HIMA F8650E Black Horse SIS Security System CPU Main Control Module

I. Basic Information
Brand: HIMA (Germany’s)
Series: HIQuad H51q Safety Instrumentation SIS System
Safety Level： SIL3 (IEC 61508)， PL e / CAT.4
Architecture： 1oo2D dual CPU hardware redundant fault-tolerant architecture
Positioning： ESD emergency stop， F&G fire interlock， boiler / gas turbine safety protection system core computing control card. It has been discontinued by the original manufacturer and is a common spare part for existing power plants， chemical plants， and petrochemical plants.

Core Hardware Parameters
1. Processor and Storage
Dual Intel 386EX 32-bit processors， with a main frequency of 25 MHz. Dual CPUs operate synchronously and compare results. A single failure does not trigger a safety trip.
Firmware Flash： 1MB EPROM (system program)
User Program Flash： 1MB EPROM
Running SRAM： 1MB， onboard built-in lithium battery， can save programs and parameters for ≥ 72 hours in case of power loss
2. Hardware Interfaces
2 channels of isolated RS485 communication ports： used for safety bus networking， up to 64 stations， supports HIManager upper-level configuration， program download， and data upload
4-digit digital fault diagnosis display： local viewing of fault codes， operating status， and bus address
Hardware watchdog safety circuit： cuts off the safety output circuit when CPU is abnormal
Standard European 8U VME bus slot， 96-pin European connector
3. Electrical Specifications
Power Supply： DC 5V / 2A， supports 9~36VDC wide-range redundant power supply
Safety Contact Output： 24VDC， maximum load 500mA， short-circuit protection
Operating Temperature： 0℃ ~ +60℃； Storage： -40℃ ~ +85℃
Protection： IP20 (installed in the cabinet)， industrial EMC anti-strong electromagnetic interference design
Overall Machine Weight： Approximately 1.9kg

Core Safety Features
1oo2D dual redundant fault-tolerant： Two CPU operate independently， data are compared in real time， inconsistency triggers a safety fault shutdown immediately， eliminating single-point failure
Hardware deep diagnosis： CPU， memory， communication， clock， power supply real-time self-check， fault locking + local code alarm + remote upload
Safety program anti-tampering： Program is solidified in Flash， encrypted verification， illegal modification directly locks the machine
Support online hot swapping， no need to stop the system for configuration when installing， online fault diagnosis and maintenance

 Communication and Supporting Modules
Bus Protocol： HIMA Safety Bus， PROFIBUS， CANopen
Common Supporting Cards：
F8621A： Communication Expansion Coprocessor Card
F3236， F3237： Safety DI/DO Input/Output Card
F6217： Analog Safety Acquisition Card
Upper-level Configuration Software： HIMap (with BS41q/51q firmware support)

Typical Application Scenarios
ESD emergency stop system for petroleum refining and chemical plants， LNG storage tanks， coal chemical plants
Safety protection interlock for thermal power plants， gas-fired power plants， boiler， turbine units
Offshore platforms， pharmaceuticals， high-risk processes in high-pressure chemical plants， SIS safety instrument system