制动斩波器全新 NBRA-653 58914975

 制动斩波器全新 NBRA-653 58914975
MAC和IP地址处理应具有以下特征：
考虑在重复使用以前使用的CPU时避免网络问题
同一工厂内的模块：
•存储的交换地址将被记住，直到被IP配置擦除
会话（恢复出厂设置）或直到作为新的备份CPU启动
上下文（在这种情况下，将发生新的交换）。
•在独立模式下运行的CPU（安装RCU终端）将始终
使用它自己的本地地址。
AC 800M高完整性
AC 800M可轻松配置用于安全关键应用。这个
这种系统的主要组件是PM865、SM810/SM811、SS823和
S800 I/O高完整性，运行高完整性版本的控制软件。这个
与PM864相比，PM865处理器单元增加了内部诊断
PM865的新增功能包括：
•内部电压的双重过电压保护
•使用SM810/SM811数据更新的额外看门狗定时器
•增加振荡器监控
•支持S800 I/O高完整性
•支持SM810/SM811
•增加了系统诊断和在线自检。
SM810的主要功能是充当硬件和软件的监视器
PM865的执行和这两个模块一起构成符合SIL2的系统
根据IEC61508，经TÜV认证。SM810正在运行SIL3认证
并且具有高度的自诊断，包括例如：
•双重和反向存储器
•内部电压的双重过电压保护
•两个独立的看门狗定时器
以下CEX模块不能用于高完整性控制器：
CI851、CI852、CI858、CI860、CI862和CI865。
一节控制软件简介
3BSE036351-510 A 51
•振荡器监控
•固件和数据存储的CRC
SM811与SIL2的SM810类似，但也可与PM865一起使用
根据IEC61508，形成符合SIL3的控制器，由TÜV认证。
S800高的高完整性系统中使用的ModuleBus报文
完整性模块使用长框架的概念。长框架是模块总线
通过安全标题扩展的电报，包括附加诊断
数据和CRC32.S800模块总线报文发送至S800 I/O高完整性
模块使用来自PM865的数据和来自
SM810/SM811。输入/输出模块检查安全头是否正确。数据
通过模块总线从S800 I/O高完整性模块接收
由SM810/SM811和PM865独立验证的安全头。任何
CRC32或安全标题中的其他故障将导致重试传输，如果
重复关闭故障S800 I/O高完整性模块。
控制软件
AC 800M控制器使用的软件称为控制软件。
此名称不代表特定软件包；只是一个通用名称
用于控制器中使用的功能范围。这些功能由以下部分提供：
•硬件功能（监控、通信总线、I/O总线）
•加载到控制器中的固件功能（实时执行系统，实时
时钟，冗余通信）
•加载到控制器中的应用程序（库函数，
通信协议）。
要生成应用程序，必须使用Control Builder M工具。这
该工具非常通用，除了系统外，还具有许多有用的功能
配置

 制动斩波器全新 NBRA-653 58914975


 制动斩波器全新 NBRA-653 58914975

The following characteristics of the MAC and IP address handling should be
considered in order to avoid network problems while reusing previously used CPU
modules within the same plant:
• The stored swap addresses will be remembered until erased by an IP-config
session (Restore factory settings) or until started up as a backup CPU in new
context (in this case a new swap will take place).
• A CPU running in standalone mode (with RCU terminator fitted) will always
use its own native addresses.
AC 800M High Integrity
AC 800M can easily be configured for usage in safety critical applications. The
main components of such a system are PM865, SM810/SM811, SS823 and the
S800 I/O High Integrity, running a High Integrity version of Control Software. The
PM865 processor unit has increased internal diagnostics, compared to PM864. The
added functionality on PM865 includes:
• Double over voltage protection on internal voltages
• A additional watchdog timer updated with data from SM810/SM811
• Increased oscillator supervision
• Support for S800 I/O High Integrity
• Support for SM810/SM811
• Increased system diagnostic and online self tests.
The main function of the SM810 is to act as a monitor for the HW and SW
execution of PM865 and these two modules together are a SIL2 compliant system
according to IEC61508, certified by TÜV. The SM810 is running a SIL3 certified
operating system and have a high degree of self-diagnostic including, for example:
• Double and inverted memory
• Double over voltage protection on internal voltages
• Two independent watchdog timers
The following CEX modules cannot be used in a High Integrity controller:
CI851, CI852, CI858, CI860, CI862 and CI865.
Section 1 Introduction Control Software
3BSE036351-510 A 51
• Oscillator supervision
• CRC on firmware and data storage
An SM811 operates like an SM810 for SIL2 but can also together with the PM865
form a controller compliant with SIL3 according to IEC61508, certified by TÜV.
The ModuleBus telegrams used in a High Integrity system with the S800 High
Integrity modules use the concept of long frames. Long frames are ModuleBus
telegrams that are extended with a safety header, comprising additional diagnostics
data and CRC32. S800 ModuleBus telegrams sent to the S800 I/O High Integrity
modules uses data from the PM865 and an inverted CRC32 from the
SM810/SM811. The I/O module checks that the safety header is correct. Data
received from the S800 I/O High Integrity modules over the ModuleBus have the
safety header independently verified by both SM810/SM811 and PM865. Any
CRC32 or other faults in the safety header will result in a retry transmission and, if
repeated, a shutdown of the faulty S800 I/O High Integrity module.
Control Software
The software used by the AC 800M Controller is named Control Software.
This name does not stand for a specific software package; is merely a generic name
for the scope of functions used in a controller. These functions are provided by:
• Hardware functions (supervision, communication buses, I/O buses)
• Firmware functions loaded into the controller (real time executive system, real
time clock, redundant communication)
• Application programs loaded into the controller (library functions,
communication protocols).
To produce an application, it is necessary to use the Control Builder M tool. This
tool is extremely versatile, having many useful functions in addition to system
configuration
 制动斩波器全新 NBRA-653 58914975