Definitions

Integrated Safety-Related Function "Safe Torque Off" STO

The integrated safety-related function STO (IEC 61800-5-2) allows for a category 0 stop as per IEC 60204-1 without external power contactors. It is not necessary to interrupt the supply voltage for a category 0 stop. This reduces the system costs and the response times.

Category 0 Stop (IEC 60204-1)

In stop category 0 (Safe Torque Off, STO), the drive coasts to a stop (provided there are no external forces operating to the contrary). The safety-related function STO is intended to help prevent an unintended start-up, not stop a motor, and therefore corresponds to an unassisted stop in accordance with IEC 60204-1.

In circumstances where external influences are present, the coast down time depends on physical properties of the components used (such as weight, torque, friction, etc.), and additional measures such as external safety-related brakes may be necessary to help prevent any hazard from materializing. That is to say, if this means a hazard to your personnel or equipment, you must take appropriate measures.

 WARNING
UNINTENDED EQUIPMENT OPERATION
  • Make certain that no hazards can arise for persons or material during the coast down period of the axis/machine.
  • Do not enter the zone of operation during the coast down period.
  • Ensure that no other persons can access the zone of operation during the coast down period.
  • Use appropriate safety interlocks where personnel and/or equipment hazards exist.
Failure to follow these instructions can result in death, serious injury, or equipment damage.

Category 1 Stop (IEC 60204-1)

For stops of category 1 (Safe Stop 1, SS1), you can initiate a controlled stop via the control system, or through the use of specific functional safety-related devices. A Category 1 Stop is a controlled stop with power available to the machine actuators to achieve the stop.

The controlled stop by the control/safety-related system is not safety-relevant, nor monitored, and does not perform as defined in the case of a power outage or if an error is detected. This has to be implemented by means of an external safety-related switching device with safety-related delay.