Description

HIMA  F35  safety-related controller

Safety level: Complies with international safety standards such as IEC 61508 SIL 3, IEC 61511, and ISO 13849-1 PL e. The average risk-free failure probability (PFHD) is <10⁻⁹/h, and it can perform safety functions with an extremely high probability under the specified time and conditions.
Core configuration: It adopts a redundant dual-core processor architecture, integrates 2 gigabit Ethernet ports (supporting 10/100/1000BASE-T) and 2 RS485 serial ports, and is compatible with mainstream Safety protocols such as SafeEthernet, PROFIsafe, and CIP Safety.

Communication capability: Supports multiple industrial communication protocols, such as PROFIBUS DP, PROFINET, EtherNet/IP, etc., and can be seamlessly integrated with different automation equipment and systems to achieve real-time data transmission and sharing. It has the function of redundant communication to ensure communication reliability.
I/O expansion: Supports 32 channels of secure digital input (Type 4/PLe) and 16 channels of secure digital output (Type 4/PLe), with a response time of ≤5ms. It also supports hot-swappable expansion modules, which can seamlessly integrate analog input, temperature sensors, encoders and other signals.

Environmental adaptability: The operating temperature range is from -25 ℃ to + 70℃, the protection grade is IP20, and the anti-electromagnetic interference capability meets the EN 61000-6-2 standard. In the rocket launch control system, it can support a wide temperature operating range from -40 ℃ to + 85℃ and meets the MIL-STD-810G military standard.
Power supply design: Dual redundant 24V DC power supply (18-32V), supporting power fault detection and automatic switching. When a single power supply fails, the system can still maintain safe operation for 72 hours.

Functional features: It adopts a black channel design and uses security-related communication protocols to isolate security data from regular control data, preventing false triggers caused by network storms. The dual-core processor adopts a “three-to-two” voting logic. When either core fails, the system can safely operate at a lower level. Through BIST technology, a hardware failure coverage rate of 99.9% is achieved, including key components such as processors, memory, and I/O channels. Supports the OPC UA secure communication protocol and can upload the device status data to the cloud platform in real time.

Application fields: Widely used in industries with extremely high safety requirements such as petroleum, chemical engineering, natural gas, power, and rail transit. For example, in the emergency shutdown system (ESD) of a certain petrochemical enterprise, the interconnection of 128 safety devices was achieved through the SafeEthernet protocol, reducing the safety response time from 150ms to 35ms. In the high-speed rail signal system, real-time processing of 200 safe input/output points is supported, meeting the requirements of the EN 50129 standard.