Professional Documents
Culture Documents
Sweden
Kungsbacka +46 (0) 300 67 59 00
Malmö +46 (0) 40 67 15 600
Bankeryd +46 (0) 36 37 04 60
Stockholm +46 (0) 8 544 707 40
Västerås +46 (0) 21 81 44 30
Experience – Systems – Products
Global sales
Australia Sensorplex Pty Ltd +61 (03) 9562 6699
Austria Contra GmbH +43 (0)1 278 25 55
Belgium Jokab Safety AB, Sweden +46 (0) 300 67 59 00
Brazil Jokab Safety Div. of ABG +55 41 3643 1384
Canada NCC Electronics LTD. +1 519 735 1106
China Jokab Safety China +86 21 613 242 77
Czech Republic Contra spol. S R.O. +420 5 43 210 046
Denmark Jokab Safety DK A/S +45 44 34 14 54
Finland Juha-Elektro OY +358 (0) 10 8328 100
Experience
We have great experience of practical application of safety requirements and standards from both
authorities and production. We represent Sweden in standardisation organisations for machine
safety and we work daily with the practical application of safety requirements in combination with
production requirements.
Systems
We deliver everything from a safety solution to complete safety systems for single machines or
entire production lines. We combine production demands with safety demands for production-
friendly solutions.
Products
We market a complete range of safety products, which makes it easy to build safety systems.
We develop these innovative products continuously. Our extensive program of products, safety
solutions and our long experience in machine safety makes us a safe partner.
Säkerh
et
ova
mar zitk
Anders
Lindh
och sä (t v), pro
ke
dag
styr
inalne s
n från tets genomf med sin ko ring.
Beijer. örand llega
autom
e. Sty Fre
rteknike d-
n
ation
figur:da
g toij
er
opera
hos Pluto
inbyg är en säke
Häste
ns
törste gd rh
rmina så kalla buss som ets-PLC
me
l till 32 d all-mast fungerar so d Alla
andra enheter ka er-system dä m en vänd Pluto-enhe
via säk n an r a ter
erhets slutas till upp dra en ingångarna kan an-
Statio busse var-
n1 n. om sin heter för att från alla an
frekve a säkerh fat -
omfor ns- etsutg ta beslut
mare Statio ångarna
n2 .
PLC Statio
gatew n 14
Huvu ay
skåp d-
Pluto
Profib
us
Start/
stopp Plutob
uss
nödstop
p magn
etbryt
are
nödstop
p Lju Start/
20 sri då stopp
Ljusri Ljusb
då om
nödstop
p
nödstop
p
Autom
ation
# 1:2007
www.jokabsafety.com
Introduction
Your partner for machine safety, locally and globally. Our products revolutionise the market. Safety history.
Standards and regulations. This is how you choose safety category. Product overview. Explanations of safety terms.
1
Safety relays
RT series, JSB series, Safety timers, Expansion relays, Connection examples 4
Light curtains, Light grids, Light beams
and Scanner 5
Focus, Spot, Look, Bjorn, Focus Wet, Blanking programmer, Connection examples
Sensors/Switches
Eden, JSNY series, Magne, Dalton, Knox 7
Control devices
3-position device JSHD4, Two-handed control unit Safeball, Foot-operated control device Fox 8
Fencing systems
Quick-Guard, Quick-Guard E, SafeCad, Roller doors 11
Componentlist 12
EC Declaration of Conformity 13
Your partner for machine
safety, locally and globally
1:2 www.jokabsafety.com
1
Our products revolutionise
the market 2
Flexibility
Programmable
Pluto AS-i
3
Not programmable
Pluto All-Master
4
Vital Safety PLC with static and dynamic
Dynamic "doubled up" safety inputs.
safety signal that tests a
sensor, for example, 200
times per second.
Master
5
Safety relay
Double static inputs that
only test the switches
Slaves
Traditional safety PLC
Master-Slave with static inputs
6
each time they are used.
11
12
www.jokabsafety.com 1:3 13
Safety history
Developments of the 70's
Our background in safety started in the seventies when there was a significant
focus on the safety of manually operated presses, the most dangerous machine
in those days. The probability of loosing a finger or hand while working with these
machines was very high. New safety solutions for both safety devices as well as
for the control systems for presses were developed and introduced on both old
and new machines. We were directly involved in this work through the design of
Two-Hand devices, control systems for presses, making safety inspections for the
Health and Safety authorities and writing regulations for safety of these machines.
This work provided an excellent base for our knowledge in machinery safety.
The numbers of accidents involving presses decreased significantly during We protected people from loosing
these years however there is still room for new ideas to enable safety equipment fingers or/and hands in dangerous
become more practical and ergonomic. machines.
Developments 2000 -
Internationally the work on safety has now been intensified within ISO. The
objective is to have the same structure of safety requirements and standards
within ISO as within EN. Jokab Safety is active both internationally and national-
ly in different standard working groups. The co-operation between countries is
leading to better safety solutions, making it much easier to create safe working
environments around the world.
1:4 www.jokabsafety.com
We develop innovative products 1
2009
2008
Inca emergency stop
Dalton with Eden Knox - safe locking 2
for concealed mounting
2007
AS-i
2006
Profibus DP
DeviceNet
CANopen
Smile emergency stop with
3
Ethernet
indication
2005
2004
HMI
2002
5
2001
2000
Vital with dynamic safety circuit
to category 4
Non-contact sensor
Eden
6
Focus light beam protection
1999
7
1998
1993
10
Smallest safety Stop time 3-position
1992 relays JSBT5 and measurement devices
JSBR4
1991
11
1990
Timer reset and first light beam
1989
12
1988
1:5 13
Directives and
Standards
Directives and standards are of great importance for manufactur-
ers of machines and safety components. EU Directives giving
requirements for the minimum level of health and safety are
mandatory for manufacturers to fulfil. In every member country
the Directives are implemented in each countries legislation.
Maskiner som släpps ut på marknaden/tas i drift från och med
den 29 december 2009 skall följa kraven i det nya maskindirek-
tivet 2006/42/EG.
Examples of standards
The Machinery
98/37/EC
Directive
EN ISO 12100-1
EN ISO 12100-2
EN ISO 14121-1 Giving basic concepts, principles for design, and general aspects that can
A-standard be applied to all machinery
EN ISO 13857
EN 349
EN 954-1/EN ISO 13849-1 B1: Standards on particular safety aspects (e.g. safety distances, surface
EN 999 B1-standard temperature, noise)
C-standard
1:6 www.jokabsafety.com
The Machinery Directive; for machines and safety components
The definition of a machine can cover everything from
1
From the Machinery Directive 98/37/EC hand-held portable machines to production lines. There are
2. For the purposes of this Directive: exclusions, e.g. machinery for medical use used in direct
(a) ‘machinery’ means: contact with patients, means of transport, i.e. vehicles and
— an assembly of linked parts or components, at least
one of which moves, with the appropriate actuators,
their trailers intended solely for transporting passengers and
agricultural and forestry tractors.
2
control and power circuits, etc., joined together for a
specific application, in particular for the processing, The Machinery Directive is valid also for
treatment, moving or packaging of a material,
— an assembly of machines which, in order to achieve
the same end, are arranged and controlled so that
2. ... ‘safety components’ means a component, pro-
vided that it is not interchangeable equipment, which
the manufacturer or his authorised representative
3
they function as an integral whole,
— interchangeable equipment modifying the func- established in the Community places on the market
tion of a machine, which is placed on the market for to fulfil a safety function when in use and the failure
the purpose of being assembled with a machine or a or malfunctioning of which endangers the safety or
series of different machines or with a tractor by the
operator himself in so far as this equipment is not a
health of exposed persons. 4
spare part or a tool; Safety components are e.g. light curtains, safety relays
and safety PLCs.
www.jokabsafety.com 1:7
13
Requirements for the use of machinery This means that when repair/changes are made on the ma-
For a machine to be safe it is not enough that the manu- chine it shall still fulfil the requirements of the Machinery Di-
facturer has been fulfilling all valid/necessary requirements. rective. This doesn´t have to mean that a new CE-marking is
The user of the machine also has requirements to fulfil. For required. (Can be required if the changes are extensive)..
the use of machinery there is a Directive, 89/655/EEC
(with amendment 96/63/EC and 2001/45/EC). A new “Old” machines
Machinery Directive, 2006/42/EC, will come into force on For machines delivered or manufactured in the EEA before
29 December 2009. 1 January 1995 the following is valid.
CE-marking +
Declaration of
conformity
1:8 www.jokabsafety.com
Annex 1 contains minimum requirements for health and
safety. There can also be additional national specific require-
used. It is the responsibility of the manufacturer to select a
suitable method.
1
ments for certain machines. NB The point in time when
the Machinery Directive was implemented in each Member Machines in use
Country varies. Therefore it is necessary to check with the Risk assessment must be carried out on all machines that
national authorities in ones own country, to find out what is
considered as “old” and respectively “new” machines.
are in use; CE-marked as well as not CE-marked.
2
Risk assessment – an important tool both To fullfil the requirements from Directive 89/655/EEC
(concerning the minimum safety and health require-
when constructing a new machine and
ments for the use of work equipment by workers at
when assessing risks on older machines
A well thought-out risk assessment supports manufac-
work) risk assessment have to be made.
3
turers/users of machines to develop production friendly
safety solutions. One result of this is that the safety com- Documentation of risk assessment
ponents will not be a hindrance. This minimizes the risk of The risk assessment shall be documented. In the assess-
ment the actual risks shall be analysed as well as the level
4
the safety system being defeated.
of seriousness.
New machines
The following requirement is given by the Machinery Directive
Protection or warning?
How is it possible to choose safety measures that are 9
production friendly and in every way well balanced? The
Machinery Directive gives an order of priority for the choice
of appropriate methods to remove the risks. Here it is further
developed in a five step method.
10
Prioritize safety measures according to the five step
method
1
1. Eliminate or reduce risks by design and construction 2
2. Move the work tasks outside the risk area
3. Use guards/safety devices 3 11
4. Develop safe working routines/information/education
5. Use warnings as pictograms, light, sound etc. 4
5
The further from middle of the circle, the greater the respon-
sibility for the safety is put onto the user of the machine. If full
protection is not effectively achieved in one step, one has to
go to the next step and find complementary measures.
12
What is possible is dependant on the need for accessibility,
the seriousness of the risk, appropiate safety measures etc.
www.jokabsafety.com 1:9
13
Example on prioritizing according to the 5-step-method
4. Safe working Hazard: Crushing injuries because the machine can tip during
routines/information installation and normal use.
Safety
measure: Make instructions on how the machine is to be installed
to avoid the risks. This can include requirements on the
type of fastening, ground, screw retention etc.
The possibilities will increase to achieve a well thought-through safety system if each risk is handled
according to the described prioritizing.
• fast and easy restart of machines after a stop from a safety device
• enough space to safely program a robot
• places outside the risk area to observe the production
• electrically interlocked doors, instead of guards attached with screws, to be able to take the
necessary measures for removing production disturbances
• a safety system that is practical for all types of work tasks, even when removing production
disturbances
1:10 www.jokabsafety.com
Examples of regularly used EN/ISO standards 1
EN ISO 12100-1 Safety of machinery – Basic concepts, Part 1: This standard defines basic terminology and methodology used in
EN ISO 12100-2 general principles for design – achieving safety of machinery. The provisions stated in this standard are
Part 1: Basic terminology, methodology
Part 2: Technical principles
intended for the designer.
Part 2: This standard defines technical principles to help designers in
achieving safety in the design of machinery.
2
EN ISO 13857 Safety of machinery - Safety distances to This standard establishes values for safety distances to prevent danger zones
prevent hazard zones being reached by being reached by the upper limbs. The distances apply when adequate safety
EN 349
upper and lower limbs
The object of this standard is to enable the user (e.g. standard makers, design-
3
(ISO 13854) to avoid crushing of parts of the human ers of machinery) to avoid hazards from crushing zones. It specifies minimum
body gaps relative to parts of the human body and is applicable when adequate
safety can be achieved by this method.
EN ISO 13849-1
(replaces EN 954-1)
Safety of machinery – Safety related
parts of control systems –
This standard provides safety requirements and guidance on the principles
for the design (see 3.11 of EN 292-1:1991) of safety-related parts of control
6
Part 1: General principles for design systems. For these parts it specifies categories and describes the charac-
teristics of their safety functions. This includes programmable systems for all
machinery and for related protective devices. It applies to all safety-related
parts of control systems, regardless of the type of energy used, e.g. electrical,
hydraulic, pneumatic, mechanical. It does not specify which safety functions
and which categories shall be used in a particular case.
7
EN ISO 13849-2 Safety of machinery. Safety-related parts This standard specifies the procedures and conditions to be followed for the
of control systems. Validation validation by analysis and testing of:
• the safety functions provided, and
• the category achieved of the safety-related parts of the control sys-
tem in compliance with EN 954-1 (ISO 13849-1), using the design
rationale provided by the designer.
8
EN 62061 Safety of machinery. Functional safety of The standard defines the safety requirements and guiding principles for the
safety-related electrical, electronic and design of safety-related electrical/electronic/programmable parts of a control
Safety of machinery. The positioning This standard provides parameters based on values for hand/arm and approach
9
EN ISO 13855) of protective equipment in respect of speeds and the methodology to determine the minimum distances from specific
approach speeds of parts of the human sensing or actuating devices of protective equipment to a danger zone.
bod
EN 1088
and EN 1088/A1
Safety of machinery. Interlocking devices
associated with guards. Principles for
This standard specifies principles for the design and selection - independ-
ent of the nature of the energy source - of interlocking devices associated
10
design and selection with guards. It also provides requirements specifically intended for electrical
interlocking devices. The standard covers the parts of guards which actuate
interlocking devices.
EN 60204-1 Safety of machinery. Electrical equipment This part of IEC 60204 applies to the application of electrical and electronic
of machines. General requirements equipment and systems to machines not portable by hand while working,
11
including a group of machines working together in a co-ordinated manner
but excluding higher level systems aspects (i.e. communications between
systems).
12
www.jokabsafety.com 1:11
13
New standards for safety-related
parts of control systems
Since 10 November 2006 the revised standard EN 954-1 • EN 62061 can be used up to the highest level, SIL 3.
has been in force. This is called EN ISO 13849-1. During a This applies to protective functions that are electrical,
transition period extending until 1 November 2009 both electronic and programmable. Where all or part of the pro-
standards will be valid. It is however worth remembering that tective functions are mechanical, hydraulic or pneumatic,
this only applies within the EU – at the international level (ISO EN ISO 13849-1 should be applied.
level) the transition period does not apply – ISO 13849-1
has completely replaced EN 954-1. There has been a more general standard for functional safety
The IEC has also produced a standard for safety in control in existance for several years, EN 61508 (del 1-7) Functional
systems, IEC 62061 Safety of machinery – Functional safety safety of safety-critical electrical, electronic and program-
of safety-related electrical, electronic and programmable mable electronic control systems.
electronic control systems, in force since 23 May 2005.
In what situations should either IEC 62061 or IEC
When should each standard be applied? 61508 be used?
• EN ISO 13849-1 can be applied to all protective functions Example: Designers of safety PLCs should use EN 61508;
(mechanical, electrical, hydraulic and pneumatic) up to the those who integrate a safety PLC into a machine control
highest level, where PL=e. system and prepare applications program software can use
EN 62061.
1:12 www.jokabsafety.com
In the case of a risk assessment of a machine or type of
machine, one determines which protective measures are
categories are selected – B, 1, 2, 3 or 4 for these parts.
Here it is not always possible (nor desirable) to be able
1
necessary in order to ensure that the safety of the machinery to assign a category to the entire safety function. With the
will agree with the Machinery Directive and the standards method in EN ISO 13849-1 one selects instead a required
that are to be applied. In respect of the safety measures that Perfomance Level (PLr) and this applies to the entire safety
involve the control systems of machines, one must decide
"how safe" the safety must be - the higher the risk the more
reliability is demanded of the safety function. In EN 954-1
function. The choice of required Perfomance Level (PLr)
takes place in a similar way to the selection of a category,
see the risk graph.
2
How do you achieve the performance level (PLr) that is determined by the risk graph?
There are a number of parameters to take into account when designing a certain protection function. These are as follows:
• MTTFd for each individual component – Mean Time To Failure, dangerous
3
• DC, Diagnostic Coverage – to what extent dangerous faults are detected
• the structure – which categories are to be used for the parts in their protective functions
• CCF, Common Cause Failure – measures that will be relevant when working with some form of redundancy (for
categories 2,3 and 4)
• how the function acts in a fault condition – also given by the selected category
4
• systematic fault – measures to avoid these in the design
The Performance Level (PL) is expressed as the Probability of Dangerous Failure Per Hour within certain ranges.
Performance Level, PL
a
PFHD
10-5 ≥ till <10-4
5
b 3x10-6 ≥ to <10-5
c 10-6 ≥ to <3x10-6
d
e
10-7 ≥ to <10-6
10-8 ≥ to <10-7
6
10
11
Förklaring
PL prestandanivå
1 MTTFd för varje kanal = låg (kort tid) 12
2 MTTFd för varje kanal = medel (medellång tid)
3 MTTFd för varje kanal = hög (lång tid)
www.jokabsafety.com 1:13
13
Simplified assessment of performance level PLlow Nlow → PL
(PL) a >3 → None, not permitted
A safety function most often consists of the following
≤3 → a
parts
• Input – light beam, interlocked gate, etc. b >2 → a
• Logic – monitoring of the input, control and supervision ≤2 → b
of components for switching off energy c >2 → b
• Output – switches, valves, etc. for switching off energy
≤2 → c
A safety function can be said to consist of N parts. d >3 → c
One way of verifying that the PL has been achieved by us-
ing the risk graph, see the illustration on page 1:10, is to ≤3 → d
calculate all the parameters (MTTFd, DCavg, etc.). If on the e >3 → d
other hand the performance levels (PL) of the three parts ≤3 → e
(input, logic and output)of the safety function are known, NOTE The calculated values in the table are based on the centre
the estimation of achieved PL becomes much simpler. point of each interval for the respective PL.
Example:
PLlow is PL = c and Nlow is 1. With the aid of the table one can see that PL for the entire safety function
will be PL = c.
The safety interlock is inherently in category 1 and can never be more than this even if both its contacts
are used to obtain short-circuit supervision of a connaction to the safety relay.
Designers of safety systems can use this simple method. Contact us so that we can give you the per-
formance levels (PL) of our products, and also guide you as to how the performance levels (PL) are to be
calculated for the components that will be connected in order to remove the energy to moving parts.
1:14 www.jokabsafety.com
Applying EN 62061
If one chooses to design a safety function in accordance with EN 62061, the level of reliability is expressed as the
1
Safety Integrity Level, SIL. There are a total of 4 levels, but in the EN 62061 standard SIL 3 is the highest level. SIL also
(similar to the Performance Level PL), is expressed as the Probability of Dangerous Failure Per Hour.
4
3-4
SIL2
5-7
SIL2
8-10
SIL2
11-13
SIL3
14-15
SIL3
4
3 (OM) SIL1 SIL2 SIL3
2 (OM) SIL1 SIL2
1
OM = Other Measures
(OM) SIL1
5
The seriousness of injury that can occur is defined at one of
Definition of protective safety in accordance with
four levels. Class is the addition of the values of frequency
(Fr, stated as a value between 1 and 5, where 5 represents
EN 62061
"Function of a machine whose failure can result in an im-
6
the highest frequency), probability that a dangerous event
mediate increase of the risk(s)"
will occur (Pr, stated as a value between 1 and 5, where
5 represents the highest proability) and the possibility
of avoiding or limiting injury (Av, sated as a value of 1, 3
or 5, where 5 represents the least chance of avoiding or
limiting an injury).
If the SIL requirements are not fulfilled in any of the sub-ele-
ments or by the safety function in its entirety, there must be
7
The safety function that is to be designed must at least a re-design.
fulfil the SIL that has been assigned to it in the analysis.
The safety function consists of a number of sub-elements. You will get the PFHD values of our products when you
Example: a door is interlocked by a non-contact sensor
which is in turn monitored by a Pluto safety PLC, with out-
contact us.
8
puts that break the power to two supervised contactors. Finally
The sensor is sub-element 1, Pluto is sub-element 2 and This is just a brief introduction to the EN ISO 13849-1 and
the two supervised contactors are sub-element 3. If in the EN 62061 standards. You are welcome to contact us so
analysis it has been established that SIL2 shall be used,
every individual sub-element in the safety function must
that we can prepare suitable training and guide you in how
to apply the standards to our products. 9
fulfil the SIL2 requirements. The safety function must then
in its entirety fulfil the SIL2 requirements.
10
11
12
www.jokabsafety.com 1:15
13
This is how you
choose the safety
category
”A fault in the control circuit logic, or failure of or damage to the control circuit must
not lead to dangerous situations”. This is the declaration of the EU’s Machinery
Directive.
EN 954-1 is valid in parallel with EN ISO 13849-1 during a transition period, but
terminates on 1 November 2009 to be replaced completely by EN ISO 13849-1.
During the transition period, it is possible to choose which of the two standards to
apply. A further standard that can be applied to safety-related parts is EN 62061.
Information concerning these standards can be found on the previous pages.
The significance of this statement is that a fault such as a jammed Choice of category
relay, a short circuit in a transistor or a short circuit between two It is above all a question of the technique available. Gate operation
conductors should and must not result in the safety function failing, equipment can for example be fitted with a monitored interlocking
with the consequent risk of personal injuries. switch (category 1) or a dynamic sensor (category 4). However,
Please note, “a fault” means that the system is only expected interlocking circuits with relays and transistors, etc. normally require
to handle one fault at a time. Two components failing at the same solutions in categories 2 – 4 in order to achieve a higher safety
time is not regarded as likely as long as they cannot be made to level than for standard control circuits.
fail by an external influence. Appendix B to EN954-1 shows an example of how a category
is chosen. The example gives some guidance but has its limita-
Methods for increased safety tions. The safety category is chosen based on the safety risk of
In order to increase the reliability of a safety circuit, the following the machinery. The risk is estimated based on the parameters S,
methods are usually used: F and P.
• Well-tried safety components and safety principles
• Redundancy/Duplication
• Supervision S Severity of injury
S1 Slight (normally reversible) injury
The European standard EN 954-1 S2 Serious (normally irreversible) injury including death
EN 954-1 is a standard specifically relating to safety-related parts F Frequency and /or exposure time to the hazard
of control systems. The standard has a system of categories, based F1 Seldom to quite often and/or the exposure time is
on the above mentioned methods, which increases the reliability short
of a safety function. F2 Frequent to continuous and/or the exposure time is
long
Category B P Possibility of avoiding the hazard
• Basic requirement P1 Possible under specific conditions
• Correctly rated components P2 Scarcely possible
• Circuits handling earth faults Category
Category 1
• All conditions of B apply
• Well-tried safety components and safety principles
• Components with a greater reliability.
Category 2
• All conditions of B apply
• Individual supervised components
• The safety function may fail
• The loss of the safety function is detected by monitoring
Category 3 and 4
• All conditions of B apply
• The safety function is always retained during a failure Fig. 1 Method for selecting a safety category for safety-
• The difference between category 3 and 4 is that certain related parts of control system. Annex B (informative) of
types of fault are not detected in category 3. standard EN 954-1.
•
measures.
Recommended category according to this method.
1:16 www.jokabsafety.com
By taking the three parameters S, F and P into account as
shown in the drawing (figure 1), a recommended control system
the safety signal is monitored all the time and a fault directly
leads to a stop signal or with a magnetic switch which has two 1
category can be obtained according to this method. However, independent contact elements which are monitored every time
the problem with this table is that it does not give a clear-cut a gate opens. From the user's perspective the dynamic function
answer but several alternatives. For example, an automatic is preferable because several sensors can be connected to
production plant with estimated risk factors of S2 (serious a single safety module and still achieve category 4. Also the
injuries), F1 (seldom to quite often), P2 (scarcely possible to
avoid an accident) comes under the categories 1 – 4 although
sensor’s safety function is monitored without having to open
a gate. For a magnetic switch the requirements for category 4
2
categories 2 and 3 would be the preferred choice as these are only fulfilled if one switch per monitoring unit is used and
are marked with two black filled rings. A higher category can if the gate is opened regularly.
always be chosen and category 1 may also be chosen if the Since the standard EN 954-1 was written, development has
system´s intended behaviour is maintained. A justification for
the deviation should also be given.
The fact that categories 1 and 4 are combined in the same
progressed and the costs to fulfill category 4 have dropped
dramatically. Generally mechanical switches are replaced with
non-contact sensors to increase the reliability of production
3
safety circuit is due to the standard not specifying a strict equipment. The same goes for the safety side. With electronic
hierarchical safety order. When comparing categories 2 – 4, non-contact switches, with a transmitter and a receiver, one
category 4 is normally the safest. However, when comparing avoids the problems of deterioration and excessive stress
category 1 with categories 2, 3 and 4, this is not always a
matter of course.
which harm the sensor. For that kind of sensor dynamic
monitoring is required to enable a safe function. This means 4
that its function is constantly being monitored, hundred of
A mechanical switch does not give a safe function! times per second. The reaction time for a safe stop will then
When it comes to mechanically operated interlocked switches, be the same during a malfunction as during the activation of a
it has long been accepted a Category 1 switch is adequate for stop (e.g. a gate opening). The monitoring frequency will also
many installations, which is also supported by several standards.
However some companies have now re-evaluated this and have
be astronomical compared to that of mechanical switches
and magnetic switches, which are only monitored every time
5
instead started to demand two mechanical switches or non- they are used. In the new EN ISO 13849-1, which will replace
contact switches/sensors, where they previously accepted 954-1, probability calculations are used together with different
single mechanical switches. Many reported incidents form the category levels to compare different “performance levels”. Even
background to this. The requirements for switches to provide
safe functioning are that they are mounted correctly and that
their positions do not change during their life-cycle, in other
when using EN ISO 13849-1 it can be so that one achieves
reasonably high theoretical reliability with an electromechanical
switch, although this presumes correct installation, proper
6
words, ideal conditions. In many installations the location of use and otherwise ideal conditions. A non-contact switch
hatches or doors changes over time. This has led to a switch not instead provides high levels of both theoretical and practical
giving a stopping signal when an interlocked gate has opened. reliability.
The reasons for this are many, but they can be summarized in
mechanical deterioration or physical damage to a door/hatch. Our conclusion, use dynamic signals! 7
In turn this has led to an interlocked switch being affected by Our conclusion is that today it is more cost effective, safer and
higher stress than the switch manufacturer’s specifications. To more reliable to work with dynamic signals to achieve category
avoid this type of malfunction it is more appropriate to use non- 4 for sensors and monitoring units. In that case it is also
contact switches/sensors because mechanical deterioration possible to fulfill the Machinery Directive, 1.2.7. requirement:
does not affect the safety function, i.e. the stop signal is given
directly if the position is wrong.
“A fault in the control circuit logic, or failure of or damage to
the control circuit, must not lead to dangerous situations”.
8
A non-contact switch/sensor does not have a guided function Also one does not have to discuss whether the correct safety
and is designed to fulfill the requirements in another way. The category has been chosen!
requirements are fulfilled either with dynamic sensors where
9
*Dynamic monitoring, *Static monitoring,
Door 1 Door 2 Door 3 Vital/Pluto Interlocked switch e.g. RT6
Dynamic sensors
* *
10
Door 1
11
Up to 30 doors (Eden sensors) can be connected to the dynamic
monitoring maintaining category 4.
Maximum 1 door (2 interlocked switches) can
be connected to the static monitoring for cat-
egory 4 to be maintained for the entire system.
12
www.jokabsafety.com 1:17
13
We train you on safety
requirements
- enhance your knowledge!
What requirements are there today?
With the incorporation of Sweden into the EU there are
many new standards and regulations with which to comply.
There have also been changes and revisions of existing
standards and directives.
As a business and designer one is obliged to know about
and to follow all the regulations. But it can be difficult for
each individual company to keep track of all the new regu-
lations and how they should be applied.
Your local Jokab Safety sales office can help you with
training and analysis during a build-up phase or as a
continuous consulting assignment.
• Product liability and its consequences • Machine safety analysis; method and cases
• CE-labelling • Choice of safety measures/safety devices
• The Machine Directive and how to apply it • Requirements for manufacturer´s technical
• Choice of certification procedure with examination documentation
of the parts which are required in order to be able • Requirements for manuals
to CE-label a machine • Requirements for ”old machines”
• Harmonised standards and the applications of • Specific interpretation cases, e.g. re-construction of
these, e.g. machines
- EN ISO 13849-1/-2 • Forthcoming changes in the Machine Directive
- EN ISO 12100-1/-2
- EN 60204-1
Company-adapted training in machine safety
- EN ISO 13850
Contact your local sales office with questions and
- EN ISO 13857, EN 999 (EN ISO 13855)
your current training needs. Together with you,
we will customize the training to your specific
company requirements.
1:18 www.jokabsafety.com
1
Training in risk analysis
We regularly have training courses in our offices. One of these covers risk analysis and how to choose production
adapted measures.
8
Consulting
Do you need assistance in CE-marking a machine? Do you want a third party to carry out a risk analysis on a machine 9
line? Do you have the need of a partner to examine how various regulations´ effect the safety of your machines?
www.jokabsafety.com 1:19
13
Light beams/light
Safety circuit according to
Category 4 EN 954-1/EN ISO 13849-1
curtains/scanner
–Focus and Spot
A complete range of light beams and light curtains.
Dynamic circuits
–Vital, Pluto and Tina adaptation
Dynamic safety circuits for multiple sensors in accordance
with the highest safety category. Tina converts volt free
contacts to dynamics safety signals, etc.
.
System
• Industrial robots for different sectors
Sensors/switches E-stops
–Eden, Magne and JSNY-series –Smile series and JSNY10
Dynamic non-contact sensors, interlocking devices and Unique e-stop devices that can work with dynamic dual
magnetic switches. signals.
1:20 www.jokabsafety.com
1
Safety PLC
–Pluto
A unique ”All Master” safety PLC for simple design of
safety systems.
2
AS-i Stopping time and
Profibus DP
DeviceNet
CANopen
Machine diagnosis tool 3
Ethernet
–Smart
Smart stop analyser. Stop time and machine diagnosis
HMI
tool.
5
Control devices
–Safeball, JSHD4
Training & consulting and Fox 6
Ergonomic three-position devices,
• Machine safety & risk analysis two-hand control devices and foot
• Standards operated switches.
• Protection systems 7
• Programming
• Product training
10
Fencing system/SafeCAD/
Roller door
11
Rails/bumpers/mats
–Quick-Guard and SafeCad Safety contact rails, bumpers and mats.
A stable and flexible fencing system which is easy to
construct
12
www.jokabsafety.com 1:21
13
explanation of safety terminologY
1:22 www.jokabsafety.com
Pluto Safety PLC
Including dynamic signals, the new safety principle.
Pluto/Gateway/Encoder
Profibus DP
DeviceNet
AS-i
CANopen
Ethernet
12 I/O + 31 AS-i safety nodes
20 I/O 46 I/O
(A/D)
HMI
Pluto Manager
www.jokabsafety.com
Contents Page 1
Why you should use the Pluto safety PLC _______________________________2:2
10
11
12
Descriptions and examples in this book show how the products work and can be used. This does not mean that they can meet the requirements for
all types of machines and processes. The purchaser/user is responsible for ensuring that the product is installed and used in accordance with the
applicable regulations and standards. We reserve the right to make changes in products and product sheets without previous notice. For the latest
updates, refer to www.jokabsafety.com. 2008.
www.jokabsafety.com 2:1
13
Approval:
Why you should
have Pluto safety EN 954-1, Category 4
EN 61496-1, Type 4
%. 3),
PLC's.
– for simplifying the design of and changes to safety systems!
Pluto is an ”All-Master” safety PLC concept, that simplifies This concept enables simple communication, programming
the design of safety systems and achieves the highest safety and changes to the safety system. With the use of a 'Gateway'
LEVEL CATEGORY ACCORDING TO %.
%. )3/
device, a Pluto can communicate with other bus systems
AND 3), ACCORDING TO )%#%. 4HE KEY DIFFERENCE and thereby form part of a larger network. Gateway units are
between Pluto and conventional safety PLC´s is that there available for several different bus systems, such as Profibus,
is no "Master-Slave" relationship between the control units #AN/PEN $EVICE.ET AND %THERNET 7ITH A 0LUTO !3
I BOTH
connected to the safety bus. Each Pluto is a 'Master' unit and safety slaves and standard slaves can be handled.
can see the other Plutos' inputs and outputs, and can thereby Pluto offers an economic solution for both single machines
make decisions about its own safety environment. and for major machine systems.
Pluto All-Master
Pluto All-Master
4 + 4 + 4
!3
I SAFETY
)/ nodes
+
Traditional safety PLC
Master
Safe bus
4 Pluto AS-i
Slaves +
)/ )/
6 + 4
2:2 www.jokabsafety.com
– to supervise safety devices! 1
Light beams Light grids/curtains
POSITION Sensors/ Two-hand Emergency Strips Mats
2
devices switches controls stops
7
/
T
PU
NE
IN
IN
NE
PU
/
T
8
Pluto
has inputs for static and
dynamic sensors. Several
sensors can be connected
to one dynamic input in
accordance with category 4.
9
10
N
IO
Tw
T
EC
o
NN
in
O
pu
C
ts
NE
/
input/output
12
www.jokabsafety.com 2:3
13
Pluto with databus - an overview
Pluto B20
Profibus DP
DeviceNet
CANopen
Ethernet
20 I/O
3AFE BUS FOR CONNECTION OF UP TO 0LUTO UNITS
Patented
HMI
2:4 www.jokabsafety.com
1
Pluto B46 Pluto AS-i
2
46 I/O Safety Monitor/Master
6 independent 4 independent
5
failsafe safety outputs failsafe safety outputs
7
Free software is available via our website, at
www.jokabsafety.com!
8
10
Pluto Manager
Programming is performed using ladder or
Boolean algebra – with timers, auxiliary mem-
11
ory, registers, sequential programming and
TÜV-approved function blocks. The program
can be downloaded cost-free from the web
site. Programs can be loaded via one Pluto to
all the other Pluto units on the databus.
12
www.jokabsafety.com 2:5
13
I/O Overview - Pluto
IDFIX
IDFIX
2:6 www.jokabsafety.com
Input connection 1
4HE SYSTEM OFFERS SOLUTIONS FOR BOTH SINGLE AND TWO
CHANNEL SAFETY DEVICES )N ORDER TO MONITOR WIRING
short-circuits it is possible to use up to three different dynamic signals and static voltage (+24 V) to
supply the inputs. The inputs are then programmed to only accept one of the signal types.
)N A SINGLE CHANNEL SYSTEM THE DYNAMIC SIGNAL IS MODIlED AT EACH SENSOR ! SHORT
CIRCUIT BETWEEN THE INPUT
and the output of the sensor will be detected at the Pluto input. Category 4 can thus be achieved by using
only one channel and one input. 3
Emergency
4
stop with Eden sensor
Tina
Spot light
beam
Emergency
5
stop with
Tina
6
Two-channel system Single channel dynamic system, category 4
)NPUT CONNECTION ALTERNATIVE IN ACCORDANCE WITH CATEGORY %.
%. )3/
7
Reset button that uses the combined input and output facility
8
Resetting with a lamp
input/output
9
A1 X4
(Current monitoring)
24VDC
4YPE "4 10
Both a lamp and a pushbutton can be connected to the same terminal. This function Examples of connector expan-
IS FOR RESETTING SAFETY DEVICES AND TO REDUCE THE NUMBER OF )/S USED sion 11