Safety concept STO

The device is supposed to be able to perform the safety sub-function "Safe Torque Off" according to IEC 61800‑5‑2:

• The device is characterized by the optional connection of an external safety controller/safety relay. This external safety controller/safety relay disconnects the safety-related STO input via a two-pole 24 V switching signal (e.g. sourcing/sinking) when a connected command device (e.g. emergency stop button with latching function) is activated. This activates the STO function of the device. As an alternative to an external safety controller/safety relay, the STO function can also be implemented with the optional MOVISAFE^® CS..A safety option.
• An internal, dual-channel structure with diagnostics prevents the generation of pulse trains at the power output stage (IGBT).
• Instead of a galvanic isolation of the drive from the supply system by means of contactors or switches, the disconnection of the STO input described here safely prevents the activation of the power semiconductors in the output stage. The rotary-field generation for the respective motor is deactivated even though the line voltage is still present.
• When the safety sub-function STO is activated, the generated PWM signals from the device are interrupted by the STO circuit and are not transmitted to the power output stage (IGBTs).
• If the internal diagnostics of the STO circuit detects a discrepancy between the two channels, the PWM signals are locked, i.e. STO is activated. This locking requires a reset by switching the DC 24 V supply voltage of the device or the DC 24 V switching signal at the STO inputs F_STO_P1 and F_STO_P2 off and on.