2026年10月4日 · New

Safety Interlock Switch Wiring: ISO 14119 Compliance, Category 3/4 Architecture, and Diagnostic Coverage Calculation

div data-elementor-type=”wp-post” data-elementor-id=”1″ class=”elementor elementor-1 elementor-bc-flex-widget”>

# Safety Interlock Switch Wiring: ISO 14119 Compliance, Category 3/4 Architecture, and Diagnostic Coverage Calculation

Safety interlock switches are critical components in industrial automation, ensuring the protection of personnel and machinery by monitoring the position of guards and other protective devices. Proper wiring and configuration of these switches are essential to meet stringent safety standards and to maintain the integrity of safety functions. This article delves into the technical aspects of safety interlock switch wiring, focusing on compliance with ISO 14119, safety architecture categories per ISO 13849-1, dual-channel wiring techniques, diagnostic coverage, actuator coding, safety relay integration, and testing procedures. We will also reference real products to provide practical insights.

1. Introduction

In industrial environments, machine guarding is paramount to safeguarding operators from hazardous machinery. Safety interlock switches play a pivotal role in this by ensuring that machine guards are securely closed before allowing the machinery to operate. Non-compliance or improper wiring can lead to catastrophic failures, resulting in injuries or fatalities. Understanding the intricacies of safety interlock switch wiring is crucial for engineers and technicians to ensure safety and compliance with international standards such as ISO 14119 and ISO 13849-1.

2. ISO 14119 Standard Requirements

2.1 Guard Locking Devices

ISO 14119 specifies requirements for the selection, design, and integration of guard interlocking devices. Guard locking devices are used when additional protection is needed, ensuring that the guard remains closed and locked until the machinery is in a safe state.

With Guard Locking: These devices provide a mechanical lock that prevents the guard from being opened until the machine is in a safe condition. An example is the BERNSTEIN SLC-F-024-20/20-R4 Safety Interlock Switch, which can be configured for guard locking applications.

Without Guard Locking: These devices only monitor the position of the guard and do not provide a locking mechanism. They are suitable for applications where the guard can be closed quickly and safely.

2.2 Actuator Coding Types

Actuator coding is essential to prevent unauthorized access and to ensure that only the correct actuator can operate the interlock switch.

Mechanical Key Coding: Uses a unique key pattern to ensure only the correct actuator can operate the switch. This method is simple but can be defeated with duplicate keys.

Magnetic Coding: Utilizes magnetic fields with unique polarity patterns to provide a higher level of security. The EUCHNER CES-AR-CL2-CH-SA-112929 RFID Safety Switch employs this technology.

RFID Transponder Coding: Offers the highest level of security by using a unique ID for each actuator. This method is highly resistant to defeat and is recommended for high-risk applications.

2.3 Separation Distance to Prevent Defeat

ISO 14119 Annex B provides guidelines on the separation distance between the actuator and the switch to prevent tampering. The separation distance should be sufficient to prevent the insertion of tools or other objects that could defeat the interlock.

3. Safety Architecture Categories per ISO 13849-1

ISO 13849-1 outlines five categories of safety-related control systems, each with different levels of redundancy and fault tolerance.

Category	Description	Fault Tolerance	Diagnostic Coverage
B	Single channel, no monitoring	None	None
1	Single channel with safety-rated components	None	Low
2	Single channel with monitoring	None	Medium
3	Dual channel with monitoring, single fault does not lead to loss of safety	Single fault	High
4	Dual channel with monitoring, accumulation of undetected faults does not lead to loss	Multiple faults	Very High

3.1 Category 3 and 4 Architecture

Category 3 and 4 architectures are commonly used in safety interlock switch applications due to their high level of fault tolerance.

Category 3: Utilizes dual-channel architecture with monitoring. A single fault in one channel does not lead to the loss of the safety function. The ABB 2TLA020072R0000 URAX-A1 Safety Module is an example of a safety relay that supports Category 3 architecture.

Category 4: Similar to Category 3 but with additional fault tolerance. It can tolerate the accumulation of undetected faults without losing the safety function. This is achieved through more sophisticated monitoring and redundancy.

4. Dual-Channel Wiring

4.1 Wiring Two Safety Switches in Series (OR Logic)

Wiring two safety switches in series is used for guard doors that need to be monitored independently. This configuration ensures that if either switch is opened, the safety function is triggered.

4.2 Wiring Two Safety Switches in Parallel (AND Logic)

Parallel wiring is used for access control where both switches must be closed to allow the machine to operate. This configuration ensures that both guards are closed before the machine can start.

4.3 Cross-Fault Detection and Test Pulse Injection

Cross-fault detection is crucial in dual-channel systems to ensure that a fault in one channel does not affect the other. Test pulse injection by safety relays, such as the Mayser SG-EFS104ZK2 Safety Relay, is used to verify the integrity of the wiring and the switches.

5. Diagnostic Coverage (DC) Calculation

Diagnostic Coverage is a measure of the effectiveness of diagnostics in detecting dangerous failures.

\[ \text{DC} = \frac{\text{Detected Dangerous Failures}}{\text{Total Dangerous Failures}} \]

Typical DC values are:

None: 0%
Low: 60%
Medium: 90%
High: 99%

Series wiring of multiple switches can reduce the overall DC, as the failure of one switch can affect the entire system. Therefore, it is essential to ensure that each switch has a high DC to maintain the overall safety integrity.

6. Coded vs Non-Coded Actuators

6.1 Mechanical Key Coding

Mechanical key coding is the simplest form of actuator coding but offers the lowest level of security. It is susceptible to defeat by duplicating the key.

6.2 Magnetic Coding

Magnetic coding provides a higher level of security by using unique polarity patterns. The Omron V680-HAM42-DRT DeviceNet Magnetic Safety Switch utilizes this method.

6.3 RFID Transponder Coding

RFID transponder coding offers the highest level of security by using a unique ID for each actuator. This method is highly resistant to defeat and is recommended for high-risk applications. The SICK RFU630-13105 RFID Reader is an example of an RFID-based safety switch.

6.4 Defeat Resistance per ISO 14119 Annex B

ISO 14119 Annex B provides guidelines on the defeat resistance of actuator coding. The level of defeat resistance depends on the coding type, with RFID coding offering the highest resistance.

7. Safety Relay Integration

7.1 Dual-Channel Input Monitoring

Safety relays monitor both channels of the dual-channel system to ensure that the safety function is maintained. The ABB 2TLA020072R0000 URAX-A1 Safety Module is designed for this purpose.

7.2 EDM (External Device Monitoring) Feedback Loop

EDM feedback loops are used to monitor the state of external devices, such as contactors, to ensure that they are functioning correctly.

7.3 Reset/Test Cycle

Safety relays require a reset/test cycle to verify the integrity of the safety function. This cycle ensures that the system is functioning correctly before allowing the machine to operate.

7.4 Output Relay Configuration

Force-guided relays, as per IEC 61810-1, are commonly used in safety relay configurations. These relays ensure that the contacts are mechanically linked, preventing dangerous failures.

8. Guard Door Monitoring

8.1 Hinge-Mounted Interlock vs Tongue-Actuated Interlock vs Separate Actuator

Different types of interlock switches are used depending on the application. Hinge-mounted interlocks are integrated into the hinge of the guard door, while tongue-actuated interlocks use a protruding tongue to activate the switch. Separate actuators are used when the interlock switch is mounted away from the guard door.

8.2 Actuator Alignment Tolerance

Actuator alignment tolerance is typically +/-2mm, ensuring that the actuator can engage the switch correctly even with slight misalignment.

8.3 Tamper Detection

Tamper detection features are essential to ensure that the interlock switch cannot be easily defeated. This can include tamper-resistant housings and sensors that detect unauthorized access.

9. Wiring Practices

9.1 Cable Type

Shielded cables are recommended for safety interlock switch wiring to protect against electromagnetic interference. Fire-retardant LSZH (Low Smoke Zero Halogen) cables are also preferred for safety-critical applications.

9.2 Maximum Cable Length

The maximum cable length for hardwired systems is typically 100 meters. Longer cable lengths can be achieved using repeaters or other signal amplification methods.

9.3 Conduit Routing

Conduit routing should be away from power cables to minimize interference. Proper grounding and shielding are essential to ensure the integrity of the safety function.

9.4 Terminal Torque Specifications

Terminal torque specifications must be adhered to in order to ensure reliable connections. Over-tightening or under-tightening can lead to connection failures.

10. Performance Level (PL) Calculation

Performance Level (PL) is calculated using the SISTEMA software, which combines MTTFd (Mean Time to Dangerous Failure), DC (Diagnostic Coverage), and CCF (Common Cause Failure) scores to determine the required Performance Level (PLr).

\[ \text{PL} = \text{f}(\text{MTTFd}, \text{DC}, \text{CCF}) \]

The PLr is determined based on the risk assessment of the machinery, with higher risk levels requiring higher PLs.

11. Testing and Validation

11.1 Functional Test Procedure

A functional test procedure should be established to verify the correct operation of the safety interlock switch system. This includes testing the actuation and de-actuation of the switches, as well as the safety relay response.

11.2 Injection of Simulated Faults

Simulated faults should be injected to test the fault tolerance of the system. This includes testing the reaction of the safety relay to faults in both channels.

11.3 Documentation Requirements per ISO 13849-2

Documentation is crucial for compliance with ISO 13849-2. This includes records of risk assessments, safety functions, and test results.

FAQ

1. What is the difference between Category 3 and Category 4 safety architectures?

Category 3 architectures can tolerate a single fault without losing the safety function, while Category 4 architectures can tolerate multiple faults. Category 4 provides a higher level of fault tolerance and is suitable for higher-risk applications.

2. How does RFID coding improve safety compared to mechanical coding?

RFID coding offers a higher level of security by using a unique ID for each actuator, making it more resistant to defeat compared to mechanical coding, which can be easily duplicated.

3. What is the typical actuator alignment tolerance for safety interlock switches?

The typical actuator alignment tolerance is +/-2mm, ensuring reliable operation even with slight misalignment.

4. How does the SISTEMA software help in determining the Performance Level (PL)?

SISTEMA calculates the PL by combining MTTFd, DC, and CCF scores, providing a comprehensive assessment of the safety function’s reliability.

5. What are the benefits of using shielded cables for safety interlock switch wiring?

Shielded cables protect against electromagnetic interference, ensuring the integrity of the safety function. They are essential for maintaining the reliability of the safety system.

Conclusion

Proper wiring and configuration of safety interlock switches are crucial for ensuring the safety of personnel and machinery. Compliance with ISO 14119 and ISO 13849-1 is essential for maintaining the highest standards of safety. By understanding the technical aspects of safety interlock switch wiring, engineers and technicians can ensure that their systems are robust, reliable, and compliant.

Call to Action

Browse our selection of safety interlock switches, including the DeviceNet Magnetic Safety Switch Omron V680-HAM42-DRT, Reader Interface Module LENEL LNL-X2220 Dual Door Control, and Automatic Pressure Switch ActTenda CE16 for Pumps. Ensure the safety and reliability of your machinery with our high-quality products.

—

By adhering to the guidelines and recommendations outlined in this article, you can ensure that your safety interlock switch wiring is compliant, reliable, and effective in protecting your personnel and machinery.