the Logics in the SafetyOne. Make proper use of the SafetyOne by thoroughly familiarizing yourself with the basic operations and function of each Logic.

Logic 1: General purpose logic for various apparatuses

Overview (Logic 1)

This logic is for safety protective measures applicable to production machines, robots, and other apparatuses. This logic enables the connection 6 dual channel direct opening inputs. When SafetyOne is in the state which all of the safety inputs can receive the safety input signals (all contacts of the connected safety devices are ON), safety outputs are turned ON upon input of the start input. During the time the safety outputs are ON, if any safety input signal to any input of the safety inputs is turned OFF (the contacts of the safety devices are OFF), the safety outputs are turned OFF after the preset OFF-delay time.

5-1

Operation example (Logic 1)

・All of emergency stop switches are released.

・Movable guard is closed.

(All contacts of interlock switches are ON.)

and

Emergency stop switch

Interlock switch

Safety switch with lock (Spring lock type)

・Start input is ON

Contactor/ safety relay ON

Machine running

Solenoid output OFF

Guard lock

・Safety outputs are ON.

Press!

Open!

Solenoid output ON

Guard lock release

・Emergency stop switch is pressed.

・Movable guard is opened.

(Contacts of interlock switch are opened.)

Contactor/ safety relay OFF

Machine stop

・Safety outputs are OFF.

・Solenoid outputs are ON.

5-2

Logic circuit (Logic 1)

Safety input 1

T0, X0, T1 , X1

Safety input 2

T2, X2, T3, X3

Safety input 3

T4, X4, T5, X5

Safety input 4

T6, X6, T7, X7

Safety input 5

T10, X10, T11, X11

Safety input 6

T12, X12, T13, X13

Start input 1

Start input 2

External device monitor 1

External device monitor 2

X1 6

X1 7

T14, X1 4

T15, X1 5

Dual Channel

Direct Opening

Dual Channel

Direct Opening

Dual Channel

Direct Opening

Dual Channel

Direct Opening

Dual Channel

Direct Opening

Dual Channel

Direct Opening

Single Channel

Monitor

Single Channel

Monitor

External Device

EDM

External Device

EDM

Monitor

Control

Start

=2k+1

Hold

Self-hold

function

Trigger

トリガー

OS1

Hold

OSSD

with

Off de lay

EDM

Hold

OSSD

with

Off de lay

EDM

Safety output 1

Safety output 2

●Monitor output for safety input ●Monitor output for safety output ●Solenoid output

Y12

Y13

(Note1)

Y0,Y1

Y2,Y3

Note2: In Run state, when the safety outputs are OFF and 1 or more safety inputs are OFF, the solenoid outputs are turned ON. When all safety inputs are ON, the solenoid outputs are turned OFF, although start input is OFF.

X1 0

X1 1

X1 2

X1 3

Monitor for safety input 1

Monitor for safety input 2

Monitor for safety input 3

Monitor for safety input 4

Monitor for safety input 5

Monitor for safety input 6

Y10

Y11

Monitor for

Y0,Y1

safety output 1

OS1

Monitor for

Y2,Y3

safety output 2

OS1

Note1: Monitor outputs for safety output 1 and 2 are turned OFF immediately independent of set OFF-delay time.

(Note2)

Y17

Y20

5-3

Functions (Logic 1)

●Safety inputs: X0 to X13 (T0 to T13)

X0 to X13 (T0 to T13) function as dual channel direct opening inputs. The combinations of dual channel inputs are as shown below. Incorrect use of these combinations will result in an error. The input monitor error detection time between dual channel inputs is 0.5s. For information about connected control devices, see “SAFETY PRECAUTIONS” and following “Logic functions”.

X0-T0, X1-T1: Safety input 1 X2-T2, X3-T3: Safety input 2 X4-T4, X5-T5: Safety input 3 X6-T6, X7-T7: Safety input 4 X10-T10, X11-T11: Safety input 5 X12-T12, X13-T13: Safety input 6

Warning

Safety check signals (pulses signals) are sent from the drive terminals (T0 to T13) to diagnose connected safety devices and input circuits. Safety check signals can not be used as a power supply for connected devices.

Note: Solid state outputs, such as safety light curtains, can not be connected.

Note: If there are unused safety inputs, short the receive terminals (Xn) corresponding to the unused safety inputs and the drive terminals (Tn). If they are not shorted, the SafetyOne will not turn ON the safety outputs.

●External device monitor inputs: X14 and X15 (T14 and T15)

X14 and X15 (T14 and T15) function as external device monitoring inputs. X14 and T14 are used as contact monitoring for external devices connected to Y0 and Y1. X15 and T15 are used as contact monitoring for external devices connected to Y2 and Y3.

Warning

Safety check signals (pulses signals) are sent from the drive terminals (T14, T15) to diagnose external devices and monitor circuits. The safety check signal can not be used as a power supply for connected devices.

Note: If there are unused safety outputs, short the external device monitor terminals (Xn) corresponding to the unused safety outputs and the drive terminals (Tn). If they are not shorted, the SafetyOne detects an input monitor error. As the result, the error LED displays a “1” and the unit changes to the Protection state.

5-4

●Start inputs: X16 and X17

X16 is used to control the start of the safety outputs as “auto start” which does not use a start switch, or “manual start” which does not detect welding of the start switch. When the start input (X16) is turned ON (the ON state of X16 must be kept over 0.1s) during all devices connected to the safety inputs are in safe state, a start condition is established. X17 is used to control the start of the safety outputs as “control start” which detects welding of the start switch. When the start input transits OFFONOFF (the ON state of X17 must be kept during 0.1s to 5s) when all devices connected to the safety inputs are in safe state, the start condition is established.

Note: If both of X16 and X17 are turned ON, the SafetyOne will detect an error. As a result, the error LED displays “3” and the state changes to the Stop state. Use only X16 or X17.

●Safety outputs (with OFF-delay timer): Y0 to Y3

Y0 to Y3 function as safety outputs with the OFF-delay timer. When the timer is set to “0s” (indication “1”), the safety outputs are shut OFF immediately.

Y0 and Y1: Safety output 1 Y2 and Y3: Safety output 2

●Safety input monitor outputs: Y4 to Y11

Y4 toY11 function as status monitors of the safety input devices connected to the SafetyOne. When both contacts of the safety device are ON, the output is ON. When both contacts are OFF, the output is OFF. If an input monitor error is detected, pulses (1Hz) are sent.

Y4 outputs the status of the safety input 1 (X0-T0, X1-T1). Y5 outputs the status of the safety input 2 (X2-T2, X3-T3). Y6 outputs the status of the safety input 3 (X4-T4, X5-T5). Y7 outputs the status of the safety input 4 (X6-T6, X7-T7). Y10 outputs the status of the safety input 5 (X10-T10, X11-T11). Y11 outputs the status of the safety input 6 (X12-T12, X13-T13)

●Safety output monitor outputs: Y12 and Y13

Y12 and Y13 function as monitor outputs that output the status of the safety outputs. When the safety outputs are OFF, the safety output monitor output is turned OFF immediately, even if the OFF-delay timer has been set. Y12 outputs the status of safety output 1 (Y0 and Y1). This turns ON when Y0 and Y1 are both ON. Y13 outputs the status of safety output 1 (Y2 and Y3). This turns ON when Y2 and Y3 are both ON.

5-5

●State monitor outputs: Y14 to Y16

Y14 to Y16 are monitor outputs for the internal status of the SafetyOne. Y14 turns ON when in the Initial or Stop state. Y15 turns ON in the Initial, Protection or Configuration state. Y16 turns ON when in the Run state. Refer to “Chapter 4 BASIC OPERATION”, or “Chapter 6 TROUBLESHOOTING”, for details of the each state.

Warning

The monitor outputs are not safety outputs. Do not use these to construct of a safety system.

●Solenoid outputs: Y17 and Y20

Y17 and Y20 are outputs for solenoid control that are used for a safety switch with a lock. In the Run state, when the safety outputs are OFF and 1 or more safety inputs are OFF, the solenoid outputs are turned ON. When all safety inputs are ON, the solenoid outputs are turned OFF, although the start input is not activated.

Warning

Solenoid outputs are not safety outputs. Do not use these to construct of a safety system.

Caution

Refer to "Chapter 2 PRODUCT SPECIFICATIONS" for specifications of each input and output.

5-6

Wiring example (Logic 1)

In the case of 4 emergency stop switches and 2 safety switches with locks are connected.

S1...4 :Emergency stop switch S5,6 :Safety switch with lock (spring lock type) S7 :Start switch K1...4 :Contactor L1,2 :Solenoid of safety switch for lock release M1,2 :Motor

24V DC 0V DC

SafetyOne

V+ V-

FES1 T0 X0 T1 X1

T2 X2 T3 X3

T4 X4 T5 X5

T6 X6 T7 X7

T10 X10 T11 X11

T12 X12 T13 X13

Y10 Y11 Y12 Y13 Y14 Y15 Y16

Y17

Y4 Y5 Y6 Y7

Fuse

K2Y1

K3Y2

K4Y3

to PLC

K1 K2

K3 K4

T14 X14 T15 X15

X16 X17

Y20

5-7

When not using the start switch （Auto start）

24V DC

X16 X17

When not detecting the welding of start switch （Manual start）

24V DC

X16 X17

When connecting multiple emergency stop switches in series

T0 X0 T1 X1

T12 X12 T13 X13

NOTE:　Applicable safety performance is dependnt on each system configuration.

When not using some inputs

When detecting the welding of start switch （Control start）

24V DC

X16 X17

Note: In the case of using a spring lock type safety switch for the safety input of SafetyOne, if the solenoid output of SafetyOne is connected to solenoid power terminal of the safety switch directly, the start condition cannot be established due to the safety input stays in the OFF state. In this case, connect the switch or other equipment to solenoid output of SafetyOne, and turn off the operation of the solenoid for lock control.

T0 X0 T1 X1

T12 X12 T13 X13

5-8

Timing chart (Logic 1)

1.Case to use the manual start input ( X16) 2.Case to use the control start input (X17)

(Note)

OFF delay

time

Power ON

Safety output ON

Power ON

Safety output ON

OFF delay

time

(Note）

Safety input : X0

Safety input : X1

Monitor output for X0 and X1 : Y4

Manual start input : X16

Safety output : Y0,Y1,Y2,Y3

Monitor output for safety output : Y12,Y13

Solenoid output : Y17,Y20

RUN monitor : Y16

(Note ） (Note ）

Max. 0.1s Max. 0.1s

Max. 6s

Initialization

(X2...X13 are ON in this timing chart.)

Safety input : X0

Safety input : X1

Monitor output for X0 and X1 : Y4

0.1s...5sMin. 0.1s

Control start input : X17

Safety output : Y0,Y1,Y2,Y3

Monitor output for safety output : Y12,Y13

Solenoid output : Y17,Y20

RUN monitor : Y16

Max. 6s

Initialization

(X2...X13 are ON in this timing chart.)

Note: W hen the input time difference at the dual channel safety inputs is 0.5s or more, the input monitor error is detected.

Refer to the following "Logic functions" for details.

5-9

Logic 2: General purpose logic for NO/NC contact inputs

Overview (Logic 2)

This logic function is for using dual channel NO/NC contact devices as safety protective measures for semiconductor manufacturing machines, food packaging machinery, and other machinery. This logic has 4 dual channel inputs for NO/NC contact devices and 2 dual inputs for direct opening inputs. When all of the safety inputs are in the safe state (for NO/NC contact devices: NO contacts are ON and NC contacts are OFF (actuators are in installed in the interlock switches), for direct opening devices: all contacts are ON), safety outputs are turned ON with the start input. While the safety outputs are ON, if the safe state of any safety input devices is broken (for NO/NC contact device: NO contact is OFF or NC contact is ON (actuator is removed from interlock switch), for direct opening inputs: contact is OFF), the safety outputs are turned OFF after the preset OFF-delay time.

5-10

Operation example (Logic 2)

・Emergency stop switches in the rest position.

・Movable guard is closed.

(All NO contacts are ON and NC contacts are OFF of

Non-contact interlock switches.)

and

Non-contact interlock switc

Emergency stop switch

Safety switch

ith lock

(Spring lock type)

Solenoid output OFF

Guard lock

・Start input is ON

Contactor/ safety relay ON

Machine running

・Safety outputs are ON.

Open!

Press!

Solenoid output ON

Safety switch with lock (Spring lock type)

・Emergency stop switch is pressed.

・Movable guard is opened.

(NO contact is OFF or NC contact is ON of

Non-contact interlock switch.)

Contactor/ safety relay OFF

Machine stop

Guard lock release

・Safety outputs are OFF.

・Solenoid outputs are ON.

5-11

Logic circuit (logic 2)

Safety input 1

T0, X0, T1 , X1

Safety input 2

T2, X2, T3, X3

Safety input 3

T4, X4, T5, X5

Safety input 4

T6, X6, T7, X7

Safety input 5

T10, X10, T11, X11

Safety input 6

T12, X12, T13, X13

Start input 1

X1 6

Start input 2

X1 7

External device monitor 1

T14, X1 4

External device monitor 2

T15, X1 5

Dual Channe l

NO/NC

Dual Channe l

NO/NC

Dual Channe l

NO/NC

Dual Channe l

NO/NC

Dual Channel

Direc t Opening

Dual Channel

Direc t Opening

Single Channel

Monitor

Single Channel

Monitor

Ex ter n al De v ic e

EDM

Ex ter n al De v ic e

EDM

Mon itor

Control

Start

=2k+1

Hold

Self-hold function

Trig ger

OS1

Hold

OSSD

with

Off delay

EDM

Hold

OSSD

with

Off delay

EDM

(Note3)

●Monitor output for safety input ●Monitor output for safety output ●Solenoid output

Safety ou tput 1

Safety ou tput 2

Monitor for

safety input 1

Monitor for

safety input 2

Monitor for

safety input 3

Monitor for

safety input 4

Monitor for safety input 5

Y10

X1 0

X1 1

Monitor for

safety input 6

Y11

X1 2

X1 3

Note1: When X output for safety input is turned on.

is OFF and X

is ON, the monitor

n+1

(n = 0,2,4,6)

(Note1)

(Note2)

Monitor for

Y0,Y1

safety output 1

Y12

OS1

(Note2)

Monitor for

Y2,Y3

safety output 2

Y13

OS1

Note2 : Monitor outputs for safety output 1 and 2 are turned OF F immediately independent of the set OFF-delay time.

Y0,Y1

Y17

Y2,Y3

Y20

Note3: In Run state, when the safety outputs are OFF and 1 or more safety inputs are off, the solenoid outputs are turned ON. When all safety inputs are ON, the solenoid outputs are turned OFF, Although start input is OFF.

5-12

Functions (Logic 2)

● Safety inputs: X0 toX13 (T0 to T13)

X0 to X7 (T0 to T7) function as dual channel NO/NC inputs. X10 to X13 (T10 to T13) function as dual channel direct opening inputs. The combinations of the dual channel inputs are shown below. Incorrect use of these combinations will result in an error. The input monitor error detection time between dual channel inputs is 0.5s. For information about connected control devices, see “SAFETY PRECAUTIONS” following “Logic functions”. X0-T0, X1-T1: Safety input 1 X2-T2, X3-T3: Safety input 2 X4-T4, X5-T5: Safety input 3 X6-T6, X7-T7: Safety input 4 X10-T10, X11-T11: Safety input 5 X12-T12, X13-T13: Safety input 6

Warning

Safety check signals (pulses signals) are transmitted from the drive terminals (T0 to T13) to diagnose connected safety devices and input circuits. Safety check signals can not be used as power for connected devices. In case of use of non-contact interlock switches with LEDs, refer to the “Wiring example (Logic 2)” for wiring with IDEC non-contact interlock switches HS7A series as S1, S2, S5 and S6.

Note: Solid state outputs, such as safety light curtains, can not be connected.

Note: If there are unused safety inputs, short or open between the receive terminals (Xn)

corresponding to the unused safety inputs and the drive terminals (Tn) as shown below. If this is not done, then the SafetyOne will not turn ON the safety outputs. Open： X0-T0, X2-T2, X4-T4, X6-T6 Short： X1-T1, X3-T3, X5-T5, X7-T7, X10-T10, X11-T11, X12-T12, X13-T13

● External device monitor inputs： X14 and X15 (T14 and T15)

X14 and X15 (T14 and T15) function as external device monitor inputs. X14 and T14 are used as contact monitors for external devices connected to Y0 and Y1. X15 and T15 are used as contact monitors for external devices connected to Y2 and Y3.

Warning

Safety check signals (pulses signals) are transmitted from the drive terminals (T14, T15) to diagnose external devices and monitor circuits. The safety check signal can not be used as the power for connected devices.

Note: If there are unused safety outputs, short between the external device monitor terminals (Xn) corresponding to the unused safety outputs and the drive terminals (Tn). If they are not shorted, the SafetyOne detects an input monitor error. As the result, the error LED displays “1” and the state changes to the Protection state.

5-13

●Start inputs: X16 and X17

X16 is used to control the start of the safety outputs as an “auto start” which does not use the start switch, or “manual start” which does not detect welding of the start switch. When the start input (X16) is turned ON (the ON state of X16 must be received for over 0.1s) during which all devices connected to the safety inputs are in safe state, the start condition is established. X17 is used to control the start of the safety outputs as a “control start” which detects welding of the start switch. When the start input transmits OFFONOFF (the ON state of X17 must be received for between 0.1s to 5s) during which all devices connected to the safety inputs are in the safe state, and then the start condition is established.

Note: If both of X16 and X17 are turned ON, the SafetyOne will detect an error. As the result, the error LED displays “3” and the state changes to the Stop state. Use either X16 or X17, but not both.

●Safety outputs (with OFF-delay timer): Y0 to Y3

Y0 to Y3 function as safety outputs with the OFF-delay timer. When the timer is set to “0s” (indication “1”), the safety outputs are shut OFF immediately.

Y0 and Y1: Safety output 1 Y2 and Y3: Safety output 2

● Safety input monitor outputs: Y4 to Y11

Y4 to Y11 function as status monitors of the safety input devices connected to the SafetyOne. Y4 to Y7: When safety devices are connected to X0 to X7 (T0 to T7), the output is ON while the contacts connected to X0, X2, X4, and X6 are OFF and while the contacts connected to X1, X3, X5, and X7 are ON. Y10 and Y11: When the both contacts of the safety device connected to safety output 5 and 6 are ON, the output is ON. When both contacts are OFF, the output is OFF. If an input monitor error is detected, pulses of (1Hz) are transmitted.

Y4 outputs the status of safety input 1 (X0-T0, X1-T1). Y5 outputs the status of safety input 2 (X2-T2, X3-T3). Y6 outputs the status of safety input 3 (X4-T4, X5-T5). Y7 outputs the status of safety input 4 (X6-T6, X7-T7). Y10 outputs the status of safety input 5 (X10-T10, X11-T11). Y11 outputs the status of safety input 6 (X12-T12, X13-T13).

●Safety output monitor outputs: Y12 and Y13

Y12 and Y13 function as monitoring outputs that output the status of the safety outputs. When the safety outputs are OFF, the safety output monitor output is turned OFF immediately, even if the OFF-delay timer has been set. Y12 outputs the status of safety output 1 (Y0 and Y1). This turns ON when Y0 and Y1 are both ON. Y13 outputs the status of safety output 1 (Y2 and Y3). This turns ON when Y2 and Y3 are both ON.

5-14

●State monitor outputs: Y14 to Y16

Y14 to Y16 monitor outputs for the internal status of the SafetyOne. Y14 turns ON during Initial state or Stop state. Y15 turns ON in the Initial state, Protection state or Configuration state. Y16 turns ON while in the Run state. Refer to “Chapter 4 BASIC OPERATION”, or “Chapter 6 TROUBLESHOOTING”, for details of each state.

Warning

Monitor outputs are not safety outputs. Do not use these to construct a safety system.

●Solenoid outputs: Y17 and Y20

Y17 and Y20 are outputs for solenoid control that are used for a safety switch with a lock. In the Run state, when the safety outputs are OFF and 1 or more safety inputs are OFF, the solenoid outputs are ON. When all safety inputs are ON, the solenoid outputs are OFF, although the start input is not activated.

Warning

Solenoid outputs are not safety outputs. Do not use these to construct a safety system.

Caution

Refer to "Chapter 2 PRODUCT SPECIFICATIONS" for specifications of each input and output.

5-15

Wiring example (Logic 2)

Incase of 4 non-contact interlock switches, 1 emergency stop switch, and 1 safety switch with

lock are connected.

S1...4 :Non-contact interlock switch S5 :Emergency stop switch S6 :Safety switch with lock (spring lock type) S7 :Start switch K1...4 :Contactor L1 :Solenoid of safety switch for lock release M1,2 :Motor

Fuse

24V DC 0V DC

V+

T0 X0 T1 X1

T2 X2 T3 X3

T4 X4 T5 X5

T6 X6 T7 X7

T10 X10 T11 X11

T12 X12 T13 X13

SafetyOne

V-

Y4 Y5 Y6

Y7 Y10 Y11 Y12 Y13 Y14 Y15 Y16

Y17

K2Y1

K3Y2

K4Y3

to PLC

5-16

K1 K2

K3 K4

T14 X14 T15 X15

X16 X17

Y20

When not using the start switch （Auto start）

24V DC

X16 X17

When connecting multiple components in series

T1 X1

When not detecting the welding of start switch （Manual start）

24V DC

X16 X17

When detecting the welding of start switch （Control start）

24V DC

X16 X17

T7 X7

T10 X10 T11 X11

T12 X12 T13 X13

NOTE:　Applicable safety performance is dependent on each system configuration.

When not using some safety inputs

Note: In the case of using a spring lock safety switch for the safety input of SafetyOne, if solenoid output of SafetyOne is connected to solenoid power terminal of the safety switch directly, the start condition cannot be established due to the safety input stays in the OFF state. In this case, connect the switch or other equipment to the solenoid output of SafetyOne, and use the OFF operation of the solenoid for lock control.

T0 X0 T1 X1

T6 X6 T7 X7 T10 X10 T11 X11 T12 X12 T13 X13

5-17

In case of using IDEC non-contact interlock switches HS7A series

S1、2　：　HS7A-DMC59□（1NO+1NC Contact, with LED・without LED）　or　　　　　　　 HS7A-DMP50□（1NO+2NC Contact, with LED・without LED） S5、6　：　HS7A-DMC790□（2NO Contact, without LED）　or HS7A-DMP700□（2NO+1NC Contact, without LED）

・Case to connect 2 non-contact interlock switches using 1 safety input

BN+

S１

T11

T10

X10

BN+

白

T11

T10

X10

BN+

Note 1） Illustration of contacts with magnet present. Note 2） X0 to X7 (T0 to T7) function as dual channel NO/NC inputs and can be connected to the HS7A-DMC59□（1NO+1NC Contact,with LED・without LED） or HS7A-DMP50□（1NO+2NC Contact, with LED・without LED）. Note 3） X10 to X13 (T10 to T13) function as dual channel direct opening inputs and can be connected to the HS7A-DMC790□ （ Same terminals functioning as dual channel direct opening inputs can be connected it in the case of another logic. Note 4） In the case to connect HS7A-DMC790□ or HS7A-DMP700□, applicable safety performance depends on each system configuration. Note 5） In the case to connect an LED type using dual channel NO/NC inputs, The maximum. number of connectable non-contact In the case of connecting without LED type at dual channel NO/NC inputs, The maximum. number of connectable non-contact interlock switches per one input is six. Note 6） Do not connect LED type at dual channel direct opening, but in this case connect without LED type maximum number of connectable non-contact interlock switches per one input is six. Note 7） In the case connecting two non-contact interlock switches per one input, applicable safety performance depends upon the system configuration.

2NO Contact, without LED) or the HS7A-DMP700 i2NO+1NC Contact, without LED).

interlock switches per one input is two. iSupply voltage of 24VDC or more. j

X11

BN+





BN+

X11

5-18

Timing chart (Logic 2)

1.Case to use the manual start input (X16) 2.Case to use the control start input (X17)

Power ON

Safety output ON

(Note）

Off de lay

time

Power ON

Safety output ON

Off delay

time

Safety input : X0

Safety input : X1

Monitor output for X0 and X1 : Y4

Manual start input : X16

Safety output : Y0,Y1,Y2,Y3

Monitor output for safety output : Y12,Y13

Solenoid output : Y17,Y20

RUN moni tor : Y16

Safety input : X0

(Note）

Safety input : X1

Monitor output for X0 and X1 : Y4

Min. 0.1s

Control start input : X17

Max. 0.1s

Safety output : Y0,Y1,Y2,Y3

Monitor output for safety output : Y12,Y13

Solenoid output : Y17,Y20

RUN moni tor : Y16

Max. 6s Max. 6s

Initialization Initialization

(X2, X4 and X6 are OFF and X3, X5, X7 and X10...X13 are ON in this timing chart.)

(Note）

0.1s...5s

Max. 0.1s

Note: W hen the input time difference for the dual channel safety inputs is 0.5s or more, an input monitor error is detected.

Refer to the following "Logic functions" for details.

5-19

Logic 3: General purpose logic for machines with openings

Overview (Logic 3)

This logic is for using safety devices with dual channel solid state outputs, such as safety light curtains, for safety protective measures of production machinery, robots, and other machinery. This logic enables the connection of 2 dual channel solid state output (PNP) devices and 4 dual channel direct opening inputs. When in this state all of the safety inputs are receiving safety input signals (24V DC is applied from the solid state output devices, and the all contacts of contact devices are closed), the safety outputs are turned ON upon input of the start input. If any of the safety input signals is cut OFF while the safety outputs are ON, the safety outputs are turned OFF after the preset OFF-delay time.

5-20

Operation example (Logic 3)

・Emergency stop switch is released.

・Invasions through

and

the opening are not detected.

Safety light curtain （PNP）

Interlock switch

Emergency stop switch

Safety switch with lock （Spring lock type）

Solenoid output OFF

・Start input is ON

Contactor/ safety relay ON

Machine running

Guard lock

・Safety outputs are ON.

Shade!

Safety switch with lock (Spring lock type）

・Emergency stop switch is pressed.

・Invasion through opening is detected.

Contactor/ safety relay OFF

Machine stop

Solenoid output ON

Guard lock release

・Safety outputs are OFF.

・Solenoid outputs are ON.

5-21

Logic circuit (Logic 3)

Safety input 1

X0, X1

Safety input 2

X2, X3

Safety input 3

T4, X4, T5, X5

Safety input 4

T6, X6, T7, X7

Safety input 5

T10, X10, T11, X11

Safety input 6

T12, X12, T13, X13

Start input 1

X16

Start input 2

X1 7

External device monitor 1

T14, X14

External device monitor 2

T15, X15

Dual Channel

Solid State

Dual Channel

Solid State

Dual Channel

Direct Opening

Dual Channel

Direct Opening

Dual Channel

Direct Opening

Dual Channel

Direct Opening

Single Channel

Monito r

Single Channel

Monito r

External Device

EDM

External Device

EDM

Monitor

Control

Start

=2k+1

Hold

Self-hold

function

Trigger

OS1

●Monitor output for safety input ●Monitor output for safety output ●Solenoid output

Y12

Y13

(Note 1)

Y0,Y1

Y2,Y3

Note 2: In Run state, when the safety outputs are OFF and 1 or more safety inputs are OFF, the solenoid outputs are turned ON. When all safety inputs are ON, the solenoid outputs are turned OFF, although start input is OFF.

X1 0

X1 1

X1 2

X1 3

Monitor for safety input 1

Monitor for safety input 2

Monitor for safety input 3

Monitor for safety input 4

Monitor for safety input 5

Monitor for safety input 6

Y10

Y11

Monitor for

Y0,Y1

safety output 1

OS1

Monitor for

Y2,Y3

safety output 2

OS1

Note 1: Monitor outputs for safety output 1 and 2 are turned OFF immediately independent of set OFF- delay time.

Hold

OSSD

Off delay

EDM

Hold

OSSD

Off delay

EDM

(Note 2)

with

Safety output 1

Safety output 2

Y17

Y20

5-22

Functions (Logic 3)

●Safety inputs: X0 to X13 (T4 to T13)

X0 to X3 function as dual channel solid state inputs. These enable the connection of dual channel solid state output (PNP) devices. X4 to X13 (T4 to T13) function as dual channel direct opening inputs. The combinations of dual channel inputs are as shown below. Incorrect use of these combinations will result in error. The input monitor error detection time for dual channel solid state inputs is 0.1 s. The input monitor error detection time for dual channel direct opening inputs is 0.5 s. For information about connected control devices, see “SAFETY PRECAUTIONS” following “Logic functions”. X0, X1: Safety input 1 X2, X3: Safety input 2 X4-T4, X5-T5: Safety input 3 X6-T6, X7-T7: Safety input 4 X10-T10, X11-T11: Safety input 5 X12-T12, X13-T13: Safety input 6

Warning

Safety check signals (pulses signals) are transmitted from the drive terminals (T4 to T13) to diagnose connected safety devices and input circuits. Safety check signals can not be used as power for connected devices.

Note: Don’t use T0 to T3.

Note: If there are unused safety inputs, for safety input 1 or safety input 2 (receive terminals: X0 to

X3), apply 24V DC to the terminals not connected to safety devices. For safety input 3 to 6 (receive terminals: X4 to X13, drive terminals: T4 to T13), short between the receive terminal (Xn) and the drive terminal (Tn). If this is not done, then the SafetyOne will not turn ON the safety outputs.

●External device monitor inputs： X14 and X15 (T14 and T15)

X14 and X15 (T14 and T15) function as external device monitoring inputs. X14 and T14 are used as contact monitors for external devices connected to Y0 and Y1. X15 and T15 are used as contact monitors for external devices connected to Y2 and Y3.

Warning

Safety check signals (pulses signals) are transmitted from the drive terminals (T14,T15) to diagnose external devices and monitoring circuits. The safety check signal can not be used as power for connected devices.

5-23

●Start inputs: X16 and X17

X16 is used to control the start of safety outputs as an “auto start” which does not use a start switch, or “manual start” which does not detect welding of a start switch. When a start input (X16) is turned ON (the ON state of X16 must be kept over 0.1s) while all devices connected to the safety inputs are in the safe state, the start condition is established. X17 is used to control the start of the safety outputs as a “control start” which detects welding of the start switch. When the start input changes from OFFONOFF (the ON state of X17 must be maintained between to 0.1s to 5s) while all devices are connected to the safety inputs in safe state, the start condition is established.

Note: If both of X16 and X17 are turned ON, the SafetyOne will detect an error. As the result, the error LED displays “3” and the state changes to the Stop state. Use either X16 or X17.

●Safety outputs (with OFF-delay timer): Y0 to Y3

Y0 to Y3 function as safety outputs with the OFF-delay timer. When the timer is set to “0s” (indication “1”), the safety outputs are shut OFF immediately.

Y0 and Y1: Safety output 1 Y2 and Y3: Safety output 2

●Safety input monitor outputs: Y4 to Y11

Y4 to Y11 function as status monitors of safety input devices connected to the SafetyOne. Y4 and Y5: When 24V DC is applied to both terminals of “X0 and X1” or “X2 and X3”, Y4 or Y5 is turned ON. Y6 to Y11: When both contacts of the safety device, connected to safety output 3 to 6, are ON, the output is ON. When the both contacts are OFF, the output is OFF. If an input monitor error is detected, pulses (1Hz) are transmitted.

Y4 outputs the status of safety input 1 (X0 and X1). Y5 outputs the status of safety input 2 (X2 and X3). Y6 outputs the status of safety input 3 (X4-T4, X5-T5). Y7 outputs the status of safety input 4 (X6-T6, X7-T7). Y10 outputs the status of safety input 5 (X10-T10, X11-T11). Y11 outputs the status of safety input 6 (X12-T12, X13-T13).

●Safety output monitor outputs: Y12 and Y13

Y12 and Y13 function as monitoring outputs that output the status of safety outputs. When the safety outputs are OFF, the safety output monitor output is turned OFF immediately, even if OFF-delay timer has been set. Y12 outputs the status of safety output 1 (Y0 and Y1). This turns ON when Y0 and Y1 are both ON.

Y13 outputs the status of safety output 2 (Y2 and Y3). This turns ON when Y2 and Y3 are both ON.

5-24

●State monitor outputs: Y14 to Y16

Y14 to Y16 are monitoring outputs for the internal status of the SafetyOne. Y14 turns ON when in Initial or Stop state. Y15 turns ON in Initial, Protection or Configuration state. Y16 turns ON in Run state. Refer to “Chapter 4 BASIC OPERATION”, or “Chapter 6 TROUBLESHOOTING”, for details of the each state.

Warning

Monitor outputs are not safety outputs. Do not use these to construct a safety system.

●Solenoid outputs: Y17 and Y20

Y17 and Y20 are outputs for solenoid control that are used for safety interlock switch with a solenoid lock. In the Run state, when the safety outputs are OFF and 1 or more safety inputs are OFF, the solenoid outputs are turned ON. When all safety inputs are ON, the solenoid outputs are turned OFF, although start input is not activated.

Warning

Solenoid outputs are not safety outputs. Do not use these to construct a safety system.

Caution

Refer to "Chapter 2 PRODUCT SPECIFICATIONS" for specifications of each input and output.

5-25

Wiring example (Logic 3)

2 safety light curtains, 2 emergency stop switches, and 2 safety switches with solenoid

lock are connected.

S1,2 :Safety light curtain S3,4 :Emergency stop switch S5,6 :Safety switch with lock (spring lock type) S7 :Start switch K1...4 :Contactor L1,2 :Solenoid of safety switch for lock release M1,2 :Motor

24V DC 0V DC

SafetyOne

Fuse

24V

OSSD1

OSSD2

OSSD1

OSSD2

K1 K2

K3 K4

V+

T0 X0 T1 X1

T2 X2 T3 X3

X4 T5 X5

T6 X6 T7 X7

T10 X10 T11 X11

T12 X12 T13 X13

T14 X14 T15 X15

X16 X17

V-

Y4 Y5 Y6

Y7 Y10 Y11 Y12 Y13 Y14 Y15 Y16

Y17

Y20

K2Y1

K3Y2

K4Y3

to PLC

5-26

When not using the start switch （Auto start）

When connecting multiple emergency stop switches in series

24V DC

X16 X17

When not detecting the welding of start switch （Manual start）

24V DC

X16 X17

T4 X4 T5 X5

T12 X12 T13 X13

NOTE:　Applicable safety performance is dependent upon each system configuration.

When not using some safety inputs

24V DC

When detecting the welding of start switch （Control start）

24V DC

X16 X17

T0 X0 T1 X1 T2 X2 T3 X3

T4 X4 T5 X5

T12 X12 T13 X13

Note: When using a spring lock type safety switch for a safety input of the SafetyOne, if the solenoid output of SafetyOne is connected to the solenoid power terminal of the safety switch directly, then the start condition cannot be established due to the safety input staying in the OFF state. In this case, connect the switch or other equipment to the solenoid output of SafetyOne, and use the OFF operation of the solenoid for lock control.

5-27

Using an IDEC light curtain SE4B series as S1, S2

S1，2 ：SE4B Safety Light Curtain

S1: SE4B Safety Light Curtain

Emitter Receiver

（White）TEST/START

TEST/START Input

（Brown）24VDC

（Gray）OSSD1

（Pink）OSSD2

（Blue）0VDC

（Yellow）EDM

（Brown）24VDC

（Blue）0VDC

N.C.

24VDC

0VDC

SafetyOne

T0 X0

T1 X1

S2: SE4B Safety Light Curtain

Emitter Receiver

TEST/START Input

（White）TEST/START

（Brown）24VDC

（Gray）OSSD1

（Pink）OSSD2 （Blue）0VDC

（Yellow）EDM

（Brown）24VDC

（Blue）0VDC

N.C.

5-28

Timing chart (Logic 3)

1.Using the manual start input (X16) 2.Using the control start input (X17)

Power ON

Safety output ON

Off delay

time

Not e Not e

Power ON

Safety output ON

Off delay

time

Safety input : X0

Safety input : X1

Monitor output for X0 and X1 : Y4

Manual start input : X16

Safety output : Y0,Y1,Y2,Y3

Monitor output for safety output : Y12,Y13

Solenoid output : Y17,Y20

RUN monitor : Y16

Not e

Min. 0.1s

Max. 0.1s

Max. 6s Max. 6s

Initialization

(X2...X13 are ON in this timing chart.)

Safety input : X0

Not e

Safety input : X1

Monitor output for X0 and X1 : Y4

0.1s...5s

Control start input : X17

Max. 0.1s

Safety output : Y0,Y1,Y2,Y3

Monitor output for safety output : Y12,Y13

Solenoid output : Y17,Y20

RUN monitor : Y16

Initialization

(X2...X13 are ON in this timing chart.)

Note: When the input time difference at the dual channel solid state inputs (X0-X1 and X2-X3) is 0.1s or more,

an input monitor error is detected . When the input time difference at the dual channel direct opening inputs an input monitor error is detected. Refer to “Logic function s” for details.

(X4-X5, X6-X7, X10-X11, and X12-X13) is 0.5s or more,

5-29

Logic 4: Muting function logic for machines with openings

Overview (Logic 4)

The logic described is for using safety devices with dual channel solid state outputs, such as safety light curtains, and for devices with output muting signals that enable muting functions that temporarily suspend safety functions of safety devices for safety protective measures of robots, conveyor lines, and other machines. This logic enables the connection of 2 dual channel solid state output (PNP) devices, 2 muting signal output (PNP) devices (Ex. Muting sensor, limit switch), and 2 dual channel direct opening inputs. When all of the safety inputs (X0, X1, X4, X5, and X10 to X13) are receiving safety input signals (24V DC is applied from the solid state output devices, and the all contacts of connected devices are closed), the safety outputs are turned ON upon input of the start input. If any of the safety input signals are cut OFF while the safety outputs are ON, the safety outputs are turned OFF after the preset OFF-delay time. However, if a muting signal has been applied to X2 and X3 (X6 and X7), the safety output does not turn OFF even if the safety inputs signal to X0 and X1 (X4 and X5) are cut OFF.

5-30

Operation example (Logic 4)

Safety light

Hazardous Area

Safety light curtain

Muting sensors

(Note)

Work Objec t

Muting lamp

(Note) Make sure that the intersection of optical axes is within the hazardous area.

・Emergency stop switch is released.

・Invasions through opening are not detected.

and

curtain （PNP）

Muting sensor （PNP）

Safety light curtain （PNP）

Muting sensor （PNP）

Emergency stop switch

・Start input is ON

Contactor/ safety relay ON

Machine running

Muting lamp OFF

・Safety outputs are ON.

Muting lamp

・Safety outputs are ON.

Hazardous Area

Muting sensor beam blocked Light curtain beams blocked

Light curtain blocked

Hazardous Area

Shade!

・ Invasion through opening is detected while muting sensors are shaded.

Shade!

Contactor/ safety relay ON

Machine running

Muting lamp ON

・Safety outputs are ON. ・Muting lamp outputs are ON.

Contactor/ safety relay OFF

Machine stop

・Safety outputs are ON.

Warning

Light curtain beams blocked

Muting lamp OFF

Light curtain beams blocked

・ Invasion through opening is detected while muting sensors are not shaded.

・Safety outputs are OFF.

When installing light curtains and muting sensors, ensure safety by referring to

IEC TS 62046 technical documents.

5-31

Logic circuit (Logic 4)

Safety input 1

X0 , X1

Muting input 1

X2 , X3

Safety input 2

X4 , X5

Muting input 2

X6 , X7

Safety input 3

T10, X10, T11, X11

Safety input 4

T12, X12, T13, X13

Start input 1

X1 6

Start input 2

X1 7

External device mon ito r 1

T14, X14

External device mon ito r 2

T15, X15

Dual Channel

Solid State

Muting input

Dual Channel

Solid State

Muting input

Dual Channel

Direct Opening

Dual Channel

Direct Opening

Single Channel

Monitor

Single Channel

Monitor

External Device

EDM

Monitor

External Device

Monitor

Safety

Control

Input

Mut ing

Input

Mut ing

Muting

function

Muting

function

Control

Start

=2k+1

Safety ou tput 1

Hold

Self-hold

function

Trigger

OS1

Hold

OSSD

with

Off delay

EDM

Hold

OSSD

with

Off delay

EDM

Safety ou tput 2

●Monitor output for safety input ●Monitor output for safety output ●Muting lamp output

Y12

Y13

(Note1)

(Note2) The muting lamp outputs are tur ned ON when the muting function of the safety inputs are effective. Even if the muting inputs are turning ON, the muting lamp outputs are not turned ON, when the muting functions are not effective because the muting watch time is exceeded and the safety inputs were turned OFF before turned ON the muting inputs.

Monitor for

safety input 1

Monitor for

safety input 2

Monitor for

safety input 3

X1 0

X1 1

Monitor for

safety input 4

X1 2

X1 3

●Monitor output for muting input

Monitor for

muting input 1

Monitor for muting input 2

Monitor for

Y0,Y1

OS1

safety output 1

Monitor for

Y2,Y3

safety output 2

OS1

(Note1) Monitor outputs for safety output 1 and 2 are turned OFF immediately independent of set OFF- delay time.

(Note2) Y17

(Note2) Y20

5-32

Function (LOGIC 4)

●Safety inputs: X0, X1, X4, X5, X10 to X13 (T10 to T13)

X0, X1, X4, and X5 function as dual channel solid state inputs. These enable connections of dual channel solid state output (PNP) devices. X10 to X13 (T10 to T13) function as dual channel direct opening inputs. The combinations of dual channel inputs are shown below. Incorrect use of these combinations will result in an error. The input monitor error detection time for dual channel solid state inputs is

0.1 s. The input monitor error detection time for dual channel direct opening inputs is 0.5 s. For information about connected control devices, see “SAFETY PRECAUTIONS” and “Logic functions”. X0 and X1: Safety input 1, X4 and X5: Safety input 2 X10-T10, X11-T11: Safety input 3, X12-T12, X13-T13: Safety input 4

Warning

Safety check signals (pulses signals) are transmitted from the drive terminals (T10 to T13) to diagnose connected safety devices and input circuits. Safety check signals can not be used as power for connected devices.

Note: Don’t use T0, T1, T4, and T5. Note: If there are unused safety inputs, for safety input 1 or safety input 2 (receive terminals:

X0,X1, X4, and X5), apply 24V DC to the terminals not connected to safety devices. For safety input 3 and safety input 4 (receive terminals: X10 to X13, drive terminals: T10 to T13), short between the receive terminal (Xn) and the drive terminal (Tn). If this is not done, then the SafetyOne will not turn ON its safety outputs.

●Muting inputs： X2, X3, X6, and X7

X2, X3, X6, and X7 function as muting inputs. Muting sensors (3wire, PNP output) or limit switches can be connected as muting signal sources. 2 signals from Independent muting signal sources should be used for 1 muting input. The combinations of inputs are shown below. Incorrect use of these combinations will result in an error. When X2 and X3 are both ON, the safety function of safety input 1 is suspended. When X6 and X7 are both ON, the safety function of safety input 2 is suspended. Even if the safety input that is suspended has its safety functions turned OFF, the safety outputs do not turn OFF. The input monitor error detection time of muting inputs is 3s. For information about connected control devices, see “SAFETY PRECAUTIONS” and “Logic functions”. X2, X3: Muting input 1 X6, X7: Muting input 2

Warning

Muting inputs are not safety inputs. Do not use these to construct a safety system.

Note: Do not use T2, T3, T6, and T7 Note: If there are unused muting inputs, open those terminals. Note: The maximum time to suspend the safety function continuously (muting monitor time) is 60s. If muting continues over 60s, the muting function is disabled, even if the muting inputs are still ON.

5-33

●External device monitor inputs： X14 and X15 (T14 and T15)

Warning

Safety check signals (pulses signals) are transmitted from the drive terminals (T14,T15) to diagnose external devices and monitor circuits. The safety check signal can not be used as power for connected devices.

Note: If there are unused safety outputs, short between external device monitor terminals (Xn) corresponding to the unused safety outputs and the drive terminals (Tn). If they are not shorted, the SafetyOne detects an input monitor error. As the result, an error LED displays “1” and the state changes to the Protection state.

●Start inputs: X16 and X17

X16 is used to control the start of the safety outputs as an “auto start” which does not use a start switch, or “manual start” which does not detect welding of the start switch. When the start input (X16) is turned ON (the ON state of X16 must be turned on for more than 0.1s) all devices connected to the safety inputs are in the safe state, and the start condition is established. X17 is used to control the start of the safety outputs as a “control start” which detects welding of the start switch. When the start input changes from OFFONOFF (the ON state of X17 must be turned on between 0.1s to 5s) all devices connected to the safety inputs are in the safe state, and the start condition is established.

Note: If both of X16 and X17 are turned ON at the same time, the SafetyOne will detect an error. As a result, the error LED displays “3” and the state changes to the Stop state. Use either X16 or X17, but not both.

●Safety outputs (with OFF-delay timer): Y0 to Y3

Y0 to Y3 function as safety outputs with the OFF-delay timer. When the timer is set to “0s” (indication “1”), the safety outputs are shut OFF immediately. Y0 and Y1: Safety output 1 Y2 and Y3: Safety output 2

●safety input monitor outputs: Y4, Y6, Y10 and Y11

Y4, Y6, and Y10 to Y11 function as status monitoring of safety input devices connected to the SafetyOne. Y4 and Y6: When 24V DC is applied to both terminals of “X0 and X1” or “X4 and X5”, Y4 or Y6 are turned ON. Y10 and Y11: When the both contacts of the safety device connected to safety output 5 and 6 are ON, the output is ON. When the both contacts are OFF, the output is OFF. If an input monitoring error is detected, pulses (1Hz) are transmitted. Y4 outputs the status of safety input 1 (X0 and X1). Y6 outputs the status of safety input 3 (X4 and X5). Y10 outputs the status of safety input 5 (X10-T10, X11-T11). Y11 outputs the status of safety input 6 (X12-T12, X13-T13).

5-34

●Muting input monitor outputs： Y5 and Y7

Y5 and Y7 function as monitoring outputs that output the status of the muting signal devices connected to the SafetyOne. When 24V DC is applied to both terminals of “X2 and X3” or “X6 and X7”, either Y5 or Y7 are turned ON. If an input monitoring error is detected, pulses (1Hz) are transmitted. Y5 outputs the status of muting input 1 (X2 and X3). Y7 outputs the status of muting input 2 (X6 and X7).

●Safety output monitor outputs: Y12 and Y13

Y12 and Y13 function as monitoring outputs that output status of the safety outputs. When the safety outputs are OFF, the safety output monitoring output is turned OFF immediately, even if OFF-delay timer has been set. Y12 outputs the status of safety output 1 (Y0 and Y1). This turns ON when Y0 and Y1 are both ON.

Y13 outputs the status of safety output 2 (Y2 and Y3). This turns ON when Y2 and Y3 are both ON.

●State monitor outputs: Y14 to Y16

Warning

Monitor outputs are not safety outputs. Do not use these to construct a safety system.

●Muting lamp outputs： Y17 and Y20

Y17 and Y20 are outputs to indicate that the safety functions of corresponded safety inputs are being suspended. Y17 turns ON when safety function of safety input 1 is suspended. Y20 turns ON when safety function of safety input 2 is suspended.

Warning

Muting lamp outputs are not safety outputs. Do not use these to construct a safety system.

Note: In Logic 4, muting lamp output terminals (Y17 and Y20) detect that connected indicator

lights are disconnected or unconnected. If these failures are detected, the error LED displays “5” and the state changes to the Stop state. When not using the muting function, connect a resistor (10 k, 1/4W) to these terminals.

Caution

Refer to "Chapter 2 PRODUCT SPECIFICATIONS" for specifications of each input and output.

5-35

Wiring example (Logic 4)

2 safety light curtains and 4 muting sensors and 1 emergency stop switch and 1 safety switch are

connected.

S1,4 :Safety light curtain

24V DC

S2,3,5,6 :Muting sensor S7 :Emergency stop switch S8 :Safety switch S9 :Start switch K1...4 :Contactor L1,2 :Muting lamp M1,2 :Motor

SafetyOne

Fuse

0V DC

24V

Main circuit

24V

Main circuit

K1 K2

K3 K4

OSSD1

OSSD2

Main circuit

OSSD1

OSSD2

Main circuit

V+

T0 X0 T1 X1

T2 X2

T3 X3

T4 X4 T5 X5

T6 X6

T7 X7

T10 X10 T11 X11

T12 X12 T13 X13

T14 X14 T15 X15

X16 X17

V-

Y4 Y5 Y6

Y7 Y10 Y11 Y12 Y13 Y14 Y15 Y16

Y17

Y20

K2Y1

K3Y2

K4Y3

to PLC

5-36

When not using the start switch （Auto start）

24V DC

X16 X17

When not detecting the welding of start switch （Manual start）

24V DC

When connecting multiple emergency stop switches

in series

T10 X10 T11 X11

T12 X12 T13 X13

NOTE:　Applicable safety performance is dependent upon each system configuration.

X16 X17

When detecting the welding of start switch （Control start）

24V DC

X16 X17

When not using some safety inputs

24V DC

T0 X0 T1 X1 T2 X2 T3 X3 T4 X4 T5 X5 T6 X6 T7 X7

T10 X10 T11 X11

0V DC

T12 X12 T13 X13

NOTE: In Logic 4,the muting lamp output terminals (Y17 and Y20) detect that connected indicator lights are disconnected or unconnected. When not using the muting function, connect a resistor across these terminals. If no resistor is connected, then the SafetyOne detects any wiring errors and locks out operations.

Y17 Y20

注）

5-37

Timing chart (Logic 4)

1.Example of using the manual start input (X16)

Muti ng start

Power ON

Safety input : X0

Safety input : X1

Muting input : X2

Muting input : X3

Monitor output for X0 and X1 : Y4

Safety output

(Note 3）

(Note 4）

Muting end

Off delay time

(Note 3）

(Not e 4 ）

(Note 1）

Muti ng start

Safety output

Muting end

(Note 2）

Muti ng lamp output : Y17

Min. 0.1s

Manual start input : X16

Max. 0.1s

Safety output : Y0,Y1,Y2,Y3

Monitor output for safety output : Y12,Y13

RUN moni tor : Y16

Max. 6s

Initialization

(X4, X5, X10...X13 are ON and X6, X7 are OFF in this chart.)

Note 1: When the safety inputs were turned OFF before the muting inputs were turned ON, the muting functions are not effective

and the safety outputs are not turned ON.

Note 2: W hen the muting inputs are turned ON while the safety inputs are ON, the muting functions are effective and the safety outputs are turned ON upon input of the start input.

Note 3: When the input time difference at the dual channel solid state inputs (X0-X1, X4-X5) is greater than 0.1s

input monitor error is detected. When the input time difference at the dual channel direc t opening inputs

(X10-X11, X12-X13) is greater than 0.5s input monitor error is detected. Refer to the following "Logic functions" for details.

Note 4: When the input time difference at the muting inputs (X2-X3, X6-X7) is greater than 3s input monitor error is detected. Refer to the following "Logic functions" for details.

5-38

2.Example of using the control start input (X17) Muting start

Power ON

Saf ety output

Safety input : X0

(Note 3） (Note 3）

Safety input : X1

Muting i nput : X2

Muting i nput : X3

Monitor output for X0 and X1 : Y4

Muti ng lamp output : Y17

(Note 4）

0.1s...5s

Muting end

Off delay time

(Note 3）

(Note 4）

(Note １）

Muting start

Safety output

Muti ng end

(Note 2)

0.1s...5s

Control start input : X17

Max. 0.1s

Safety output : Y0,Y1,Y2,Y3

Monitor output for safety output : Y12,Y13

RUN monitor : Y16

Max. 6s

Initialization

(X4, X5, X10...X13 are ON and X6, X7 are OFF in this chart.)

Note 1: When the safety inputs were turned OFF bef ore the muting inputs were turned ON, the muting functi ons ar e not effecti ve and the safety outputs are not turned ON.

Note 2: W hen the muting inputs are turned ON while the safety inputs are ON, the muting functions are effective and the safety outputs are turned ON upon initiation of the start input.

Note 3: When the input time difference at the dual channel solid state inputs (X0-X1 and X2-X3) is greater than 0.1s

input monitor error is detected. When the input time difference at the dual channel direct opening inputs

(X4-X5, X6-X7, X10-X11, and X12-X13) is greater than

input monitor error is detected. Refer to the following "Logic functions" for details.

Note 4: When the input time difference at the muting inputs (X2-X3, X6-X7) is greater than 3s an input monitor error is detected. Refer to the following "Logic functi ons" for details.

5-39

Logic 5: General purpose logic for devices for which sync time between

contacts cannot be specified

Overview (Logic 5)

The logic described is for safety protective measures applicable to production machinery, robots, and other machinery. This logic enables the connection 6 dual channel dependent inputs. Same as Logic 1, when SafetyOne is in the safe state, all of the safety inputs can receive safety input signals (the contacts of all connected safety devices are ON), safety outputs are turned ON upon input of the start input. While the safety outputs are ON, if the safety input signal to any input of the safety inputs has been turned OFF (the contacts of any the safety devices are OFF), the safety outputs are turned OFF after the preset OFF-delay time. The difference from Logic 1 is that the input monitoring error detection time in Logic 5 is infinite, so safety functions can be performed independent of the speed of opening the guard.

5-40

Operation example (Logic 5)

Interlock switch A

Production machinery

STOP

In case of Logic 1

Interlock switch A （Single contact ）

Interlock switch B （Single contact ）

In case of Logic 5

Interlock switch A （Single contact ）

Interlock switch B （Single contact)

Interlock switch B

Contact ON

（Door is closed）

Contact OFF

（Door is opened）

Contact ON

（Door is closed）

Contact OFF

（Door is opened）

Contact ON

（Door is closed）

Contact OFF

（Door is opened）

Contact ON

（Door is closed）

Contact OFF

（Door is opened）

Open!

Input monitor error detection time is 0.5s.



Input monitor error detection time is infinite.

Open!

The syncronizations of each safety input device is checked.

Input monitor error detection time is exceeded.

Input monitor error is detected.

As the result of input monitor error detection time is infinite, the error is not detected. Safety output is turned off.

・Safety outputs are ON.

Press!

Open!

Contactor/ safety relay OFF

Solenoid output ON

Guard lock release

・Emergency stop switch is pressed

・Movable guard is opened.

(Contacts of 1 of

are OFF)

the interlock switches

Machine stop

・Safety outputs are OFF.

・Solenoid outputs are ON.

5-41

Logic circuit (Logic 5)

Safety input 1

T0, X0, T1, X1

Safety input 2

T2, X2, T3 , X3

Safety input 3

T4, X4, T5 , X5

Safety input 4

T6, X6, T7 , X7

Safety input 5

T10, X10, T11, X11

Safety input 6

T12, X12, T13, X13

Start input 1

X1 6

Start input 2

X1 7

External device monitor

T14, X1 4

External device monitor

T15, X1 5

Dual Channel

Depende nt

Dual Channel

Depende nt

Dual Channel

Depende nt

Dual Channel

Depende nt

二重化連動

Dual Channel

Depende nt

入力

Dual Channel

Depende nt

Single Channel

Monitor

Single Channel

Monitor

External Device

EDM

Ex ter n al De v ic e

外部デバイ

EDM

スモニタ入力

Monitor

Mon ito r

Control

Start

=2k+1

ホールド

Hold

Self-hold

自己保持

function

トリガー

Trigger

OS1

●Monitor output for safety input ●Monitor output for safety output ●Solenoid output

Y12

Y13

(Note1)

Y0,Y1

Y2,Y3

Note 2: In Run state, when the safety outputs are OFF and 1 or more safety inputs are OFF, the solenoid outputs are turned ON. When all safety inputs are ON, the solenoid outputs are turned OFF, although start input is OFF.

X1 0

X1 1

X1 2

X1 3

Monitor for safety input 1

Monitor for safety input 2

Monitor for safety input 3

Monitor for safety input 4

Monitor for safety input 5

Monitor for safety input 6

Y10

Y11

Monitor for

Y0,Y1

safety output 1

OS1

Monitor for

Y2,Y3

safety output 2

OS1

Note 1: Monitor outputs for safety output 1 and 2 are turned OFF immediately independent of set OFF-delay time.

Hold

OSSD

with

Off delay

EDM

Hold

OSSD

with

Off delay

EDM

(Note2)

Safety output 1

Y0 Y1

Safety output 2

Y2 Y3

Y17

Y20

5-42

Functions (Logic 5)

●Safety inputs: X0 to X13 (T0 to T13)

X0 to X13 (T0 to T13) function as dual channel dependent inputs. The combinations of dual channel inputs are shown below. Incorrect use of these combinations will result in an error. The input monitor error detection time between dual channel inputs is infinite. For operation of only 1 contact of a dual channel dependent input, the behavior of SafetyOne is,

-ONOFFON: Input monitor error is detected, and the state changes to the Protection state.

-OFFONOFF: The state changes to the Protection state temporarily, after that, the state is restored to Run state immediately. (In these cases, the input monitor error detection time is 0.1s.) For information about connected control devices, see “SAFETY PRECAUTIONS”.

X0-T0, X1-T1: Safety input 1 (If 1 or both contacts are OFF, the safety input is OFF.) X2-T2, X3-T3: Safety input 2 (If 1 or both contacts are OFF, the safety input is OFF.) X4-T4, X5-T5: Safety input 3 (If 1 or both contacts are OFF, the safety input is OFF.) X6-T6, X7-T7: Safety input 4 (If 1 or both contacts are OFF, the safety input is OFF.) X10-T10, X11-T11: Safety input 5 (If 1 or both contacts are OFF, the safety input is OFF.) X12-T12, X13-T13: Safety input 6 (If 1 or both contacts are OFF, the safety input is OFF.)

Warning

Safety check signals (pulses signals) are sent from the drive terminals (T0 to T13) to diagnose the

connected safety devices and the input circuits. Safety check signals can not be used as power for the connected devices.

Note: Solid state outputs, such as safety light curtains, can not be connected.

Note: If there are unused safety inputs, short between the receive terminals (Xn) corresponding to the unused safety inputs and the drive terminals (Tn). If they are not shorted, the SafetyOne will not turn ON the safety outputs.

●External device monitor inputs: X14 and X15 (T14 and T15)

Warning

Safety check signals (pulses signals) are sent from the drive terminals (T14, T15) to diagnose the external devices and the monitor circuits. The safety check signal can not be used as a power for connected devices.

5-43

●Start inputs: X16 and X17

X16 is used to control the start of the safety outputs as an “auto start” which does not use a start switch, or a “manual start” which does not detect welding of the start switch. When the start input (X16) is turned ON (the ON state of X16 must be on longer than 0.1s) all devices connected to the safety inputs are in safe state, the start condition is established. X17 is used to control the start of the safety outputs as a “control start” which detects welding of the start switch. When the start input changes from OFFONOFF (the ON state must be kept on from 0.1s to 5s) all devices connected to the safety inputs are in safe state, the start condition is established.

Note: If both of X16 and X17 are turned ON, the SafetyOne will detect an error. As the result, the error LED displays “3” and the state changes to the Stop state. Use only either X16 or X17, but not both at the same time.

●Safety outputs (with OFF-delay timer): Y0 to Y3

Y0 to Y3 function as safety outputs with the OFF-delay timer. When the timer is set to “0s” (indication “1”), the safety outputs shut OFF immediately.

Y0 and Y1: Safety output 1 Y2 and Y3: Safety output 2

●Safety input monitor outputs: Y4 to Y11

Y4 toY11 function as status monitors of safety input devices connected to the SafetyOne. When the both contacts of the safety device are ON, the output is ON; when 1 or more contacts are OFF, the output is OFF. If input monitoring errors are detected, pulses (1Hz) are transmitted.

●Safety output monitor outputs: Y12 and Y13

Y12 and Y13 function as monitoring outputs that output the status of the safety outputs. When the safety outputs are OFF, the monitor output turns OFF immediately, even if the OFF-delay timer has been set. Y12 outputs the status of safety output 1 (Y0 and Y1). This turns ON when Y0 and Y1 are both ON. Y13 outputs the status of safety output 2 (Y2 and Y3). This turns ON when Y2 and Y3 are both ON.

5-44

●State monitor outputs: Y14 to Y16

Y14 to Y16 are monitoring outputs for the internal status of the SafetyOne. Y14 turns ON when in Initial or Stop state. Y15 turns ON in Initial, Protection or Configuration state. Y16 turns ON when in Run state. Refer to “Chapter 4 BASIC OPERATION”, or “Chapter 6 TROUBLESHOOTING”, for details of the each state.

Warning

The monitor outputs are not safety outputs. Do not use these to construct a safety system.

●Solenoid outputs: Y17 and Y20

Warning

Solenoid outputs are not safety outputs. Do not use these to construct a safety system.

Caution

Refer to "Chapter 2 PRODUCT SPECIFICATIONS" for specifications of each input and output.

5-45

Wiring example (Logic 5)

Example of 2 emergency stop switches, 2 interlock switches and 2 safety switches with lock are connected.

S1,2 :Emergency stop switch S3,4 :Safety switch

Fuse

0V DC

24V DC

S5,6 :Safety switch with lock (spring lock type) S7 :Start switch K1...4 :Contactor L1,2 :Solenoid of safety switch for lock release M1,2 :Motor

SafetyOne

V+ V-

T2 X2 T3 X3

T4 X4

T6 X6 T7 X7

T10

X10

T11

X11

T12

X12

T13

X13

Y4 Y5 Y6

Y7 Y10 Y11 Y12 Y13 Y14 Y15 Y16

Y17

K2Y1

K3Y2

K4Y3

to PLC

5-46

K1 K2

K3 K4

T14

X14

T15

X15

X16 X17

Y20

When not using the start switch （Auto start）

24V DC

X16 X17

When not detecting the welding of start switch （Manual start）

When connecting multiple emergency stop switches in series

T0 X0 T1 X1

T12 X12 T13 X13

24V DC

X16 X17

When detecting the welding of start switch （Control start）

24V DC

X16 X17

NOTE:　Applicable safety performance is dependent upon system configuration.

When not using some safety inputs

T0 X0 T1 X1

T12 X12 T13 X13

Note: If using a spring lock type safety switch as the safety input of SafetyOne, if the solenoid output of SafetyOne is connected to the solenoid power terminal of the safety switch directly, then the start condition cannot be established due to the safety input being in the OFF state. In this case, connect the switch or other equipment to the solenoid output of SafetyOne, and perform the OFF operation of the solenoid for lock control.

5-47

Timing chart (Logic 5)

1.Example of using the manual start input (X16) 2.Example of using the control start input (X17)

Power ON

Safety output ON

(Note ）

Off delay

time

Power ON

(Note）

Safety output ON

Of f de lay

time

Safety input : X0

Safety input : X1

Monitor output for X0 and X1 : Y4

Manual start input : X16

Safety output : Y0,Y1,Y2,Y3

Monitor output for safety output : Y12,Y13

Solenoid output : Y17,Y20

RUN moni tor : Y16

Safety input : X0

(Note）

Max. 6s Max. 6s

Initialization Initialization

(Note） (Note）

Safety input : X1

Monitor output for X0 and X1 : Y4

Control start input : X17

Safety output : Y0,Y1,Y2,Y3

Monitor output for safe ty output : Y12,Y13

Solenoid output : Y17,Y20

RUN moni tor : Y16

(Note）

0.1s...5sMin. 0.1s

Max. 0.1sMax. 0. 1s

(X2...X13 are ON in this chart.)

Note: The detection ti me of i nput monitor error is infinite.

Refer to the following “Logic functi ons” for details.

(X2...X13 are ON in this c hart.)

5-48

Logic 6: The logic applicable for selection of an active safety input device

Overview (Logic 6)

For production machines, robots, and the like, a hazard is generally isolated by a usual protective door (guard); however, when performing maintenance, the machine is operated in the condition that a person is in the danger zone. For such a situation, the logic described is applicable to the mode selection between teach mode (maintenance mode) and the auto mode (operating mode). This logic enables the connection of 1 mode select input, a dual channel dependent input, and a four dual channel direct opening input. While SafetyOne is in the teach mode, if safety inputs 2 (active only in teach mode), 5 and 6 (always active) can receive safety input signals (all contacts of the safety devices are ON), safety outputs are turned ON upon input of the start input. While the safety outputs are ON, if the safety input signal to any of the safety inputs 2, 5 or 6 have been turned OFF (the contact of any safety device is OFF), the safety outputs are turned OFF after the preset OFF-delay time has elapsed. When SafetyOne is in auto mode, if safety inputs 3, 4 (active only in auto mode) 5, and 6 (always active) can receive safety input signals (all contacts of the safety devices are ON), safety outputs are turned ON upon input of the start input. While the safety outputs are ON, if the safety input signal to any input of the safety input 3, 4, 5 or 6 have been turned OFF (the contact of any safety device is OFF), the safety outputs are turned OFF after the preset OFF-delay time has elapsed.

5-49

Operation example (Logic 6)

● Auto mode (Operating mode)

Machine running Machine stop (Safe state)

Machine stop

Press!

Open!

Auto mode

Enabling switch

Interlock switc

afety switch ith lock

(Spring lock type)

Emergency stop

witch

Inactive

Teach mode

Selector switch

Solenoid output OFF

Guard lock

・Safety outputs are ON.

Teach mode (operating mode)

●

Machine running Machine stop (Safe state)

Inactive

Auto mode

Contactor/ safety relay ON

Machine running

Open!

Safety switch

ith lock

(Spring lock type)

Press!

・Emergency stop switch is pressed

・Movable guard is opened.

(Contacts interlock switches are OFF)

Inactive

Teach mode

Selector switch

Solenoid outpu t ON

Guard lock release

Contactor/ safety relay OFF

・Safety outputs are OFF.

・Solenoid outputs are ON.

Inactive

Machine stop

Enabling switch

Position 2!

Interlock switch

Safety switch with lock (Spring lock type)

Emergency stop switch

・Safety outputs are ON.

Auto mode

Inactive

Teach mode

Selector switch

Solenoid outpu t OFF

Guard lock

Position1! Position3!

Safety switch with lock (Spring lock type)

Auto mode

Inactive

Position 2!

Contactor/ safety relay ON

Machine running

・Emergency stop switch is pressed

・Release the hand from the enabling switch or

grasp the enabling switch strongly

Machine stop

Inactive

Teach mode

Selector switch

Solenoid outpu t ON

Guard lock release

・Safety outputs are OFF.

・Solenoid outputs are ON.

Press!

Position1! Position3!

Contactor/ safety relay OFF

Machine stop

5-50

Logic circuit (Logic 6)

Safety input

T10, X10, T11, X11

Safety input

T12, X12, T13, X13

Start input

Ex ternal device monitor 1

Ex ternal device monitor 2

T2, X2, T3, X3

T0, X0, X1

T4, X4, T5, X5

T6, X6, T7, X7

X1 6

X1 7

T14, X1 4

Dual Channel

Depende nt

Selector

Dual Channel

Direct Opening

Dual Channel

Direct Opening

Dual Channel

Direct Opening

Dual Channel

Direct Opening

Single Channel

Monitor

Single Channel

Monitor

External Device

EDM

External Device

EDM

Mod e

Sw itch

Monitor

Teach Mode

Auto Mode

Control

Start

Self-hold function circuit 1

Hold

Self-hold

function

Trigger

Self-hold function circuit 2

Hold

Self-hold

function

Trigger

Self-hold function circuit 3

Hold

Self-hold

function

Trigger

Safety output 1

OSSD

安全出力

（オフディレー

with

タイマ付）

Off delay

EDM

ホールド

Hold

安全出力

OSSD

（オフディ

with

レータイマ

Off delay

付）

EDM

ホールド

Hold

OS1

Y0 Y1

Safety output 2

●Monitor output for safety input ●Monitor output for safety output ●Solenoid output

(Note1)

Monitor for safety input 1

Monitor for

X1 0

X1 1

safety input 2

Monitor for safety input 3

Monitor for safety input 4

Monitor for safety input 5

Y10

Monitor for

X1 2

X1 3

safety input 6

Y11

Note1 : When safety input 1 is Auto mode, the monitor for safety input 1 is turned OFF.

Monitor for

(Note2)

Y0,Y1

safety output 1

Y12

OS1

(Note2)

Monitor for

Y2,Y3

safety output 2

Y13

OS1

Note 2: Monitor outputs for safety output 1 and 2 are turned OFF immediately independent of set OFF-delay time.

(Note3)

Auto mode

Y0,Y1

Y2,Y3

Note3: Auto mode: In Run state, when the safety outputs are OFF and 1 or more corresponding safety inputs are OFF, the solenoid outputs are turned ON. When all corresponding safety inputs are ON, the solenoid outputs are turned OFF without ON signal of the start input.

(Note4) Teach mode

Y0,Y1 Y17

Y2,Y3

Note4: Teach mode : In Run state, when the safety outputs are OFF, the solenoid outputs are turned ON.

Y20

Y17

Y20

5-51

Functions (Logic 6)

● Safety inputs: X0 to X13 (T0 to T13)

X0 and X1 (T0) function as mode select inputs. X2 and X3 (T2 and T3) function as dual channel dependent inputs. X4 to X13 (T4 to T13) function as dual channel direct opening inputs. The combinations of inputs are shown below. Incorrect use of these combinations will result in an error. The input monitor error detection time for dual channel direct opening inputs is 0.5 s. The input error monitor detection time for dual channel dependent inputs is infinite. For the operation of 1 contact of the dual channel dependent inputs, the behavior of SafetyOne is,

-ONOFFON: Input monitor error is detected, and the state changes to the Protection state.

-OFFONOFF: The state changes to the Protection state temporarily, and after that, the state is restored to the Run state immediately. (In these cases, the input monitor error detection time is 0.1s.) For information about connected control devices, see “SAFETY PRECAUTIONS”

X0-T0, X1-T0: Safety input 1 (If X0 is ON, the selected mode is teach mode. If X1 is ON, the selected mode is auto mode.) X2-T2, X3-T3: Safety input 2 (Active only in teach mode. However input monitor error can be detected in auto mode, too. If 1 or both contacts are OFF, the safety input is OFF.) X4-T4, X5-T5: Safety input 3 (Active only in auto mode. However input monitor error can be detected in teach mode, too.) X6-T6, X7-T7: Safety input 4 (Active only in auto mode. However input monitor error can be detected in teach mode, too.) X10-T10, X11-T11: Safety input 5 (Always active) X12-T12, X13-T13: Safety input 6 (Always active)

Warning

Safety check signals (pulses signals) are transmitted from the drive terminals (T0, T2 to T13) to diagnose connected safety devices and input circuits. Safety check signals can not be used as power for connected devices.

Note: Solid state outputs, such as safety light curtains, can not be connected.

Note: Do not use T1.

Note: If there are unused safety inputs in safety input 2 to 6, short between the receiving terminals (Xn) corresponding to the unused safety inputs and the drive terminals (Tn). If they are not shorted, the SafetyOne will not turn ON the safety outputs.

Note: If both of X0 and X1 are turned ON, the SafetyOne will detect an input monitor error. As a result, the error LED displays “1” and the state changes to the Protection state. Input monitor error detection time is 0.5s. If both of X0 and X1 are turned OFF, no error is detected, however, the safety outputs are turned OFF.

5-52

●External device monitoring inputs： X14 and X15 (T14 and T15)

Warning

Safety check signals (pulses signals) are transmitted from the drive terminals (T14, T15) to diagnose external devices and monitor circuits. Safety check signals can not be used as the power for connected devices.

Note: If there are unused safety outputs, short between the external device monitoring terminals (Xn) corresponding to the unused safety outputs and the drive terminals (Tn). If they are not shorted, the SafetyOne detects an input monitoring error. As the result, the error LED displays “1” and the state changes to the Protection state.

● Start inputs： X16 and X17

X16 is used in teach mode, and it is used to control the start of the safety outputs as an “auto start”, which does not use the start switch, or “manual start”, which does not detect welding of the start switch. X17 is used to control the start of the safety outputs as a “control start” which detects welding of the start switch. In teach mode: When X16 is ON (the ON state of X16 must be longer than 0.1s) the device connected to safety input 2 is in a safe state, function output of self-hold function circuit 1 is turned ON. When X17 changes from OFFONOFF (the ON state of X17 must be kept on from between 0.1s to 5s) while the devices connected to safety input 5 and 6 are in a safe state, functional output of self-hold function 3 is turned ON. As the result of being turned ON the functional outputs self-hold function 1 and 3, the start condition is established. In auto mode: When X17 changes from OFFONOFF (the ON state of X17 must be on between 0.1s to 5s) the devices connected to safety inputs 3 to 6 are in safe state, functional output of self-hold function 2 and3 are turned ON, and the start condition is established.

●Safety outputs (with OFF-delay timer): Y0 to Y3

Y0 to Y3 function as safety outputs with the OFF-delay timer. When the timer is set to “0s” (indication “1”), the safety outputs shut OFF immediately. Y0 and Y1: Safety output 1 Y2 and Y3: Safety output 2

Warning

Although teach mode is selected, the preset OFF-delay timer must be added to the reaction time of the SafetyOne.

5-53

●Safety input monitor outputs: Y4 to Y11

Y4 toY11 function as status monitoring of safety input devices connected to the SafetyOne. Y4 is turned ON only in the case of teach mode is selected by mode select input. Y5 is turned ON while both contacts of the safety device are ON. When 1 or more contacts are OFF, the output is OFF. Y6 to Y11 are turned ON while both contacts of the safety devices are ON. When both contacts of the safety devices are OFF, the output is OFF. If input monitor error is detected, pulses (1Hz) are transmitted. Y4 outputs the status of safety input 1 (X0-T0, X1-T1). Y5 outputs the status of safety input 2 (X2-T2, X3-T3). Y6 outputs the status of safety input 3 (X4-T4, X5-T5). Y7 outputs the status of safety input 4 (X6-T6, X7-T7). Y10 outputs the status of safety input 5 (X10-T10, X11-T11). Y11 outputs the status of safety input 6 (X12-T12, X13-T13)

●Safety output monitoring outputs: Y12 and Y13

Y12 and Y13 function as monitoring outputs that output the status of the safety outputs. When the safety outputs are OFF, the safety output monitor output is turned OFF immediately, even if OFF-delay timer has been set. Y12 outputs the status of safety output 1 (Y0 and Y1). This turns ON when Y0 and Y1 are both ON. Y13 outputs the status of safety output 2 (Y2 and Y3). This turns ON when Y2 and Y3 are both ON.

●State monitoring outputs: Y14 to Y16

Y14 to Y16 are monitoring outputs for the internal status of the SafetyOne. Y14 turns ON when in Initial or Stop state. Y15 turns ON in Initial, Protection or Configuration state. Y16 turns ON when in Run state. Refer to “Chapter 4 BASIC OPERATION”, or “Chapter 6 TROUBLESHOOTING”, for details of each state.

5-54

Warning

Monitor outputs are not safety outputs. Do not use these to construct a safety system.

●Solenoid outputs: Y17 and Y20

Y17 and Y20 are outputs for solenoid control that are used with a safety switch with a lock. Teach mode: In Run state, when the safety outputs are ON, the solenoid outputs are ON. Auto mode: In Run state, when the safety outputs are OFF and 1 or more safety inputs are OFF, the solenoid outputs are turned ON. When all safety inputs are ON, the solenoid outputs are turned OFF, although start input is not activated.

Warning

Solenoid outputs are not safety outputs. Do not use these to construct a safety system.

Caution

Refer to "Chapter 2 PRODUCT SPECIFICATIONS" for specifications of each input and output.

Wiring example (Logic 6)

Example of 1 enabling switch, 1 selector switch, 2 emergency stop switches, and 2 safety switches with

lock (spring lock type) switches are connected.

S1 :Selector switch S2 :Enabling switch

24V DC

S3,4 :Safety switch with lock (spring lock type) S5,6 :Emergency stop switch S7,8 :Start switch K1...4 :Contactor L1,2 :Solenoid of safety switch for lock release M1,2 :Motor

SafetyOne

Fuse

0V DC

V+

T2 X2 T3 X3

T4 X4

T6 X6 T7 X7

T10

X10

T11

X11

T12

X12

T13

X13

V-

Y4 Y5 Y6

Y7 Y10 Y11 Y12 Y13 Y14 Y15 Y16

Y17

K2Y1

K3Y2

K4Y3

to PLC

K1 K2

K3 K4

T14

X14

T15

X15

X16 X17

Y20

5-55

When not using the start switch in teach mode （Auto start）

24V DC

X16

When detecting the welding of start switch in teach mode （Manual start）

X17

When connecting multiple emergency stop switches in series

T12 X12 T13 X13

24V DC

X16 X17

NOTE:　Applicable safety performance is dependent upon system configuration.

When not using some safety inputs

T4 X4 T5 X5

T12 X12 T13 X13

Note: When using a spring lock type safety switch for the safety input of SafetyOne, if the solenoid output of SafetyOne is connected to the solenoid power terminal of the safety switch directly, the start condition cannot be established since the safety input remains in the OFF state. In this case, connect the switch or other equipment to the solenoid output of SafetyOne, and perform the OFF operation of solenoid for lock control.

5-56

Timing chart (Logic 6)

Teach mode

Power ON

Mode select input : X0

Mode select input : X1

Monitor output for X0 and X1 : Y4

Safety input：X2

(Note 1）

Safety input：X3

Monitor output for X2 or X3 : Y5

Safety output ON

(Note 1）

Off de lay

time

Safety output ON

Off delay

time

Safety output ON

Min. 0.1s

Manual start input : X16

Safety input : X10,X11

Monitor output for X10 or X11 : Y10

0.1s...5s

Control start input : X17

Max. 0.1s Max. 0.1s

Safety output : Y0,Y1,Y2,Y3

Monitor output for safety output : Y12,Y13

Solenoid output : Y17,Y20

RUN moni tor : Y16

Initialization

Note 1: The input monitor error detection time is infinite in the dual channel dependent inputs (X2-X3).

When the input time difference at the dual c hannel direc t opening inputs (X4-X5, X6- X7, X10-X11, and X12-X13) is 0.5s or more, an input monitor error is detected. Refer to the following “Logic function” for details.

Note 2: Example to turn on a control start input (X17) before turning on the manual start input (X16).

(Note 2）

Max. 6s

(X4...X7, X12, X13 are ON in this chart.)

Min. 0.1s

Max. 0.1s

5-57

Auto mode

Power ON

Mode select input : X0

Mode select input : X1

Monitor output for X0 and X1 : Y4

Safety input : X2,X3

Safety input : X4

Safety input : X5

Safety output

(Note）

Off delay

time

Monitor output for X4 or X5 : Y6

0.1s...5s

Control start input : X17

Max. 0.1s

Safety output : Y0,Y1,Y2,Y3

Monitor output for safety output : Y12,Y13

Solenoid output : Y17,Y20

RUN monitor : Y16

Max. 6s

Initialization

(X6...X13 are ON in this chart.)

Note: W hen the input time difference of the dual channel safety inputs is 0.5s or more, an input monitor error is detected.

Refer to the following "Logic functions" for details.

5-58

Logic 7: Partial stop 1 logic for various machines

Overview (Logic 7)

The logic described is for safety protective measures of the equipment which has 2 separate devices that are stopped by safety outputs independently, such as semiconductor manufacturing machines, and food packaging machinery. When the 2 devices can not be stopped at the same time or it is not necessary, the 2 safety outputs can be controlled separately. This logic enables the connection 5 dual channel direct opening inputs. When in the state in which safety input 1 corresponds to safety output 1 and 2, and safety input 2 and 3 corresponds to safety output 1 can receive safety input signals (the contacts of the connected safety devices are ON), safety output 1 is turned ON upon input of a start input. When in the state in which the safety input corresponds to safety output 1 and 2, and safety input 4 and 5 corresponds to safety output 2 can receive safety input signals, safety output 2 is turned ON upon input of start input. While safety output 1 and 2 are ON, if an input signal of safety input 1 has been shut OFF (the contact of the safety device is OFF), safety outputs 1 and 2 are turned OFF after a preset OFF-delay time. If a safety input signal to safety inputs 2 or 3 is turned OFF, then safety output 1 is turned OFF. If the safety input signal to safety input 4 or 5 is turned OFF, then safety output 2 is turned OFF.

Note: Refer to "Logic circuit" for the details of safety inputs 1, 2, 3, 4, 5 and safety output 1, 2.

5-59

IDEC FS1A User Manual

Specifications and Main Features

Frequently Asked Questions

User Manual