- Interlocking Devices: The Good, The Bad and the Ugly
- Presence Sensing Devices – Reaching over sensing fields
- Trapped Key Interlocking
- ISO 13857 – Safety Distances”>Canada Adopts ISO 13857 – Safety Distances
- How to Apply a Safety Edge to a Machine Guard – Part 1: Pressure-sensitive devices
- How to Apply a Safety Edge to a Machine Guard – Part 2: Design Considerations
- How to Apply a Safety Edge to a Machine Guard – Part 3: Stopping Performance
Many machine designers think of interlocks as exclusively electrical devices; a switch is attached to a movable mechanical guard, and the switch is connected to the control system. Trapped Key Interlocking is a way to interlock guards that is equally effective, and often more appropriate in severe environmental conditions.
I’ve provided some useful definitions and links to additional reading at the end of the article.
Trapped Key interlocking uses mechanical interlocking devices to ensure that guards remain closed unless the machinery is stopped. [perfectpullquote align=“right” bordertop=“false” cite=”” link=”” color=”” class=”” size=“”]Mechanical interlocks are robust, capable of withstanding dirty, dusty, and wet conditions.[/perfectpullquote] Another significant benefit of trapped key interlocking is the ability of the interlocking devices to withstand infrequent use. Electrical interlocking devices can fail from lack of use, and these failures might not be detected by the automatic diagnostics provided by the safety relay, controller or safety PLC. ISO 14119 [1, 8.2] discusses the need to physically test the operation of rarely used interlocks to ensure that the diagnostics can check the function of the interlocking device.
What is “Trapped Key Interlocking”?
Trapped Key Interlocking, also called key transfer interlocking, is a system of mechanical locks installed on gates, valves, etc. The system relies on the transfer of keys from a control device to a lock that controls access into the danger zone of the machine. The diagram below, [1, Fig. B.3], shows the simplest form, where a locking device is used to prevent the energization of a machine by locking the supply disconnecting device.
![The simplest form of a trapped key interlock [1, Fig. B.3]](https://machinerysafety101.com/wp-content/uploads/2017/09/ISO-14119-Fig-B3-640x284.png)
Guards can also be interlocked in this way, [1, Fig. B.5]. In this case, the locking device is used to shut off power to the hazardous motions, and the key is removed from the control device. The key is required to open the machine guard, where the key remains trapped until the guard is closed and locked. The key can then be returned to the control device, and power restored to the machine to allow it to run.

[perfectpullquote align=“left” bordertop=“false” cite=”” link=”” color=”” class=”” size=“”]The essential feature of the system is that the removable key is trapped either in the guard lock or in the switch lock.[/perfectpullquote]
The essential feature of the system is that the removable key is trapped either in the guard lock or the switch lock. The lock on the guard is arranged so that the key can only be released when the guard has been closed and locked. The key can then be transferred from the guard to the switch lock. Turning the key to the “ON” or “RUN” positions traps the key so that it cannot be removed (see [1, Fig. B.3] and [1, Fig. B.5]).
The operating principle is:
- Turn the control key from the run position to the stop position and remove it from the control device lock.
- Take the control key to the guard. Unlock the local guard locking device. As long as the guard is unlocked the key is trapped in the lock. Without that key, the machine can’t run, so the machine is safe.
- Complete the work, close and lock the local guard.
- Return the key to the control device on the control panel.
- Switching the control device to “RUN” will permit the machine to run again when started with a separate start control.
Complex Access Control
The approach described previously works well for simple, single-point interlocking, but there are many more complex situations where mechanical interlocks could be used. An additional component, called a “key transfer block,” is used to provide an intermediate location. Defined sequences of operations, time delays, and multiple access points can be controlled using this approach.


Advantages and disadvantages
Advantages | Disadvantages |
---|---|
Simple to use | Complex to initially design |
Robust | No failure diagnostics in the field |
No field wiring | Cost of components |
No programming | |
Impervious to weather | |
Excellent in dusty conditions | |
Suitable for low frequency-of-access applications | |
Relatively easy to expand | |
Suitable for large systems | |
Can be designed to meet lockout requirements | |
No field wiring cost |
Diagnostics
Since the field interlocks don’t have any electrical sensing in most systems, it is possible to have one of the field interlocking devices fail and have the failure go unnoticed or ignored. This can be mitigated in at least two ways:
- Combine the mechanical interlock with an electrical interlocking device. You will lose some of the other advantages to the system by doing this, but if increased diagnostics are needed, an electrical interlock can help meet that requirement.
- Combine the field interlocking device with either an electrical disconnecting means or a fluidic system supply valve so that power to the area is cut off when the guard is opened. Additional diagnostics can be added to these measures as well, allowing a designer to meet high diagnostic requirements.
Final Thoughts
Trapped key interlocking systems have many advantages, particularly in challenging environmental conditions, and where low-frequency of access increases the risk of undetected faults resulting in the loss of the safety function when the interlock fails. Trapped key systems have many other advantages and relatively few disadvantages, but are not used as frequently as electrical interlocking systems because safety system design is often done by controls designers who are more likely to seek an electrical or electrical/software solution before considering “old-school” mechanical solutions.
The next time you are designing an interlocking safety function for a machine, consider using a trapped key system.
Definitions
All definitions from [1] unless otherwise noted.
- interlocking device
- interlock
- mechanical, electrical or other type of device, the purpose of which is to prevent the operation of hazardous machine functions under specified conditions (generally as long as a guard is not closed)
- Note 1 to entry: See Figure 1 and Table 1.
- [SOURCE: ISO 12100:2010, 3.28.1.]
- interlocking guard
- guard associated with an interlocking device so that, together with the control system of the machine, the following functions are performed:
- the hazardous machine functions “covered” by the guard cannot operate until the guard is closed;
- if the guard is opened while hazardous machine functions are operating, a stop command is given;
- when the guard is closed, the hazardous machine functions “covered” by the guard can operate (the closure of the guard does not by itself start the hazardous machine functions)
Note 1 to entry: An interlocking guard can contain/be equipped of one or more interlocking devices. These interlocking devices can also be of different types.
- [SOURCE: ISO 12100:2010, 3.27.4.]
- guard locking device
- device intended to lock a guard in the closed position and linked to the control system
- interlocking guard with guard locking
- guard associated with an interlocking device and a guard locking device so that, together with the control system of the machine, the following functions are performed:
- the hazardous machine functions “covered” by the guard cannot operate until the guard is closed and locked;
- the guard remains closed and locked until the risk due to the hazardous machine functions “covered” by the guard has disappeared, and
- when the guard is closed and locked, the hazardous machine functions “covered” by the guard can operate (the closure and locking of the guard do not by themselves start the hazardous machine functions)
[SOURCE: ISO 12100:2010, 3.27.5.]
- tool
- implement such as a key or wrench designed to operate a fastener
Note 1 to entry: An improvised implement such as a coin or a nail file cannot be considered as a tool. - [SOURCE: ISO 14120:2002, 3.9.]
- power interlocking
- interlocking which directly interrupts the energy supply to the machine actuators or disconnects moving parts from the machine actuators
Note 1 to entry: Resumption of the energy supply is only possible with the guard in the closed and locked position. “Directly” means that, unlike control interlocking, the control system does not play any intermediate role in the interlocking function.
ISO 14119:2013 - interlocking which directly interrupts the energy supply to the machine actuators or disconnects moving parts from the machine actuators
[SOURCE: ISO 14119:2013, 3.31, modified — The Note 1 to entry has been deleted.]
ISO/TS 19837:2018(en), 3.15
- trapped key interlocking system
- system fulfilling safety function(s) or part of safety function(s) and comprising of at least two trapped key interlocking devices which work together through the transfer of a key
- ISO/TS 19837:2018(en), 3.1
- trapped key interlocking device
- device, part of a trapped key interlocking system, which fulfils a function by trapping or releasing a key in a given system
- ISO/TS 19837:2018(en), 3.3
- access lock
- trapped key interlocking device used to lock movable guards
Note 1 to entry: Access locks can also be used for locking in position of objects other than guards, e.g. isolators, valves or barriers. - ISO/TS 19837:2018(en), 3.5
- personnel key
- key which is released from a trapped key interlocking device (typically a access lock used in conjunction with whole body access) and retained by a person to prevent a hazardous situation, e.g. unexpected start-up.
- ISO/TS 19837:2018(en), 3.13
- control interlocking
- function which allows access to hazardous machine functions if the energy supply is interrupted using indirect means
Note 1 to entry: Examples of indirect means can include a combination of relay modules, standstill monitoring devices, PLCs or other control devices/systems. - ISO/TS 19837:2018(en), 3.14
Further Reading
References
[1] Safety of machinery — Interlocking devices associated with guards — Principles for design and selection. ISO 14119. 2013.
[2] Safety of machinery— Trapped key interlocking devices— Principles for design and selection. ISO/TS 19837. 2018.
[3] “Trapped key interlocking”, En.wikipedia.org, 2018. [Online]. Available: https://en.wikipedia.org/wiki/Trapped_key_interlocking. [Accessed: 12- Jun- 2018].
Acknowledgements
My thanks to reader Vinaydeep Alvarez for the questions that led me to write this article.