System description, System manual safety system ces-a-w5h-01 – EUCHNER CES-A-W5H-01 (Multicode) User Manual
Page 6

System Manual Safety System CES-A-W5H-01
6
System Description
As the unique actuator codes are not evaluated, the CES-A-W5... version can only
be used for applications in which a hazard cannot result from possible tampering
with the system.
The safety switch CES-A-W... meets the following safety requirements:
Category 4, PLe according to EN ISO 13849-1
Proximity device with self-monitoring type PDF-M according to EN 60947-5-3.
Redundant design of the circuit in the evaluation unit with self-monitoring. As a
result, the safety system is still effective even if a component fails.
The switching state of the semiconductor outputs is checked internally when
the safety guard is opened and closed.
The CES non-contact safety system consists of three components:
Coded actuator
Safety switch with integrated read head
Evaluation unit
On the safety switch CES-A-W... the read head is integrated with the evaluation unit
in a standard housing according to EN 60947-5-.
Each delivered actuator possesses a unique electronic coding and so is a unique
element in the system used. The code in an actuator cannot be reprogrammed.
Unlike systems with unique code detection, on the CES-A-W5... a specific code
is not requested but instead it is only checked whether the actuator is of a type
that can be detected by the system (multicode detection). There is no exact com-
parison of the actuator code with the code defined in the evaluation unit (unique
code detection).
The evalation unit with integrated read head is fastened to the fixed part of the
safety guard.
The actuator fastened to the movable part of the safety guard is moved towards the
read head by closing the door. When the switch-on distance is reached, power is
supplied to the actuator by the inductive read head and data can be transferred.
If a permissible code is detected, the safety outputs (semiconductor outputs)
are enabled, and the door monitoring output (semiconductor output) is also set
HIGH.
Due to the combination of dynamic polling of the actuator and the redundant,
diverse design of the safety electronics with the two feedback safety outputs, the
evaluation unit will enter the safe state with every detectable fault.
When the safety guard is opened, the safety outputs switch off the safety circuit
and the door monitoring output (OUT) is switched LOW. The state of the safety
outputs is monitored internally by two microprocessors.
On an internal fault in the evaluation unit, the safety circuit is switched off and the
OUT/ERROR LED illuminates red.
The evaluation unit has a redundant switching design with self-monitoring. This
means that the safety system is still effective even if a component fails.