SF_OutControl

Tip

The version of the function block as described here corresponds to the latest version of the function block in Version list of function blocks.

Applicable safety standards

SF_OutControl is a certified PLCopen function block. For detailed information about applied standards, see "PLCopen – Technical Committee 5 – Safety Software".

Important

The requirements listed in the standards must be fulfilled by the user.

Interface description

This function block controls a safety output with a signal of the standard controller and a safe signal with optional startup lock.

Table 77. VAR_INPUT

Name	Data Type	Initial Value	Description, parameter values
`Activate`	`BOOL`	`FALSE`	General input parameters
`S_SafeControl`	`SAFEBOOL`	`FALSE`	Variable Control signal of the upstream safety function block Typical function block signals of the library (for example: `SF_Estop`, `SF_GuardMonitoring`, and `SF_TwoHandControlTypeII`). `FALSE`: The upstream safety FBs are in the safe state. `TRUE`: The upstream safety FBs activate the safety monitoring.
`ProcessControl`	`BOOL`	`FALSE`	Variable or constant Control signal of the standard controller `FALSE`: Request to set `S_OutControl` to `FALSE`. `TRUE`: Request to set `S_OutControl` to `TRUE`.
`Static Control`	`BOOL`	`FALSE`	Constant Optional conditions for process control. `FALSE`: Dynamic change of `ProcessControl` (`FALSE -> TRUE`) required after FB activation or triggered safety function. Additional function start required. `TRUE`: No dynamic change of `ProcessControl` (`FALSE -> TRUE`) required after FB activation or triggered safety function.
`S_StartReset`	`SAFEBOOL`	`FALSE`	General input parameters
`S_AutoReset`	`SAFEBOOL`	`FALSE`	General input parameters
`Reset`	`BOOL`	`FALSE`	General input parameters

Table 78. VAR_OUTPUT

Name	Data Type	Initial Value	Description, parameter values
`Ready`	`BOOL`	`FALSE`	General output parameters
`S_OutControl`	`SAFEBOOL`	`FALSE`	Controls the connected, safe devices or FBs. `FALSE`: Deactivation of the safe devices or FBs `TRUE`: Activation of the safe devices or FBs
`Error`	`BOOL`	`FALSE`	General output parameters
`DiagCode`	WORD	`16#0000`	Diagnostic codes

Figure 102. Function block: SF_OutControl

Functional description

General:

The SF_OutControl FB is an output driver for a safety output.

The safety output is controlled via S_OutControl, which uses a signal from the standard controller (ProcessControl(BOOL) for process control) and a signal from the safety application (S_SafeControl (SAFEBOOL) for controlling the safety function).

. Optional conditions for process control (ProcessControl):

An additional function start (ProcessControl FALSE -> TRUE) is required, which follows the activation of the function block or the feedback of the safe signal (S_SafeControl). A static TRUE signal to ProcessControl does not set S_OutControl to TRUE.
An additional function start (ProcessControl FALSE -> TRUE) is not required, which follows the activation of the function block or the feedback of the safe signal (S_SafeControl). A static TRUE signal to ProcessControl sets S_OutControl to TRUE if the other conditions have been fulfilled.

. Optional startup lock

Startup lock in the event of function block activation
Startup locks after interruption of the guard

Status diagram

Figure 103. Status diagram: SF_OutControl

Tip

Note: The transition from any state to the Idle state, initiated by Activate = FALSE, is not shown. In every case, these transitions have the highest priority.

Typical timing diagrams

Figure 104. Timing diagram 1: SF_OutControl

Figure 105. Timing diagram 2: SF_OutControl

Caution

The StaticControl, S_StartReset, and S_AutoReset inputs shall only be activated if it is ensured that no hazardous situation can arise when the S-PLC is started.

Error detection

The following conditions force a transition to the Error state:

Invalid static Reset signal in the process
Invalid static ProcessControl signal.
ProcessControl and Reset are incorrectly connected due to a program error.

Error behavior

In case of an error event, the S_OutControl output is set to FALSE and remains in this safe state. To exit the error states Reset Error, Init Error, or Lock Error, the Reset input has to be set to FALSE. To exit the Control Error error state, the ProcessControl input has to be set to FALSE.

After the transition from S_SafeControl to TRUE, the optional startup lock can be reset by a rising edge at the Reset input.

After function block activation, the optional startup inhibit can be reset by a rising edge at the Reset input.

FB-Specific Error and Status Codes

Tip

Note: The transition from any state to the Idle state, initiated by Activate = FALSE, is not shown. In every case, these transitions have the highest priority.

Table 79. FB-specific error codes

`DiagCode`	Statue Name	Status description and output setting
`16#C001`	`Reset Error 1`	Static `Reset` signal in status `16#8001`. `Ready = TRUE` `S_OutControl = FALSE` `Error = TRUE`
`16#C002`	`Reset Error 2`	Static `Reset` signal in status `16#8003` `Ready = TRUE` `S_OutControl = FALSE` `Error = TRUE`
`16#C010`	`Control Error`	Static signal at `ProcessControl` in status `16#8010`. `Ready = TRUE` `S_OutControl = FALSE` `Error = TRUE`
`16#C111`	`Init Error`	Simultaneous rising trigger edge at `Reset` and `Processcontrol` in status `16#8001`. `Ready = TRUE` `S_OutControl = FALSE` `Error = TRUE`
`16#C211`	`Lock Error`	Simultaneous rising trigger edge at `Reset` and `ProcessControl` in status `16#8003` `Ready = TRUE` `S_OutControl = FALSE` `Error = TRUE`

Table 80. FB-specific status codes

`DiagCode`	Statue Name	Status description and output setting
`16#0000`	`Idle`	The function block is not active (basic state). `Ready = FALSE` `S_OutControl = FALSE` `Error = FALSE`
`16#8001`	`Init`	Block activation startup lock is active. Reset required. `Ready = TRUE` `S_OutControl = FALSE` `Error = FALSE`
`16#8002`	`Safe`	Triggered safety function `Ready = TRUE` `S_OutControl = FALSE` `Error = FALSE`
`16#8003`	`Lock`	Safety function startup lock is active. Reset required. `Ready = TRUE` `S_OutControl = FALSE` `Error = FALSE`
`16#8010`	`Output Disable`	Process monitoring is not active `Ready = TRUE` `S_OutControl = FALSE` `Error = FALSE`
`16#8000`	`Output Enable`	Process monitoring is active and safety is activated. `Ready = TRUE` `S_OutControl = TRUE` `Error = FALSE`