HIMA HIQuad X High Safety Modular Programmable Electronic System (PES)

​Core positioning and safety features of the product

Core positioning: Designed specifically for high safety requirements in industrial automation, replacing traditional relay logic, suitable for emergency shutdown, process protection and other scenarios, balancing safety and availability.

Security level and standards:

|Standard | Level/Compliance Requirements

| IEC 61508 | SIL 3 |

| EN ISO 13849 | PL e |

|Fire alarm | DIN EN 54-2, NFPA 72|

|Explosion proof adaptation | Suitable for Zone 2 environment|

| EMC | EN 61000-6-2/4 |

Core security design:

Support two principles of “power loss trip” (default) and “power on trip”, automatically entering a safe state in case of a fault;

The processor module (F-CPU 01) adopts a 1oo2 dual processor architecture to continuously synchronize data;

Equipped with ESD protection measures, professional personnel are required to operate and wear grounding wristbands.

Hardware architecture and module details

（1） Series division and core differences

Features H51X series H41X series

1 basic rack 1

Up to 16 expansion racks and up to 1 expansion rack

The maximum number of I/O modules is 256 and the maximum is 28

The maximum number of I/O points is 4096, and the maximum is 224

The maximum number of communication modules is 10 and the maximum is 2

Applicable scenarios: Large, complex systems, small, and streamlined systems

（2） Core module

Module model, functional key parameters

The F-CPU 01 processor module supports dual redundancy, runs user programs, and manages redundant synchronization

F-IOP 01 I/O processing module connects the system bus and I/O bus, providing I/O watchdog signals

F-COM 01 communication module with 2 Ethernet interfaces and 1 fieldbus interface, supporting security protocols

F-PWR 01 power module 24VDC to 5VDC, single module 10A current

F-PWR 02 buffer module compensates for voltage drop (up to 20ms)

（3） Power Supply and Bus

Power configuration:

Input voltage: 24VDC (-15%~+20%), ripple ≤ 5%, in compliance with SELV/PELV standards;

Redundant power supply: supports dual power input and distributes power through modules such as K 7205/K 7212;

5V power supply: H51X can accommodate up to 5 parallel F-PWRs 01, with a maximum current of 40A; H41X up to 2, maximum 10A current.

Bus design:

System bus: Dual bus (A/B), controlled by processor modules, supporting redundant communication;

I/O bus: connects I/O processing modules and I/O modules to transmit process data;

Connection requirements: The system bus should use Cat. 5e or above industrial network cables, with a minimum wire diameter of 0.2mm ² inside the cabinet and 0.5mm ² outside the cabinet.

Software and core functions

Programming tool: SILworX

Programming method: Supports IEC 61131-3 standards such as Function Block Diagram (FBD);

Variable management: supports global/local/system variables, with initial values that can be set to safe values to avoid risks during failures;

Multi tasking: Up to 32 user programs can run in parallel, supporting priority configuration.

Core functions:

Noise Blanking: The suppression time is calculated based on the safe time and watchdog time, with the maximum suppression time being equal to the safe time minus 2 times the watchdog time;

Event recording: Non volatile cache of 1000 events, distinguishing between short-term (fault) and long-term (user operation) logs;

Online diagnosis: Check module status and fault codes through LED indicator lights (3 flashing frequencies) and SILworX software;

Forcing: Supports global/local forcing, can set time limits, and requires authorization before use.

Redundancy and Communication

redundant configuration

|Redundancy level | Configuration method | Core advantages|

|Processor redundancy | 1-2 F-CPU 01 modules | Seamless takeover of redundant modules in case of single point failure|

|Redundancy of I/O modules | Grouping of 2 I/O modules of the same type | Automatic switching of channel level faults, requiring installation in different racks|

|System bus redundancy | Dual system bus (A/B) parallel | When a single bus fails, the other bus maintains communication|

|Power redundancy | Dual 24VDC power input | Single power failure does not affect system operation|

Communication ability:

Secure communication: SafeEthernet (supporting dual physical path redundancy);

Standard communication: Modbus, PROFIBUS DP (some require authorization code);

Connectivity: Up to 5 PADTs can be connected simultaneously, with 1 write permission and 4 read permissions.

Lifecycle and Maintenance

Installation requirements:

Protection level: default IP20, can be upgraded to IP54 as needed (compliant with EN 60204);

Grounding and shielding: Functional grounding enhances EMC performance, cable shielding is connected at both ends to avoid parallel connection with power lines;

Surge/lightning protection: Data lines need to be shielded, and lightning protection devices should be installed in outdoor scenarios.

Start process:

Step: Connect power → Configure rack ID/IP → Load project → Set module mode (Stop → Run) → System startup;

Troubleshooting: When the hardware and configuration do not match, the system enters the STOP/INVALID CONFIGURATION state.

Maintenance points:

Regular verification: Security related applications need to undergo regular verification testing according to the manual;

Component replacement: Fans need to be replaced regularly, and module replacement must comply with ESD protection;

Operating System Upgrade: Supports loading new versions of the operating system through SILworX.