HIMA HIMatrix F35 Safety-Related Controller

Technical Dossier

Product Details And Specifications

HIMA HIMatrix Series: Comprehensive Module Range and Technical Overview

The HIMA HIMatrix series is a family of compact, standalone safety controllers certified to IEC 61508 SIL 3 and IEC 62061 / ISO 13849 PLe. Deployed across global heavy industry — including petrochemical complexes, offshore platforms, nuclear auxiliary systems, and refinery emergency shutdown (ESD) loops — HIMatrix units function as distributed safety instrumented system (SIS) nodes without requiring a central rack infrastructure. Their small form factor and high availability architecture (redundant CPU options, hot-standby configurations) have made them a standard reference in functional safety engineering for over two decades. The F35 variant specifically addresses mid-range I/O density applications requiring deterministic response times under 10 ms, making it a preferred choice for burner management systems (BMS) and high-integrity pressure protection systems (HIPPS).

The Evolution of HIMatrix Architecture

The HIMatrix platform was introduced by HIMA Paul Hildebrandt GmbH in the early 2000s as a successor to discrete relay-based safety logic solvers. The first-generation units (F30, F31) established the core architecture: a self-contained CPU with integrated I/O, a proprietary SafeEthernet communication layer, and a 1oo1D (one-out-of-one with diagnostics) or 1oo2D voting structure. The F35 generation extended this with increased I/O channel counts and improved diagnostic coverage (DC > 99%). Subsequent iterations introduced the HIMatrix F60 for higher-density applications and the HIMatrix F3 DIO 8/8 01 for mixed digital I/O in compact enclosures. The platform's communication architecture evolved from RS-485-based HIMA bus to SafeEthernet (IEC 61784-3 compliant), enabling integration with SCADA systems via Modbus TCP, PROFIBUS DP, and OPC UA gateways. As of 2024, the HIMatrix series is in a mature/sustained phase; HIMA continues to supply spare parts and firmware updates, but new greenfield projects are increasingly directed toward the HIMax platform. Long-term maintenance contracts and lifecycle extension programs remain available through authorized distributors.

HIMatrix Full Catalog & Functionalities (SKU List)

The following SKUs represent verified, commonly deployed modules within the HIMA HIMatrix product family. Each entry includes a concise functional descriptor for engineering reference.

Safety Controllers (CPU / Logic Solvers)

• HIMatrix F35: Standalone SIL 3 safety controller, 16 DI / 8 DO, SafeEthernet
• HIMatrix F30: Entry-level SIL 3 logic solver, 8 DI / 4 DO, compact rail-mount
• HIMatrix F31: Mid-range SIL 3 controller, 12 DI / 6 DO, RS-485 + Ethernet
• HIMatrix F60: High-density SIL 3 controller, 32 DI / 16 DO, dual-port SafeEthernet
• HIMatrix F3 SOE 8 01: Sequence-of-events recorder module, 8-channel, 1 ms resolution

Digital I/O Modules (DI / DO)

• HIMatrix F3 DIO 8/8 01: Mixed digital I/O, 8 safe DI + 8 safe DO, SIL 3
• HIMatrix F3 DI 16 01: 16-channel safe digital input module, 24 VDC, SIL 3
• HIMatrix F3 DO 8 01: 8-channel safe digital output, 2 A per channel, SIL 3
• HIMatrix F3 DI 8 01: 8-channel safe digital input, compact form, SIL 3
• HIMatrix F3 DO 16 01: 16-channel safe digital output module, 0.5 A per channel

Analog I/O Modules (AI / AO)

• HIMatrix F3 AI 8 01: 8-channel safe analog input, 4–20 mA / 0–10 V, SIL 3
• HIMatrix F3 AO 4 01: 4-channel safe analog output, 4–20 mA, SIL 2/3
• HIMatrix F3 AI 4/AO 2 01: Mixed analog I/O, 4 AI + 2 AO, loop-powered

Communication & Power Modules

• HIMatrix F3 RS485 8 01: RS-485 serial communication module, 8-port, Modbus RTU
• HIMatrix F3 PS 24 01: 24 VDC redundant power supply module for HIMatrix backplane
• HIMatrix F3 ETH 2 01: Dual-port SafeEthernet communication adapter, IEC 61784-3
• HIMatrix F3 PROFIBUS DP 01: PROFIBUS DP slave adapter, up to 12 Mbit/s

Sourcing Hard-to-Find & Obsolete HIMatrix Parts

DriveKNMS maintains a dedicated inventory program for HIMA HIMatrix modules that have reached end-of-active-production status. For facilities operating HIMatrix F30, F31, and early F35 revisions — units that may no longer appear in HIMA's current price list — DriveKNMS provides: verified surplus stock with full traceability documentation, functional testing against original HIMA factory test specifications, and cross-reference support to identify compatible replacement modules where direct substitution is not available. Our sourcing network covers decommissioned plant inventories across Europe and Asia-Pacific, enabling supply of low-volume, high-criticality spares with lead times significantly shorter than standard OEM channels. All units are supplied with test reports and, where applicable, original HIMA calibration certificates.

Quality Control for the HIMatrix Range

HIMatrix modules present specific test challenges due to their integrated CPU-I/O architecture and SafeEthernet communication stack. DriveKNMS applies a structured verification protocol for all HIMatrix units entering inventory: (1) Visual and mechanical inspection per IPC-A-610 Class 3 criteria, covering connector integrity, PCB condition, and conformal coating status. (2) Power-on functional test using HIMA SILworX engineering software to verify firmware version, I/O channel mapping, and diagnostic self-test completion. (3) SafeEthernet communication validation — each unit is connected to a reference HIMatrix node to confirm CRC-based safety telegram exchange and watchdog response. (4) Analog channel calibration check for AI/AO modules using traceable reference instruments (±0.1% FS accuracy). (5) Burn-in cycle: 48-hour powered operation at 40°C ambient to screen latent component failures. Units that do not pass all five stages are quarantined and not offered for sale.