Standards and certifications
120
Mobile Panel 7100 User's manual 1.51
Emergency stops must be category 0 or category 1 stop functions. The necessary stop function must be determined
based on a risk assessment of the machine.
Only hardwired electromechanical equipment is permitted to be used for stop category 0 emergency stop functions.
In addition, this functionality is not permitted to depend on electronic switching logic (hardware or software) or the
transfer of commands via a communication network or data connection.
1)
With a stop category 1 emergency stop function, it must be ensured that the power to the machine actuators is
completely switched off. This switching off must take place using electromechanical equipment.
5.2.6 Safety categories in accordance with EN ISO 13849-1:2015 (Safety of machinery - Safe-
ty-related parts of control systems - Part 1: General design principles)
Safety category (per EN
13849-1:2015)
Short description
System behavior
B
SRP/CS and/or their protective equipment, as well as their com-
ponents, shall be designed, constructed, selected, assembled and
combined in accordance with relevant standards so that they can
withstand the expected influence. Basic safety principles shall be
used.
Caution!
The occurrence of a fault can lead to the loss
of the safety function.
1
Requirements of B shall apply. Well-tried components and well-
tried safety principles shall be used.
Caution!
The occurrence of a fault can lead to the loss
of the safety function but the probability of
occurrence is lower than for category B.
2
Requirements of B and the use of well-tried safety principles shall
apply.
Safety function shall be checked at suitable intervals by the ma-
chine control system.
Caution!
The occurrence of a fault can lead to the loss
of the safety function between the checks.
The loss of safety function is detected by the
check.
3
Requirements of B and the use of well-tried safety principles shall
apply. Safety-related parts shall be designed so that:
•
A single fault in any of these parts does not lead to the
loss of the safety function.
•
Whenever reasonably practicable, the single fault is de-
tected.
Caution!
When a single fault occurs, the safety func-
tion is always performed.
Some but not all faults will be detected.
Accumulation of undetected faults can lead
to the loss of the safety function.
4
Requirements of B and the use of well-tried safety principles shall
apply. Safety-related parts shall be designed so that:
•
A single fault in any of these parts does not lead to the
loss of the safety function.
•
The single fault is detected at or before the next demand
upon the safety function. If this detection is not possible,
an accumulation of undetected faults is not permitted to
lead to the loss of the safety function.
Information:
When a single fault occurs, the safety func-
tion is always performed.
Detection of accumulated faults reduces the
probability of the loss of the safety function
(high DC).
The faults will be detected in time to prevent
the loss of the safety function.
Table 33: Overview of safety categories
The following risk graph (per EN 13849-1:2015, annex A) provides a simplified procedure for risk assessment:
1)
In accordance with the national foreword of the applicable German-language version of EN 60204-1:2006, electronic equipment – and especially emergency
stop systems – are permitted to be used regardless of the stop category if the same degree of safety is provided by applying standard EN ISO 13849-1:2015
and/or IEC 61508, for example, as is required by EN 60204-1.