Implementation of safety requirements from applicable standards

The function block has been developed according to the safety requirements (from applicable standards) listed in this section. All other requirements from these standards must be observed when implementing the safety-related function.

This section describes either how the function block meets the requirements of the standards or what measures need to be taken to meet the requirements of the standards.

Standards

Context/Requirement

Implementation

EN 1088

Interlocking guard

  • The hazardous machine functions 'covered' by the safety equipment cannot be performed until it is closed.

  • If the safety equipment is opened while the hazardous machine functions are operating, a stop instruction is given.

  • When the safety equipment is closed, the hazardous machine functions 'covered' by the guard can operate, but the closure of the guard does not in itself initiate their operation.

The S_GuardMonitoring input must be connected to the switch for the safety equipment so that the safety-related function block can evaluate the status of the connected safety equipment (open/closed). If S_GuardMonitoring = SAFEFALSE, the function block switches the S_GuardLocked enable output to SAFEFALSE.

The S_GuardLock input must be connected to a feedback signal for the guard locking on the safety equipment so that the safety-related function block can evaluate the status of the guard locking on the safety equipment (locked/unlocked). If S_GuardLock = SAFEFALSE, the function block switches the S_GuardLocked enable output to SAFEFALSE.

The S_SafetyActive input must be connected to a signal generated outside of the safety-related function block, which indicates the status of the zone of operation. This input indicates whether the zone of operation is in the defined safe state. (Monitoring using standstill monitor, for example). If input S_SafetyActive = SAFEFALSE, the function block switches the S_GuardLocked enable output to SAFEFALSE.

When S_SafetyActive = SAFETRUE, a request can be made to unlock the guard locking on the safety equipment using UnlockRequest. The signal generated by the user to indicate the defined safe state of the zone of operation should only change to SAFETRUE if there is no risk of injury in the zone of operation.

You are responsible for controlling S_SafetyActive.

Once the closed safety equipment has been locked, the safety-related function block supports the option of a restart inhibit, depending on the specification made at S_AutoReset. After the function block has been activated, it supports the option of a start-up inhibit, depending on the specification made at S_StartReset.

EN 1088

Interlocking device with guard locking:

Conditional unlocking (four-stage interlocking)

The correctly connected safety-related function block supports four-stage interlocking. You are responsible for implementing the connection.

EN ISO 13849-1

Manual reset device

The Reset input supports the function of the manual reset device.

NOTE:

Resetting does not occur with a negative (falling) edge, as specified by standard EN ISO 13849-1, but with a positive (rising) edge.

EN ISO 12100-2

Start-up after failure of supply voltage/spontaneous restart

The function block supports a start-up inhibit and/or restart inhibit of the function block after

  • start-up of the Safety Logic Controller or activation of the function block (S_StartReset = SAFEFALSE)

  • the safety equipment has been closed (S_GuardMonitoring = SAFETRUE) and locked (S_GuardLock = SAFETRUE) (S_AutoReset = SAFEFALSE).

You are responsible for planning and implementing the start-up/restart behavior according to your risk analysis. To prevent an unintended start-up/restart, you may need to perform an additional function start once the safety-related function has been reset. This will depend on both the results of the risk analysis and the signal path of the reset signal.

EN ISO 13849-1

Category B to 4

Single-channel or two-channel connection must be established depending on the category.

NOTE:

Cross-circuit monitoring is not performed by the function block. It is your responsibility to perform this monitoring function outside of this function block in the safety-related control system.