Functional Safety Components and Solutions

HMS offers a comprehensive range of products and services for functional safety solutions with Ixxat Safe. These solutions are designed for easy integration of safe IOs and communication in industrial automation, adhering to EN ISO 13849-1 and EN/IEC 62061 standards. The offerings include pre-certified safety modules, protocol software packages, and engineering services, ensuring compliance with safety standards and reducing development costs.

• Modular solution for implementing safe I/O signals.
• Meets SIL 3 safety requirements (IEC 61508) and PLe/Category 4 (ISO 13849-1).
• Compact design suitable for customer-specific device integration.
• Available for PROFIsafe, FSoE, and CIP Safety.
• Development kits for evaluation with configuration tools.

The Ixxat Functional Safety over EtherCAT (FSoE) product line license enables the implementation of EtherCAT SubDevice (Slave) functionalities in safety-critical industrial applications, providing reliable and secure communication. This variant offers unlimited installations within a single customer's product line, which may include various products.

• Comprehensive safety solution.
• Multi-instance support for parallel functionality.
• High safety level assurance.
• User-friendly setup.
• Supported standards and platforms.
• Operating system independence.
• Flexible interface structure.
• Simplified integration and recertification.
• Tailored implementation.
• 12-month maintenance separately available.

The Ixxat Functional Safety over EtherCAT (FSoE) product line license enables the implementation of EtherCAT MainDevice (Master) functionalities in safety-critical industrial applications, providing reliable and secure communication. This variant offers unlimited installations within a single customer's product line, which may include various products.

• Comprehensive safety solution.
• Multi-instance support for parallel functionality.
• High safety level assurance.
• User-friendly setup.
• Supported standards and platforms.
• Operating system independence.
• Flexible interface structure.
• Simplified integration and recertification.
• Tailored implementation.
• 12-month maintenance separately available.

The Ixxat Functional Safety over EtherCAT (FSoE) evaluation license enables the implementation of EtherCAT MainDevice (Master) functionalities in safety-critical industrial applications, providing reliable and secure communication. This variant provides a 3-month evaluation period, after which users must either purchase a full license or remove the software.

• Comprehensive safety solution.
• Multi-instance support for parallel functionality.
• High safety level assurance.
• User-friendly setup.
• Supported standards and platforms.
• Operating system independence.
• Flexible interface structure.
• Simplified integration and recertification.
• Tailored implementation.

The Ixxat Functional Safety over EtherCAT (FSoE) evaluation license enables the implementation of EtherCAT SubDevice (Slave) functionalities in safety-critical industrial applications, providing reliable and secure communication. This variant provides a 3-month evaluation period, after which users must either purchase a full license or remove the software.

• Comprehensive safety solution.
• Multi-instance support for parallel functionality.
• High safety level assurance.
• User-friendly setup.
• Supported standards and platforms.
• Operating system independence.
• Flexible interface structure.
• Simplified integration and recertification.
• Tailored implementation.

The powerful electronic compact control unit ESX.4cl-ag is a flagship among the programmable control units in the STW portfolio. It offers extensive functionality in a very compact and robust die-cast aluminium housing. This makes the ESX.4cl-ag suitable for the most demanding applications, particularly in mobile machines with limited installation space. The specially designed SPE interfaces are capable of implementing the new High-Speed ISOBUS standard.

• SIL2, PL d, AG PL d
• Aurix TC399 Multicore, 32bit, 300 MHz
• 6 MB RAM, 256 kByte F-RAM
• 16 MB Internal Flash, 16 MB External Flash
• Optional Co-processor i.MX6 Ultralite
• 6 CAN interfaces, 1 LIN or RS232 Interface
• Ethernet
• 58 Inputs (SENT Support)
• 59 Outputs (Low-side, High-side, 10A Half Bridges)

The ESX.4cm-a is a powerful and freely programmable mobile electronic control unit. Thanks to its compact size, extensive functionality, and flexible design the ESX.4cm-a can be used for the most demanding requirements in mobile machines. Its robust die-cast aluminum housing makes almost any installation location feasible.

Compact and Communicative

The ESX.4cm-a features a processor with three cores (Infineon AurixTM), four CAN bus interfaces and a managed Ethernet switch. In terms of connectivity, no wish is left unfulfilled, with two 100Mbit/s Ethernet (100Base-Tx) and two Single Pair Ethernet (100Base-t1) ports. The Ethernet switch enables the exchange of large amounts of data without affecting the control unit’s processor performance.

For functionally safe applications, the control unit and software are certified according to SIL 2 / PL d / ASIL B.

• Safety level SIL 2 / PL d / ASIL B
• Efficient multicore processor (3 x 300 MHz)
• 2 MB RAM, 32 kByte EEPROM
• 8 MB internal Flash, 16 MB external Flash
• Integrated Ethernet switch and 4 x CAN, LIN or RS232 interface
• Comprehensive software package with IDE, compilers and libraries for C or logi.CAD
• Communication via CAN, Ethernet- and serial interfaces
• 34 Inputs (SENT Support)
• 29 Outputs (Low-side, High-side)

The ESX.4cs-gw can draw on extensive resources for this. As the first representative of STW's fourth generation of control units, the ESX.4cs-gw is the first to feature a processor with three cores (Infineon Aurix). Six CANbus interfaces and a total of five Ethernet interfaces make the ESX.4cs-gw a true communication wonder. With the help of a managed quadruple 100 Mbit/s Ethernet switch, large amounts of data can be forwarded in a targeted manner in the system without using processor power. Optionally, BroadR-Reach® and a 1 Gbit/s Ethernet port can be operated via the switch. An additional 100 Mbit/s Ethernet port is available for diagnostic purposes.

• Control Specifically designed for use in harsh mobile applications
• Flexible programming in C or in logi.CAD IEC 61131-3
• Designed as a communication node between different networks in mobile work machines.
• 6 CAN interfaces, 1 RS232 interface, up to 5 Ethernet interfaces and 1 LIN
• 12 inputs (SENT support)
• 6 outputs

The ESX.3ios is a CAN-I/O module for the extension of the inputs/outputs of a master control unit via CAN. The communication with the master control unit takes place via CANopen, CANopen Safety, the STW protocol ECeS and J1939. The ESX.3ios fulfills the safety requirements laid down in SIL 2 and PL d. For safe communication, the CANopen safety protocol and ECeS are supported. In addition to the Wake-up via terminal 15 / D+, Wake-up can also be carried out via CAN. Due to the robust aluminum die cast housing, a total current of up to 12 A can be implemented. The ESX.3ios has over 16 inputs and 15 outputs.

• Tricore TC 1798 32 bit, 300 MHz
• 2 CAN interfaces (CAN 1 with Wake-up function), optional 1 LIN interface
• ESX CAN efficient safety (ECeS)
• 16 inputs
• 15 outputs

The ESX.iom is a CAN I/O module for 12V and 24V systems, used for expanding the inputs/outputs of a master control unit via CAN. Communication with the master control unit is through CANopen, CANopen Safety, STW protocol ECeS or J1939. The ESX.iom fulfils the safety requirements SIL 2 and PL d*. The CANopen Safety protocol and ECeS are available for safe communication. The ESX.iom has 34 configurable inputs and 29 high-side and low-side outputs. With a robust aluminium die-cast housing, a total current of up to 60 A can be delivered.

• SIL2, PL d
• Aurix TC299 Multicore 32 bit, 300 MHz
• 1 CAN interface
• CANopen, CANopen safety
• ESX CAN efficient safety (ECoS)
• 34 inputs
• 29 outputs

The F02 Safety is available for pressure ranges to 1,200 bar. The sensor signal is made available at two outputs in parallel, whereby the second output represents an inverted signal. Users can choose between a ratiometric and a 4-20-mA output in three-wire technology. Due to the two-channel architecture, it is possible for a downstream control unit to not only check the functionality of the F02 Safety, but also to monitor the signal path. This allows the use in safety-relevant applications, which require a Performance Level PL d, AgPL d or SIL 2. The maximum permitted media temperature range extends from -40…+125 °C. The total accuracy in the compensated range of 0…+80 °C lies at <= 1 % FS. The maximum possible flexibility during integration into an existing machine is ensured through the provision of a multitude of available pressure connections as well as the small construction. The electrical contact takes place either via a 5-pole M12 or a Deutsch DT04 connector.

• Pressure measurement range 10-1200 bar
• Operating temperature range -40-+85°C with media temperature up to 125°C
• Dual output signal, inverted
• Secure output, inverted
• Secure output as redundancy of analog current or ratiometric signal
• Ingress protection IP67
• Welded stainless steel measurement cell

The F01 is available for pressure ranges from 10 bar to 1200 bar and has two switching outputs which switch inverted to each other. Optionally, the F01 is also available in a version with one switching and one analog output. Here, the current output is read back by the F01 to ensure that the output signal is emitted correctly. To be able to use the F01 in as many applications as possible, users can select different pressure connections. The electrical contact takes place via a 5-pole M12 connector. Through the calibration of the transmitter via the temperature, a total accuracy of 1 % FS can be achieved within a range of 0...80 °C. The maximum media temperature totals +125 °C. The stainless steel parts coming into contact with media guarantee maximum media compatibility in combination with the welded thin-film measurement cell.

• Pressure measurement range 25-1200 bar
• Operating temperature range -40-+85°C with media temperature up to 125°C
• Secure pressure measurement, secure output of analog values and signals, safe recording of the switching points and safe switching of the outputs
• Ingress protection IP67
• Welded stainless steel measurement cell

The robust inclination sensors of the SMX.igs-a series offer the user full IMU functionality. The accelerations and rotation rates in 3 axes are measured and output. The sensors also provide inclination values in all three axes. Depending on the sensor type, various configurable filter algorithms are available to the user to improve the stability of the measured values. In addition to Butterworth and critically damped low-pass filters, a Kalman filter can be activated for dynamic applications. This makes the sensor ideal for use in dynamic applications such as mobile machinery. The measured values are passed on to host control systems via a CAN, CANopen, CANopen Safety or SAE J1939 interface. The protocol and measuring range are freely selectable. The STW open source software platform openSYDE is also supported, enabling the sensor to be integrated quickly and easily into existing and new applications. Preconfigured projects and dashboards help with quick and uncomplicated commissioning of the SMX sensors. The robust die-cast housing with an M12 plug/socket combination completes the sensor.

• Inertial measurement unit (IMU)
• Non-safety and safety (PL d/SIL 2) variants
• Output of acceleration, rotation rate and inclination in 3 axes
• Output of inclination in pitch/roll possible
• M12 socket/plug combination
• Internal adjustable digital signal filters (Butterworth, critically damped, Kalman)
• CAN, CANopen, CANopen Safety or SAE J1939 interfaces
• Measuring range and protocol can be selected
• Full support of the STW open source software platform