| Closed tools used as the only means of protection [see ISO 16092-1 a)] |
Movement (e.g. closing stroke) of the slide, die cushions, workpiece ejectors |
Cycle initiation/stop |
PL a |
Cat B |
Anyg |
Any |
Clutch/brake operating valves or servo drive and brake control system (e.g. air valves) |
| Single stroke function |
Cam switch, encoder or suitable alternative |
| Closed tools used in a press with other operating modes with different main safety systems [see ISO 16092-1 a)] |
Movement of the slide, die cushions, workpiece ejectors |
Cycle initiation/stop |
PL a |
Cat B |
Anyg |
Any |
| Single stroke function |
Cam switch, encoder or suitable alternative |
| Fixed enclosing guard used as the only means of protection [see ISO 16092-1 b)] |
Movements of the slide, die cushions, work-piece ejectors and transfer systems |
Cycle initiation/stop |
PL a |
Cat B |
Anyg |
Any |
| Single stroke function |
Cam switch, encoder or suitable alternative |
| Interlocking guard with or without guard locking (with or without early opening feature) or control guard (with or without early opening feature) [see ISO 16092-1.c), d) and e)] |
Movements (e.g. closing stroke) of the slide and die cushions |
Cycle initiation by other control device than the guard
|
PL a |
Cat B |
Any but not actuated by the guard itselfg
|
Any |
Logic control shall act on the appropriate part of the electrical control system |
| Cycle initiation by control guard |
Interlocking device of the guard |
| Interlocking guard with or without guard locking (with or without early opening feature) or control guard (with or without early opening feature) [see ISO 16092-1.c), d) and e)] |
Movements (e.g. closing stroke) of the slide and die cushions |
Stop by interlocking device of guard without guard locking [see ISO 16092-1:2017 b)] |
PL eb,c |
Cat 4 |
Interlocking device (2 sensors or equivalent solution)e,f |
Safety related logic |
Clutch/brake operating valves or servo drive and brake control system (e.g. air valves) |
| Stop by interlocking device of guard with guard locking [see ISO 16092-1:2017 a)] |
Interlocking device with guard locking (2 sensors or equivalent solution)e,f |
| Conditional unlocking of guard |
PL d |
Cat 3 for input and logic, Cat 2j for output |
Sensor or other suitable detection device to confirm safe de-energized standstill is achieved |
Pre-actuator of the guard locking |
| Muting in in case of early opening guard and control guard without guard locking (see 5.4.2 and ISO 16092-1:2017) |
Same as of the safety function on which muting is actingq |
— |
Position sensor or suitable alternative (see 5.4.2 and ISO 16092-1:2017) |
— |
— |
| For Group 2, speed monitoring (during muting)l (see 5.4.2.1) |
Encoder or suitable alternative |
Same as of the safety function on which muting is acting |
Servo drive and brake control system (e.g. air valves) |
| For Group 2, standstill monitoring (during muting)l (see 5.4.1.3.1) |
| Interlocking guard with or without guard locking (with or without early opening feature) or control guard (with or without early opening feature) [see ISO 16092-1.c), d) and e)] |
Movements (e.g. closing stroke) of the slide and die cushions |
For Group 2, moving direction monitoring (during muting)l (see 5.4.2.1) |
Same as of the safety function on which muting is actingq |
— |
Encoder or suitable alternative |
Same as of the safety function on which muting is acting |
Servo drive and brake control system (e.g. air valves) |
| Single stroke function in case of early openingr (see 5.4.8) |
PL eb,c |
Cat 4 |
Cam switch, encoder or suitable alternative |
Safety related logic |
Clutch/brake operating valvesor servo drive and brake control system (e.g. air valves) |
Stopping-performance (overrun) monitoring in case of guard without guard locking (see 5.4.9) |
PL c |
Cat 2j |
| Movements of work-piece ejectors and transfer systems |
Stop by interlocking device of guard without guard locking [see ISO 16092-1:2017 b)] |
PL db,d |
Cat 3 |
Interlocking device (2 sensors or equivalent solution)e,f |
Electrical, hydraulic or pneumatic system |
| Stop by interlocking device of guard with guard locking [see ISO 16092-1:2017 a)] |
Interlocking device with guard locking (2 sensors or equivalent solution)e,f |
Conditional unlocking of guard |
PL c |
Cat 3 for input and logic, Cat 2j for output |
Sensor or other suitable detection device to confirm safe de-energized standstill is achieved |
Pre-actuator of the guard locking |
| Interlocking guard with or without guard locking (with or without early opening feature) or control guard (with or without early opening feature) [see ISO 16092-1.c), d) and e)] |
Movements of work-piece ejectors and transfer systems |
Muting in case of early opening guard and control guard without guard locking (see 5.4.2 and ISO 16092-1:2017) |
Same as of the safety function on which muting is actingq |
— |
Position sensor or suitable alternative (see 5.4.2 and ISO 16092-1:2017) |
— |
— |
| Prevention of restart by an additional safeguarding of a control guard by AOPD (see ISO 16092-1:2017) |
PL e o |
Cat 4 |
AOPD |
Safety related logic |
Logic control shall act on the appropriate part of the electrical control system |
| Prevention of restart by an additional safeguarding of a control guard by interlocking guard (see ISO 16092-1:2017) |
PL co,p |
Cat 1 for input, Cat 3 for logic and output |
Interlocking device |
Logic control shall act on the appropriate part of the electrical control system |
| Interlocking guard with or without guard locking (see ISO 16092-1) |
Drive and transmission (see ISO 16092-1) |
Stop by interlocking device of guard without guard locking |
PL c |
Cat 1 |
Electric, hydraulic or pneumatic system |
| Stop by interlocking device of guard with guard locking |
| Conditional unlocking of guard |
PL c |
Cat 3 for input and logic, Cat 2j for output |
Sensor or other suitable detection device to confirm safe de-energized standstill is achieved |
Pre-actuator of the guard locking |
| Interlocking guard opened for tool setting only [see ISO 16092-1:2017.c) and 5.5.6] |
Movements of the slide, die cushions, work-piece ejectors and transfer systems |
Stop by interlocking device of guard |
PL c |
Cat 1 for input, Cat 3 for logic and output |
Interlocking device |
Safety related logic |
Same output than those used for safeguarding measures used in production mode |
| ESPE using AOPD [see ISO 16092-1:2017.f) and 5.3.2.11] |
Movements (e.g. closing stroke) of the slide and die cushions |
Cycle initiation by other control device than the AOPD |
PL a |
Cat B |
Any but not actuated by the AOPD itselfg |
Any |
Logic control shall act on the appropriate part of the electrical control system |
| Cycle initiation by AOPD |
AOPD |
| Stop by AOPD |
PL ec |
Cat 4 |
Safety related logic |
Clutch/brake operating valves or servo drive and brake control system (e.g. air valves) |
| Muting (see 5.4.2 and ISO 16092-1:2017) |
Same as of the safety function on which muting is actingq |
— |
Position sensor or suitable alternative (see 5.4.2 and ISO 16092-1:2017) |
— |
— |
| For Group 2, speed monitoring (during muting)l (see 5.4.2.1) |
Encoder or suitable alternative |
Same as of the safety function on which muting is acting |
Servo drive and brake control system (e.g. air valves) |
| For Group 2, standstill monitoring (during muting)l (see 5.4.1.3.1) |
| For Group 2, moving direction monitoring (during muting)l (see 5.4.2.1) |
| ESPE using AOPD [see ISO 16092-1:2017.f) and 5.3.2.11] |
Movements (e.g. closing stroke) of the slide and die cushions |
Single stroke function in case of muting during opening stroker (see 5.4.8) |
PL eb,c |
Cat 4 |
Cam switch, encoder or suitable alternative |
Safety related logic |
Clutch/brake operating valves or servo drive and brake control system (e.g. air valves) |
| Stopping-performance (overrun) monitoring (see 5.4.9) |
PL c |
Cat 2j |
| Movements of work-piece ejectors and transfer systems |
Stop by AOPD |
PL dd |
Cat 3 |
AOPD |
Electrical, hydraulic or pneumatic system |
| Muting (see 5.4.2 and ISO 16092-1:2017) Not allowed for transfer system |
Same as of the safety function on which muting is actingq |
— |
Position signal or suitable alternative (see 5.4.2 and ISO 16092-1:2017) |
— |
— |
| Movements of the slide, die cushions, workpiece ejectors and transfer systems |
Prevention of restart by an additional safeguarding by AOPD [see ISO 16092-1:2017 c)] |
PL d |
Cat 3 |
AOPD |
Safety related logic |
Logic control shall act on the appropriate part of the electrical control system |
| Prevention of restart by an additional safeguarding by interlocking guard [see ISO 16092-1:2017 c)] |
PL co,p |
Cat 1 for input, Cat 3 for logic and output |
Interlocking device |
| Two-hand control device [see ISO 16092-1 g) and 5.3.2.12] |
Movements (e.g. closing stroke) of the slide and die cushions |
Stop and cycle initiation by two-hand control device |
PL eb,c |
Cat 4 |
Push buttons of two-hand control deviceg,h |
Clutch/brake operating valves or servo drive and brake control system (e.g. air valves) |
| Two-hand control device [see ISO 16092-1 g) and 5.3.2.12] |
Movements (e.g. closing stroke) of the slide and die cushions |
Muting (see 5.4.2 and ISO 16092-1:2017) |
Same as of the safety function on which muting is acting q |
— |
Position sensor or suitable alternative (see 5.4.2 and ISO 16092-1:2017) |
— |
— |
| For Group 2, speed monitoring (during muting)k (see 5.4.2.1) |
Encoder or suitable alternative |
Same as of the safety function on which muting is acting |
Servo drive and brake control system (e.g. air valves) |
| For Group 2, standstill monitoring (during muting)k (see 5.4.1.3.1) |
| For Group 2, moving direction monitoring (during muting)k (see 5.4.2.1) |
| Single stroke function in case of muting during opening stroker (see 5.4.8) |
PL eb,c |
Cat 4 |
Cam switch, encoder or suitable alternative |
Safety related logic |
Clutch/brake operating valves or servo drive and brake control system (e.g. air valves) |
| Stopping-performance (overrun) monitoring (see 5.4.9) |
PL c |
Cat 2j |
| Movements of work-piece ejectors and transfer systems |
Stop and cycle initiation by two-hand control device |
PL db,d |
Cat 3 |
Push buttons of two-hand control deviceg,h |
Safety related logic |
Electrical, hydraulic or pneumatic system |
| Muting (see 5.4.2 and ISO 16092-1:2017) Not allowed for transfer system |
Same as of the safety function on which muting is actingq |
— |
Position signal or suitable alternative (see 5.4.2 and ISO 16092-1:2017) |
— |
— |
| Two-hand control device [see ISO 16092-1 g) and 5.3.2.12] |
Movements of the slide, die cushions, workpiece ejectors and transfer systems |
Additional means to restrict access (see ISO 16092-1:2017) Stop by interlocking device of guard |
PL db,d |
Cat 3 |
Interlocking device (2 sensors or equivalent solution) |
Safety related logic |
Electrical, hydraulic or pneumatic system |
| Additional means to restrict access (see ISO 16092-1:2017) Stop by ESPE using AOPD or AOPDDR |
PL dd |
AOPD or AOPDDR |
| Common features |
| Safety systems which need reset |
Movements of the slide, die cushions, work-piece ejectors and transfer systems |
Manual reset (see ISO 16092-1:2017) |
Same as of the safety function on which it is actingm |
Any Cat for input l, Same category as of the selected safety functions for logic and output |
Push button |
Safety related logicl |
Logic control shall act on the appropriate part of the electrical control system |
| Safety systems which need selection means |
Means of selection (see ISO 16092-1:2017) |
Same as the highest PLr among the selected functions |
Selection means, e.g. selector switch, electronic key system |
Safety related logic to check plausibility of inputsi |
| Low pressure cut-off arrangementsk |
Movements of the slide |
Monitoring a failure of pneumatic counterbalance |
PL a |
Cat B |
Pressure switch or suitable alternative |
Any |
Clutch/brake operating valves or servo drive and brake control system (e.g. air valves) |
| Emergency stop device |
Movement (e.g. closing stroke) of the slide, die cushions, work-piece ejectors and transfer systems |
Emergency stop function (see 5.4.1.4, ISO 16092-1:2017) |
PL c (see ISO 13850:2015) |
Cat 1 |
Emergency stop push button h |
Safety related logic |
| a In the table, “Requirement for category of Input, Logic and Output” means the following relationships between the requirements of categories for Input, Logic or Output part: — Cat. 4, 3 or 2 may apply instead of Cat. 1; — Cat. 4 or 3 may apply instead of Cat. 2; — Cat. 4 may apply instead of Cat. 3. b Fault exclusion, e.g. mechanical break of a sensor is not acceptable. c Functional safety described in ISO 16092-1:2017 a) to e) shall apply. d Functional safety described in ISO 16092-1:2017 a) to c), and if reasonably practicable 5.4.1.1.4 d) to e) shall apply. e Plausibility check required or equivalent solution e.g. 1 system fulfilling the required PL by itself. f See ISO 14119 for the design of interlocking device of guard with guard locking. g In case of mobile control device (e.g. foot pedal) provision shall be made to ensure that unintended start-up due to a short circuit in the cable connecting the control device to the control system is prevented. |
| h In case of mobile control device, provision shall be made to ensure that the stop function remains operational in case of a short circuit in the connecting cable to the control system. i Plausibility check of inputs shall be provided and shall insure that one selected position and the relevant safety measures are still operative without any mal-function or dangerous movements are stopped. j This part can be considered of category 2 if, either demand rate ≤1/100 test rate; or testing occurs immediately upon demand of the safety function and a detected fault leads immediately to a stop of the machine (stop by the output of the testing part of the category 2 system – See ISO 13849-1:2015 NOTE 4 and Figure 10). Restart of the machine shall only be possible after repair. k If required. It depends on the design and structure of the machine. l No specific category is required for input, because logic part will only act after actuation or de-actuation of the input, and any blocking of the input will not lead to any new reset (See ISO 16092-1). m Manual reset function, which is related to a protective device placed where there is no possibility of access of the whole body of a person into the danger zone, may not be subjected to the requirements of PL on this table as a safety function. Only ISO 16092-1 is applied. |
| n PL e is based on the assumption of F2 (see ISO 13849-1:2015) that the additional safeguarding by AOPD is provided to cover the space between the control guard and the danger zone where a person enters frequently, e.g.at every cycle. o The additional safeguarding by interlocking guard shall not be opened frequently during production (e.g. it is opened only for tool setting, trial or maintenance). Where this is not practicable, other means shall be used. p In the case of additional safeguarding by interlocking guard, P1 (see ISO 13849-1:2015) is assigned because the guard is in place as a physical obstacle. Even if the interlocking device fails, it is possible that an operator recognizes the guard is removed or opened before initiating a stroke (if additional safeguarding is by AOPD: in case of a failure, an operator can stand undetected between the control guard/primary AOPD and the danger zone). q No specific PL is required for this sub function which shall be considered as an internal part of the safety functions on which it is acting. This internal part shall be taken into account in the evaluation of the PL of the relevant safety functions. r For Group 2 presses unable to achieve PL e, Cat 4, the muting is not acceptable. |