HIMA HIMax High Safety Modular Programmable Electronic System (PES)

Core positioning and safety features of the product

Core positioning: A modular PES designed specifically for high safety requirements in industrial automation, suitable for safety related control scenarios such as emergency shutdown and process protection, replacing traditional relay logic and enhancing system flexibility and reliability.

Security level and standards:

|Standard | Level/Compliance Requirements|

| IEC 61508 | SIL 3 |

| EN 954-1 | Category 4 |

| ISO 13849-1 | Performance level e |

| EMC | EN 61000-6-2/4 |

|Dangerous environment | Additional measures needed to adapt to Ex Zone|

Core security principles:

By default, it follows the principle of 'De energy to trip', and in the event of a fault, the input/output signal automatically switches to a safe power-off state;

Support 'Energize to trip', which must meet the requirements of application standards for line diagnosis;

All modules have self detection function, triggering safety response in case of failure (such as redundant switching, system shutdown).

Hardware architecture and module details

（1） Base Plate

Model, slot, quantity, installation method, core characteristics

X-BASE PLAYE 10 01 10 Tablet Installation Basic, Supports 10 Modules

X-BASE PLAYE 15 01 15 Backplane Installation Expansion, Suitable for Multi Module Configuration

X-BASE PLAYE 15 02 15 19 inch rack mounted industrial standard installation for easy integration

X-BASE PLATE 18 01 18 backplane installation maximum slot, supports complex systems

Scalability: One basic board (Rack 0) can expand up to 15 expansion basic boards (Rack 1-15);

Power supply: Dual 24VDC redundant input (19.2-30V), supporting PELV/SELV standards;

Heat dissipation: It needs to be equipped with fan racks (2-4 fans), and unused slots should be inserted with blank modules to ensure ventilation.

（2） Core module

Processor module (X-CPU 01)

Redundant configuration: 1-4, supporting hot plugging and automatic synchronization;

Performance: Supports parallel running of 32 user programs, with a maximum variable count of 523776;

Storage: The total memory for programs/data is 10MB, and the variable memory is 32KB;

Fault handling: Automatic restart in case of fault, seamless takeover of redundant modules.

IO module

|Module type | Representative model | Number of channels | Core functions|

|Digital Input | X-DI 32 01 | 32 | Supports proximity switch and SOE event recording|

|Digital output | X-DO 12 01 | 12 | Relay output, supporting line diagnosis|

|Analog input | X-AI 32 01 | 32 | 4~20mA signal, supporting redundant channels|

|Analog output | X-AO 16 01 | 16 | 4~20mA signal with fault feedback|

|Counter input | X-CI 24 01 | 24 | Frequency/speed measurement, supports scaling|

Communication and System Bus Module

Communication module (X-COM 01): supports safeEthernet (safety related) Modbus RTU、PROFIBUS DP；

System bus module (X-SB 01): manages dual system buses (A/B), supports fiber optic expansion (up to 19.6km);

Protocol authorization: Some standard protocols require an activation code (obtained through the HIMA official website).

Software and Programming

Programming tool: SILworX

Supporting standards: IEC 61131-3 (functional block diagram FBD, etc.);

Core functions:

Variable management: global/local/system variables, supporting initial values and preserving attributes;

Forcing: supports global/local forcing and can set time limits;

Event record: Boolean/scalar events, 5000 non-volatile caches, supporting OPC export;

Online operation: download (interrupt running), reload (uninterrupted running).

Multi tasking and cycle management

Multi task mode: 3 modes (based on execution time/priority allocation/fixed cycle);

Cycle parameters: target cycle time 0~7500ms, watchdog time 6~7500ms;

Task priority: configurable, with high priority tasks occupying resources first.

Redundancy and Communication

redundant configuration

|Redundancy level | Configuration method | Core advantages|

|Processor redundancy | 1-4 modules distributed in Rack 0/1 | Single point of failure does not affect system operation|

|IO module redundancy | Pairing 2-3 IO modules of the same type | Automatic channel level fault switching|

|System bus redundancy | Dual bus (A/B) parallel communication | Seamless switching of bus faults|

|Power redundancy | Dual 24VDC input, module internal decoupling | Uninterrupted power supply in case of single power failure|

communication capability

Safe communication: SafeEthernet (supporting redundant paths);

Standard communication: Modbus RTU (RS-232/485), PROFIBUS DP;

Expansion distance: Copper cable up to 100m, fiber optic up to 19.6km (maximum 1.8km between processors);

Interface: Each processor module contains multiple Ethernet ports and supports TCP/IP.

Lifecycle and Maintenance

Installation and Startup

Installation requirements: protection level IP20 (IP54 if enclosure is required), pollution level 2, altitude<2000m;

Wiring methods: 4 recommended methods (single/redundant connector board+direct/FTA wiring);

Startup process: Start the control cabinet first → Configure Rack ID → Load project → Start the system.

Diagnosis and maintenance

Diagnostic method:

LED indication: module status (Run/Error/Stop), redundancy status, fault type;

Log records: short-term logs (module failures), long-term logs (user operations/configuration changes);

Online diagnosis: SILworX real-time displays module status, supports fault filtering and export;

Maintenance cycle: Regular calibration (refer to safety manual HI 801 003), regular replacement of fans;

Fault handling: When a module fails, redundant modules take over and support online replacement (in compliance with ESD protection).

User Management and Security Restrictions

Project permissions: Level 3 (Safety Administrator/R/W/Read only), supporting 1000 user accounts;

Controller permissions: Level 3 (Read/Read+Write/Administrator), up to 10 users;

Security restrictions: Mandatory operations require authorization and time limits can be set; Overloading operations must meet RUN status and permission requirements.