EN 62061 and recommendations for the practical use

Changing standards for changing technologies

Derek Jones Convenor IEC 62061

Rockwell Automation
1

EN 62061 and recommendations for the practical use

Context with other standards EN 62061 EN ISO 12100 EN ISO 14121

EN 60204 EN 61508

EN ISO 13849-1&2 IEC 62061-1 ISO 23849

Derek Jones 09/09/2010

CEN-CENELEC 2010 2

EN 62061 and recommendations for the practical use

Clause 4 Management of functional safety

Project management for safety

Derek Jones 09/09/2010

CEN-CENELEC 2010 3

EN 62061 and recommendations for the practical use

Clause 5 Safety Requirements Specification

Functional requirements specification Safety Integrity requirements specification

Interaction of persons with the machine (e.g. repairing, setting, cleaning)

Derek Jones 09/09/2010

i.e. Task based risk assessment

CEN-CENELEC 2010 4

EN 62061 and recommendations for the practical use

Clause 6 Design and Integration Functional decomposition Safety function to Safety system Random Hardware Failure Systematic Integrity Common Cause Failure

Diagnostic Function

Derek Jones 09/09/2010

CEN-CENELEC 2010 5

EN 62061 and recommendations for the practical use

Clause 7 Information for use Clause 8

Validation
Clause 9 Modification Clause 10 Documentation
Derek Jones 09/09/2010

CEN-CENELEC 2010 6

EN 62061 and recommendations for the practical use

ISO TR 14121-2: Safety of machinery Risk assessment Part 2: Practical guidance and examples of methods

Task Analysis
Derek Jones 09/09/2010

Hazard Identification

Risk Evaluation
CEN-CENELEC 2010 7

EN 62061 and recommendations for the practical use

Functional requirements specification
All operating modes Lock the guard door when closed unless power is OFF and motion is stopped. Automatic Operation Mode - Isolate power if guard door is not closed. Teach Mode - Allow power for robot teaching under safe speed conditions and with local control enabling device activated. SAFETY RELATED CONTROL FUNCTIONS

Derek Jones 09/09/2010

CEN-CENELEC 2010 8

EN 62061 and recommendations for the practical use

Robot axis power status ON Robot axis motion status NOT STOPPED Release of stored energy NOT RELEASED Lock release request Robot in home position Guard Lock Command Status ON

ON
ON ON OFF OFF OFF OFF

NOT STOPPED
STOPPED STOPPED NOT STOPPED NOT STOPPED STOPPED STOPPED

RELEASED
NOT RELEASED RELEASED NOT RELEASED RELEASED NOT RELEASED RELEASED

ON
ON ON ON ON ON OFF

All operating modes - Lock the guard door when closed unless power is OFF and motion is stopped.

Derek Jones 09/09/2010

CEN-CENELEC 2010 9

EN 62061 and recommendations for the practical use

Guard Door Status OPEN Output Actuators Status OFF

CLOSED

ON

Automatic Operation Mode - Isolate power if guard door is not

closed and locked

CEN-CENELEC 2010 10

EN 62061 and recommendations for the practical use

Safe Speed
NO NO NO NO YES YES YES YES

Guard Door Status

CLOSED CLOSED OPEN OPEN CLOSED CLOSED OPEN OPEN

Manual Local Control Priority Enabled

NO YES NO YES NO YES NO YES

Output Actuators Status

OFF OFF OFF OFF OFF OFF OFF ON

Teach Mode - Allow power for robot teaching under safe speed conditions
and with local control enabling device activated.

CEN-CENELEC 2010 11

EN 62061 and recommendations for the practical use

SIL allocation for each safety function

Derek Jones 09/09/2010

For example Allow power for robot teaching under safe speed conditions and with local control enabling device activated = SIL 3

CEN-CENELEC 2010 12

EN 62061 and recommendations for the practical use

Clause 6 Design and Integration
Safe Speed Sensing Door Closed Sensing Manual Local Control Logic Solving Output Actuation Safety Function: Allow power for robot teaching under safe speed conditions and with local control enabling device activated.

SIL 3 required

Shaft Encoders

Guard Interlock Switch

3 Position Enabling Device

Safe Speed Control Unit

Contactors

Safe Speed

Guard Door Status CLOSED CLOSED OPEN OPEN CLOSED CLOSED

Manual Local Control Priority Enabled NO YES NO YES NO YES NO YES

Output Actuators Status OFF OFF OFF OFF OFF OFF OFF ON

NO NO NO NO YES YES YES YES

Safety Related Electrical Control System: Allow power for robot teaching under safe speed conditions and with local control enabling device activated.

Derek Jones 09/09/2010OPEN

OPEN

CEN-CENELEC 2010 13

EN 62061 and recommendations for the practical use

SIL 3 required for the Safety Function Each Subsystem must have a SIL 3 Claim Limit Total PFHD to be within SIL 3 SIL CL = 3 range
SIL CL = 3 PFHD = 1.2x 10-9 Subsystem 2 Guard Interlock Switch SIL CL = 3 PFHD = 1x 10-8 Subsystem 3 3 Position Enabling Device SIL CL = 3 PFHD = 3.38x 10-9 Subsystem 4 Safe Speed Control Unit SIL CL = 3 PFHD = 1x 10-8 Subsystem 5 Contactors

PFHD = 1x 10-8 Subsystem 1 Shaft Encoders

Safety Related Electrical Control System: Allow power for robot teaching under safe speed conditions and with local control enabling device activated.

Total PFHD = 3.458x 10-8 SIL achieved = 3

Derek Jones 09/09/2010
CEN-CENELEC 2010 14

EN 62061 and recommendations for the practical use

Management of functional safety Safety Requirements Specification Design an Integration Random Hardware Failure Systematic Integrity Common Cause Failure Diagnostic Function Validation Modification Documentation
Safety Related Electrical Control System: Allow power for robot teaching under safe speed conditions and with local control enabling device activated. SIL CL = 3 PFHD = 1x 10-8 Subsystem 1 Shaft Encoders SIL CL = 3 PFHD = 1.2x 10-9 Subsystem 2 Guard Interlock Switch SIL CL = 3 PFHD = 1x 10-8 Subsystem 3 3 Position Enabling Device SIL CL = 3 PFHD = 3.38x 10-9 Subsystem 4 Safe Speed Control Unit SIL CL = 3 PFHD = 1x 10-8 Subsystem 5 Contactors

Total PFHD = 3.458x 10-8 SIL achieved = 3

CEN-CENELEC 2010 15

EN 62061 and recommendations for the practical use

Clause 6 - Who are you? A system designer? (machine builder)

PFHD
SIL CL

PFHD
SIL CL

PFHD
SIL CL

A subsystem designer? (safety component designer)

Derek Jones 09/09/2010

CEN-CENELEC 2010 16 Copyright 2009 Rockwell Automation, Inc. All rights reserved. 16

EN 62061 and recommendations for the practical use

Thank you

Derek Jones 09/09/2010

CEN-CENELEC 2010 17