HIMA X-MIO 7/6 01 HIMax®Overspeed Trip Module

Product Description

X-MIO 7/6 01 is a overspeed trip module intended for use in the programmable electronic

system (PES) HIMax.

Only sensors (pulse generators) either providing pulses or pulses with a static rotation sense

may be connected to the measuring inputs. HIMA recommends using sensors of the same type

to reduce divergence among the measured values to the greatest extent possible.

The module monitors the rotation speed and, optionally, the acceleration of a turbine with

respect to configurable thresholds. It also shuts down the turbine through the trip function when

the thresholds are violated, see Chapter 4.4.2 and Chapter 4.4.3.

The trip function is implemented in the module's operating system. It operates therefore

interference-free and independently of the HIMax overall system and the user program. The trip

function is triggered within the module cycle if the evaluation of the measuring or digital inputs

results in a trip condition, see Chapter 4.4.4.

The module can be used to realize applications in accordance with API 670. The module

complies with the turbine requirements for rotation speed monitoring and trip routines defined in

API 670. The rotation speed monitoring and the trip routines are independent of the overall

HIMax system and the user program.

The trip function complies with the requirements specified in the Machinery Directive.

The module has been certified by the TÜV for safety-related applications up to SIL 3

(IEC 61508. IEC 61511 and IEC 62061) as well as Cat. 4 and PL e (EN ISO 13849-1).

Refer to the HIMax Safety Manual (HI 801 003 E) for more information on the standards used to

test and certify the module and the HIMax system.

The module is inserted in redundant connector boards to increase availability through module

redundancy. To this end, the base plate must be equipped with at least two adjacent slots.

The module can be inserted into any of the base plate slots with the exception of the slots

reserved for system bus modules. For more information, refer to the System Manual

(HI 801 001 E).

Safety Function

The module monitors the rotation speed of a turbine, independently of the HIMax overall system

and the user program. The module trips the turbine via the digital outputs .

Depending on the measuring input, the module determines the rotation speed and direction of a

sensor (pulse generator) with safety-related accuracy. To determine the rotation speed, one

turbine is equipped with three sensors. The rotation speed values calculated for the three

sensors are used for a 2oo3 evaluation and thus for calculating the rotation speed of the

turbine.

The module performs a 2oo3 evaluation of the digital input signals and provides the result to the

safety-related processor system and the user program.

The module ensures the outputs' safety function using three switches connected in series for

each channel. This ensures that each output is two-fault-tolerant with respect to the switch.

Each switch of a channel can be individually switched off either via the system bus (I/O bus) or

via the second independent shutdown function (watchdog).

The safety function is performed for the inputs and outputs in accordance with SIL 3. with the

exception of the relay output, which is processed as a potential-free signaling contact

(changeover).

Reaction in the Event of a Fault

If the safety-related processor system of the module detects a module fault during operation, the

module adopts the safe state:

 0 is output for the Rotation Speed parameter and 0 (0 = unequal) for the Rotation Sense

parameter.

 All the assigned input variables transmit the initial value to the user program. The initial

values must be set to 0 to ensure that the input variables transmit the value 0 to the user

program if a fault occurs.

 All the outputs are de-energized in accordance with the de-energize to trip principle.