How to Apply a Safety Edge to a Machine Guard – Part 2: Design Considerations

Pepperl & Fuchs Pressure Sensitive Edge and Monitoring Module
Pepperl & Fuchs Pressure Sensitive Edge and Monitoring Module

In Part 1 of this article, I looked at the pressure-sensitive devices (safety edges) themselves. This part explores the design requirements that engineers and technologists must consider when applying these devices.

Full disclosure: I use examples from Rockwell Automation and Pepperl + Fuchs in this article. Neither firm has any relationship with me, and no financial or other considerations were offered or solicited concerning this article or any other work on this blog.

Design Considerations

The information you need to design this kind of application includes:

  1. The closing speed of the power-operated guard
  2. Stopping time of the power-operated guard
  3. Force exerted by the power-operated guard when closing
  4. Your choice of a pressure-sensitive edge device
  5. Initial deflection distance of the pressure-sensitive device
  6. Intended reaction to contact with an object – stop and hold or stop and retract?

Testing is the best way to find a power-operated guard’s closing speed and stopping time. Whether you use a stopping performance test set or video to determine the stopping time, you can readily obtain the required information. DON’T GUESS as this is critical information for the design.

The closing force of a fluidically operated (hydraulic or pneumatic) guard can be easily calculated based on the applied pressure and the bore of the cylinder. If you are using an electric actuator, you may need to devise a means to measure the applied force.

Your choice of pressure-sensitive edge device is a design decision that may be driven by purchasing agreements or by the end user’s preference.

The initial deflection distance can be found in the device manual.

The intended reaction to contact with an object is a design decision to be made when developing the safety requirements specification.

Safety Functions

Depending on the outcome of the risk assessment, two separate safety functions need to be considered:

  1.  Prevention of unexpected starting of the hazard BEHIND the guard; and
  2.  Prevention of injury from the motion of the guard as it closes.

Unexpected starting is prevented based on the interlocking system used with the movable guarding section. Just because you have a pressure-sensitive device on the guard’s leading edge doesn’t mean you can get away without a guard interlock. The interlock’s PL should be determined based on the risk presented by the machine hazards behind the guard.

The second function, prevention of injury from the closing of the guard, is relevant to the design of the safety-related controls for the motion of the guard itself, which is the hazard in the case. The opening motion is rarely a consideration; the closing motion matters. The risk assessment should consider the failure modes of the mechanical aspects of the guard mechanics, like the coupling between the prime mover and the guard itself, the connections between the prime mover and its supports, etc. The speed and mass of the moving section of the guard must also be considered, as well as any shearing hazards created at the point of closing.

Electrical Installation Requirements

Pressure-sensitive device manufacturers specify safety modules designed to work with the specific characteristics of the sensing device. One of the critical considerations is the failure modes inherent in the sensing device. The failure modes in the A-B product are different from those of the P & F device. As part of the functional safety design process, an FMEA or an FTA may be useful for developing a list of failure modes. This list is used to determine the required mitigation measures and may also be needed to determine Diagnostic Coverage.

The design constraints on the electrical side start with the PL or SIL. If you are unsure about what I’m talking about here, I suggest reading my series on How to Do an ISO 13849 Analysis, or you might be interested in my ISO 13849 course. Once you’ve selected the architecture, you can look at what you need to do with the output signals from the pressure-sensitive device’s safety module.

At the end of the electrical design chain, you will come to the interface with the mechanical portion of the system. This interface could be a reversing contactor arrangement for an electrically actuated guard or a fluidic valve for a hydraulic or pneumatically actuated guard.  

Mechanical Design Considerations

Remember that conventional stopping time calculations won’t work for applications where the edge is used to stop a power-actuated guard. To determine the stopping performance requirements, you need to consider how much deflection the edge requires before detection occurs and use that as the stopping distance. The stop time is the time it takes the guard to traverse the detection distance at the closing speed. More on this later.

How should the pressure-sensing mechanism react when an obstacle is detected?  If the guard should stop and hold position, there is the possibility of trapping a person between the guard and the surrounding structure. A common approach is to have the guard stop and then reverse to an open state. If the guard is fluidically actuated, a 5/2 solenoid valve with a spring return to the raised position is probably the best choice. (See figure below.) This selection will cause the guard to return to the raised position if electrical power is lost.

Example schematic symbol for a 5/2 spring-returned solenoid valve.
Example schematic symbol for a 5/2 spring-returned solenoid valve [12].

The downside? If the return spring fails, the guard will continue down until it closes or traps the person. At that point, the full available force will be applied to the trapped body part.

Alternatively, a 5/3 centre-blocked solenoid valve, shown below, can be used.

5/3 Closed Center Spring-returned Solenoid Valve Schematic Symbol
5/3 Closed Center Spring-returned Solenoid Valve Schematic Symbol [13]

Using this type of valve, with spring return to centre and dual solenoids, the control system can select RAISE, LOWER or STOP. If electrical power is lost, the valve spool will return to the centre blocked position, stopping the motion of the guard. The downside to this approach is that you can still end up with a trapped person; however, you can design a parallel manual actuator that can be used for rescue purposes or, if the valve is selected with manual overrides, you can manually override the control system to select the raise condition for rescue. If this is the design decision, then the valves need to be located in a protected location, and the RAISE override needs to be obviously marked.

Read Part 3 on Stopping Performance…


Credit

Thanks to one of our readers, Mr Philip G Horton, for asking the questions that inspired this article, and for being patient with me while I carved out the time to write it. 

References

[1]     “SafeInd Custom Machine Safety Guarding – cprsafe.com.au”, cprsafe.com.au, 2018. [Online]. Available: https://www.cprsafe.com.au/products/guards/custom/. [Accessed: 23- Apr- 2018].

[2]     Safety of machinery — Pressure-sensitive protective devices — Part 2: General principles for design and testing of pressure-sensitive edges and pressure-sensitive bars, ISO 13856-2. 2013.

[3]      Safety of machinery — Pressure-sensitive protective devices — Part 3: General principles for design and testing of pressure-sensitive bumpers, plates, wires and similar devices), ISO 13856-3. 2013.

[4]     Safety of machinery — Positioning of safeguards with respect to the approach speeds of parts of the human body, ISO 13855. 2010.

[6]     Safety of machinery — Safety-related parts of control systems — Part 1: General principles for design, ISO 13849-1. 2015.

[7]     Safety of machinery — Safety-related parts of control systems — Part 2: Validation, ISO 13849-2. 2012.

[8]     Safety of machinery — Functional safety of safety-related electrical, electronic and programmable electronic control systems, IEC 62061. 2005.

[9]     Safety of machinery — General principles for design — Risk assessment and risk reduction, ISO 12100. 2010. 

[10]   Guardmaster™ Safedge™ Pressure Sensitive Safety Edge System Installation and User Manual 440F, 3rd ed. Milwaukee, WI: Rockwell Automation, 2015.

[11]    “Safety Edges”, Pepperl+Fuchs, 2018. [Online]. Available: https://www.pepperl-fuchs.com/global/en/classid_2794.htm. [Accessed: 27- May- 2018].

[12]    “How to Read Pneumatic Schematic Symbols….”, www.valmet.com, 2018. [Online]. Available: https://www.valmet.com/media/articles/up-and-running/reliability/FRFluidDwgs1/. [Accessed: 24-Aug-2022].

[13]   “Solenoid Valve – STC Valve”, Stcvalve.com, 2018. [Online]. Available: https://www.stcvalve.com/Solenoid_Valve.htm. [Accessed: 30- May- 2018].

[14]   Safety edge PSE4-RUB-01. Mannheim, DE: Pepperl+Fuchs GmbH, 2017.

[15]   Safety control unit PSE4-SC-01. Mannheim, DE: PPepperl+Fuchs GmbH, 2017.

[16]   Safety edge PSE4-SL-01. Mannheim, DE: Pepperl+Fuchs Group, 2016.

[17]    Sensors for Safety Applications Product Overview. Mannheim, DE: Pepperl + Fuchs GmbH, 2017.

[18]    Y. Beauchamp, T. J. Stobbe, K. Ghosh, and D. Imbeau, “Determination of a Safe Slow Robot Motion Speed Based on the Effect of Environmental Factors,” Hum. Factors J. Hum. Factors Ergon. Soc., vol. 33, no. 4, pp. 419-427, 1991.

[19]    W. Karwowski, T. Plank, M. Parsaei, and M. Rahimi, “Human Perception of the Maximum Safe Speed of Robot Motions,” in Proceedings of the Human Factors and Ergonomics Society Annual Meeting, 1987, pp. 186-190.

[20]    S. Haddadin, A. Albu-Schäffer, M. Frommberger, and G. Hirzinger, “The role of the robot mass and velocity in physical human-robot interaction – Part I: Non-constrained blunt impacts,” in Proceedings – IEEE International Conference on Robotics and Automation, 2008.

[21]    Y. Chinniah, B. Aucourt, R. Bourbonniére. Study of Machine Safety for Reduced-Speed or Reduced-Force Work, no. R-956, March. 2017.

[22]   S. Haddadin, A. Albu-Schäffer, and G. Hirzinger, “Requirements for Safe Robots: Measurements, Analysis and New Insights,” Int. J. Rob. Res., vol. 28, no. 11-12, pp. 1507-1527, 2009.

[23]  Industrial, commercial and garage doors and gates — Safety devices for power operated doors and gates — Requirements and test methods, EN 12978. 2003.

© 2018 – 2022, Compliance inSight Consulting Inc. Creative Commons Licence
This work is licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International License.

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.