Phoenix Contact

Inka Krischke | Inka Krischke,

The 'security life cycle'

In the European Economic Area, the requirements of the Machinery Directive apply to manufacturers of machinery. Their specifications must be complied with before a machine is placed on the market. Many safety regulations must already be observed during the design phase.

© Phoenix Contact

The provisions of the Machinery Directive must be complied with when planning, designing, significantly modifying, linking to form a whole and completing, importing and placing machinery on the market. In this context, the special regulations for the safety and reliability of control systems play a decisive role.
The risk assessment must be started at the beginning of the design phase and then continued throughout the process. In this process step, the manufacturer or operator identifies possible hazards on the respective machine, based on the limits of the machine and the people who work with it in the possible life phases. The hazards identified in this way are then factorized. Risk-reducing measures must then be taken, in the order of design, technical and indicative measures. If this results in requirements for technical protective measures, these are practically implemented on the basis of harmonized standards - for example the sector standard EN ISO 13849-1.

The functional safety requirements must always be documented accordingly. Particular attention must be paid to the interface between the manufacturer and the system integrator or the electrical design. These tasks for implementing the technical measures - such as control cabinet construction - are often assigned by the machine manufacturer. Preparing the operating instructions, drawing up the declaration of conformity and then affixing the CE mark to the machine are the final steps before handover to the operator.
Trial operation during commissioning is also particularly important for the machine manufacturer. Because safety equipment may not yet be fully functional, the tests must be safeguarded with additional measures - such as temporary barriers and instructions.

Advertisement

Proven diligence

Simplified 'safety life cycle' for machine manufacturers.

© Phoenix Contact

It should not be forgotten that, in addition to the Machinery Directive and the harmonized standards, other directives - such as the EMC or ATEX Directive - may also be relevant. The 'safety life cycle' designed by Phoenix Contact visualizes a process-optimized implementation of the normative and legal framework conditions. If users base their procedures on this 'safety life cycle', they not only receive proof that they have worked conscientiously and carefully, but also protect themselves in the event of legal action.
The machine manufacturer therefore often commissions system integrators or electrical design departments to implement the functional safety requirements listed in EN ISO 13849-1, among others. For this purpose, the machine manufacturer provides detailed information from the risk assessment. In this phase, Phoenix Contact provides support by having specialists from the company help create and check the risk assessment or develop a safety concept for the machine together with the manufacturer from an existing risk assessment. This enables a seamless transition to the engineering phase, in which the individual safety functions are specified in detail and the safety integrity is verified - for example by using the 'Sistema' software.

Based on the specification, validation planning is carried out in the next engineering step. This defines all the necessary tests for the functional testing of the safety functions. Since commissioning may take place under time pressure, validation planning is particularly important. This is because it protects the commissioning engineer and reduces the risk of systematic errors during commissioning.
Depending on how the safety functions have been designed, a decision must be made as to when and how the individual measures, safety parameters and parameters are to be checked. In this context, there is talk of verification of the results, which is often equated with validation. It is crucial that all safety-relevant specifications are checked at the right points. Here too, the 'safety life cycle' provides assistance, as it allows the selection and definition of the tests required for the respective application. If safety-oriented software is used, its validation helps to increase safety during commissioning. The final phase of validating all safety functions after commissioning ensures that the operator receives a flawless and safe machine when it is handed over.

Continuous reflux

Preparation of the validation on the machine on the basis of the created test plans.

© Phoenix Contact

In accordance with the Machinery Directive, risks are identified and evaluated as part of the risk assessment and risk-reducing measures are defined. As described, this phase accompanies the entire development process of the machine. It is wrong to assume that a risk assessment is created at the beginning of the design process and then no longer comes into play. Instead, the risk assessment must be started as early as possible. In most cases, findings that arise during the engineering phase are fed back into the iterative risk assessment process. Subsequent changes in particular often result in a high potential for error, which must be avoided. Phoenix Contact supports users so that the findings from subsequent phases are consistently taken into account in the risk assessment.

In the subsequent development stage, manufacturers can create a comprehensive safety concept for their machine on the basis of Phoenix Contact 's experience or have the existing concept checked and supplemented. The safety concept is the central component of functional safety. Therefore, the correlations and links to the risk assessment, as well as the subsequent phases, must be correct and comprehensible for all those involved in the project. This is made possible by using the 'safety life cycle'.

Important specification documents

The safety concept of a machine can be tested and refined very well on prototypes.

© Phoenix Contact

In the engineering phase, all details of the safety functions are defined - starting with the selection of components based on the risk assessment or safety concept and the requirements resulting from the environmental conditions, for example.
In addition to the hardware, consideration is also given to the area of safety-related application software (SRASW), which must also satisfy certain normative aspects. In the area of software in particular, many manufacturers are still working without the required specification documents. This includes, among other things, a specific shutdown matrix in which all safety-relevant switching processes are described. If this or a comparable document is missing, there is no basis for the creation and mandatory testing of the SRASW. Consequently, no simulation of the safety-related software to detect systematic faults can take place before commissioning. The 'Softema' software, which will be provided by the Institute for Occupational Safety and Health (IFA) in the future, supports the verification of compliance with all normative requirements for SRASW. Phoenix Contact is already using the tool with users today.

Frank Erbs is a machine safety expert at Phoenix Contact Germany in Bad Pyrmont.

© Phoenix Contact

Once all safety functions and circuit diagrams have been precisely specified or drawn up and the SRASW has also been specified, only the test plan for validation is missing. The functional tests of all specified safety functions are documented in the validation plan. Here too, the 'security life cycle' allows users freedom: they can decide to what level of detail they want to plan tests. This always depends on the complexity of the machine in conjunction with the experience of the project team.

Needs-based support

In the realization phase, the machine is typically built by the manufacturer. If necessary, the experts from Phoenix Contact provide assistance - for example in the area of programming the SRASW. During the subsequent validation, the functional tests specified during engineering are carried out and a final risk assessment is carried out. This is the last opportunity to check and prove that all specified risk-reducing measures have been implemented and are effective.

  • Xing Icon
  • LinkedIn Icon
Advertisement
Advertisement

You might also be interested in

Advertisement

Mushroom

Applications in combustion technology

From version 10.12 of the software tool 'PNOZmulti Configurator', the base unit PNOZ m B1 Burner of the safe small controllers 'PNOZmulti 2' from Pilz supports the monitoring and safe control of combustion plants at the same time.

read more...

Phoenix Contact

M12 with push-pull locking

Phoenix Contact is expanding its portfolio of M12 connectors with push-pull quick locking and is making the A-, D- and L-coded device connectors with pin contacts available with the matching push-pull housing screw connections for SMD and THR...

read more...
Advertisement
Advertisement

Analog Devices

Security at the edge

Experts warn that it is not a question of whether a company or production facility will be the target of a cyber attack, but when. The shifting attack surface for cyber attacks is creating a growing need for security solutions at the edge.

read more...
Advertisement

Phoenix Contact

System availability ensured

Even if only one component fails, the entire machine or system can - in the worst case - come to a standstill, as their functions are usually closely interlinked. To prevent this worst-case scenario, every fault must be safely shut down.

read more...
Advertisement
Advertisement
Advertisement
Subscribe to our newsletter
Advertisement
Back to home