EN 50325-5:2010

Industrial communications subsystem based on ISO 11898 (CAN) for controller-device interfaces - Part 5: Functional safety communication based on EN 50325-4

This European Standard specifies a safety-related communication layer (services and protocol) based on EN 50325 4. This European Standard applies to networks based on EN 50325 4 providing safety-related communication capabilities between devices in a safety-related system in accordance with the requirements of EN 61508 series for functional safety. The services and protocols defined in this standard are intended to extend those defined in EN 50325 4. These services and protocols may be used in various applications such as manufacturing, machinery, medical, mobile machinery and process control. NOTE 1 This European Standard does not cover the procedures for the safety-related configuration and for the safety-related setup of safety-related systems. The definition and implementation of such procedures depends on the kind of the safety-related system. For example flexible safety-related systems like operating theatres as found in medical systems require different procedures than for fixed safety-related systems like cranes in the mobile machinery. This European Standard does not cover electrical safety, intrinsic safety and security aspects. Electrical safety relates to hazards such as electrical shock. Intrinsic safety relates to hazards associated with potentially explosive atmospheres. Security relates to enforcing policies to prevent changes in the safety-related system by unauthorized personnel. NOTE 2 The resulting safety integrity level claim of a system depends on the implementation of the services and protocols within the devices and the system. The implementation of the services and protocols defined in this European Standard in a device is not sufficient to qualify the device as a safety-related device.

Industrielles Kommunikationssubsystem basierend auf ISO 11898 (CAN) - Teil 5: Funktional sichere Kommunikation basierend auf EN 50325-4

Sous-système de communications industriel basé sur l'ISO 11898 (CAN) pour les interfaces des dispositifs de commande - Partie 5: Communication de sécurité fonctionnelle basée sur EN 50325-4

Industrijski komunikacijski podsistemi, ki temeljijo na ISO 11898 (CAN) za vmesnike krmilnikov - 5. del: Funkcionalno varna komunikacija na osnovi EN 50325-4

Ta evropski standard določa komunikacijsko plast, povezano z varnostjo (storitve in protokoli), osnovano na EN 50325-4. Ta evropski standard velja za omrežja, osnovana na EN 50325-4, ter zagotavlja z varnostjo povezane komunikacijske zmogljivosti med napravami v sistemih, povezanih z varnostjo, v skladu z zahtevami serije EN 61508 za funkcionalno varnost.   Storitve in protokoli, določeni s tem standardom, so namenjeni temu, da razširijo tiste, ki so določeni v EN 50325-4. Te storitve in protokoli se lahko uporabijo na različne načine, kot je uporaba za proizvodnjo, stroje, medicino, mobilne stroje in procesni nadzor. OPOMBA 1 Ta mednarodni standard ne zajema postopkov za nastavitve, povezane z varnostjo, in za postavitev, povezano z varnostjo sistemov povezanih z varnostjo. Definicija in vpeljava teh postopkov je odvisna od vrste sistemov, povezanih z varnostjo. Na primer, prilagodljive sisteme, povezane z varnostjo, kot so operacijski bloki, ki se nahajajo v medicinskih sistemih, potrebujejo različne postopke od tistih za fiksne sisteme, povezane z varnostjo, kot so žerjavi im mobilni stroji. Ta evropski standard ne zajema električne varnosti, notranje varnosti in varnostnih vidikov. Električna varnost je povezana z nevarnostmi kot je električni šok.  Notranja varnost se nanaša na nevarnosti, ki so povezane s potencialno eksplozivnimi atmosferami.  Varnost se nanaša na uveljavljanje politik za preprečevanje sprememb v sistemih, povezanih z varnostjo, s strani nepooblaščenega osebja. OPOMBA 2 Iz tega izhajajoča celovita varnostna stopnja sistema je odvisna od vpeljave storitev in protokolov znotraj naprav in sistemov.  Vpeljava storitev in protokolov, določenih v tem evropskem standardu, v napravo ni dovolj, da naprava izpolnjuje pogoje za napravo, povezano z varnostjo.

General Information

• Status: Published
• Publication Date: 15-Jul-2010
• Withdrawal Date: 30-Jun-2013
• ICS: 43.040.15 - Car informatics. On board computer systems
• Technical Committee: CLC/TC 65X - Industrial-process measurement, control and automation
• Drafting Committee: CLC/TC 65X - Industrial-process measurement, control and automation
• Parallel Committee: IEC/SC 65C - IEC_SC_65C
• Current Stage: 9093 - Decision to confirm - Review Enquiry
• Completion Date: 10-May-2023
• Ref Project: SIST EN 50325-5:2010 - Industrial communications subsystem based on ISO 11898 (CAN) for controller-device interfaces - Part 5: Functional safety communication based on EN 50325-4

Standards Content (Sample)

SLOVENSKI STANDARD
01-september-2010
Industrijski komunikacijski podsistemi, ki temeljijo na ISO 11898 (CAN) za
vmesnike krmilnikov - 5. del: Funkcionalno varna komunikacija na osnovi EN
50325-4
Industrial communications subsystem based on ISO 11898 (CAN) for controller-device
interfaces - Part 5: Functional safety communication based on EN 50325-4
Industrielles Kommunikationssubsystem basierend auf ISO 11898 (CAN) - Teil 5:
Funktional sichere Kommunikation basierend auf EN 50325–4
Sous-système de communications industriel basé sur l'ISO 11898 (CAN) pour les
interfaces des dispositifs de commande - Partie 5: Communication de sécurité
fonctionnelle basée sur EN 50325-4
Ta slovenski standard je istoveten z: EN 50325-5:2010
ICS:
35.240.50 Uporabniške rešitve IT v IT applications in industry
industriji
43.040.15 $YWRPRELOVNDLQIRUPDWLND Car informatics. On board
9JUDMHQLUDþXQDOQLãNLVLVWHPL computer systems
2003-01.Slovenski inštitut za standardizacijo. Razmnoževanje celote ali delov tega standarda ni dovoljeno.

EUROPEAN STANDARD
EN 50325-5
NORME EUROPÉENNE
July 2010
EUROPÄISCHE NORM
ICS 43.040.15
English version
Industrial communications subsystem based on ISO 11898 (CAN)
for controller-device interfaces -
Part 5: Functional safety communication based on EN 50325-4

Sous-système de communications Industrielles Kommunikationssubsystem
industriel basé sur l'ISO 11898 (CAN) basierend auf ISO 11898 (CAN) -
pour les interfaces des dispositifs Teil 5: Funktional sichere Kommunikation
de commande - basierend auf EN 50325-4
Partie 5: Communication de sécurité
fonctionnelle basée sur EN 50325-4

This European Standard was approved by CENELEC on 2010-07-01. CENELEC members are bound to comply
with the CEN/CENELEC Internal Regulations which stipulate the conditions for giving this European Standard
the status of a national standard without any alteration.

Up-to-date lists and bibliographical references concerning such national standards may be obtained on
application to the Central Secretariat or to any CENELEC member.

This European Standard exists in three official versions (English, French, German). A version in any other
language made by translation under the responsibility of a CENELEC member into its own language and notified
to the Central Secretariat has the same status as the official versions.

CENELEC members are the national electrotechnical committees of Austria, Belgium, Bulgaria, Croatia, Cyprus,
the Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Iceland, Ireland, Italy,
Latvia, Lithuania, Luxembourg, Malta, the Netherlands, Norway, Poland, Portugal, Romania, Slovakia, Slovenia,
Spain, Sweden, Switzerland and the United Kingdom.

CENELEC
European Committee for Electrotechnical Standardization
Comité Européen de Normalisation Electrotechnique
Europäisches Komitee für Elektrotechnische Normung

Management Centre: Avenue Marnix 17, B - 1000 Brussels

© 2010 CENELEC - All rights of exploitation in any form and by any means reserved worldwide for CENELEC members.
Ref. No. EN 50325-5:2010 E
Foreword
This European Standard was prepared by the Technical Committee CENELEC TC 65CX, Fieldbus.
It was submitted to the formal vote and was approved by CENELEC as EN 50535-5 on 2010-07-01.
Attention is drawn to the possibility that some of the elements of this document may be the subject of patent
rights. CEN and CENELEC shall not be held responsible for identifying any or all such patent rights.
The following dates were fixed:
– latest date by which the EN has to be implemented

at national level by publication of an identical

national standard or by endorsement
(dop) 2011-07-01
– latest date by which the national standards conflicting

with the EN have to be withdrawn
(dow) 2013-07-01
__________
- 3 - EN 50325-5:2010
Contents
Introduction . 5
1 Scope . 8
2 Normative references . 8
3 Terms, definitions, symbols, abbreviated terms and conventions . 9
3.1 Terms and definitions . 9
3.2 Symbols and abbreviated terms. 9
3.3 Conventions . 10
4 Overview of CANopen Safety . 10
5 General . 11
5.1 External documents providing specifications for the profile . 11
5.2 Safety functional requirements. 11
5.3 Safety measures . 12
5.4 Safety communication layer structure . 12
5.5 Relationships with FAL . 13
6 Safety communication layer services . 13
6.1 Introduction . 13
6.2 SR data object (SRDO) . 13
6.3 Global fail-safe command (GFC) . 14
6.4 SR communication objects . 15
7 Safety communication layer protocol . 26
7.1 SRDO . 26
7.2 GFC . 28
8 Safety communication layer management . 28
8.1 Overview . 28
8.2 SR network initialization and system boot-up . 28
8.3 SR device and network configuration . 29
9 System requirements . 29
9.1 Indicators and switches . 29
9.2 Installation guidelines . 29
9.3 Safety function response time . 29
9.4 Constraints for the calculation of system characteristics . 31
9.5 Maintenance . 31
9.6 Safety manual . 31
10 Assessment . 31
11 Conformance . 32
Annex A (informative) Example SR communication models . 33
A.1 General . 33
A.2 Model I . 33
A.3 Model II . 33
A.4 Model III . 34
A.5 Model IV . 34
Bibliography . 35

Figures
Figure 1 — Safety-related definitions in this standard . 5
Figure 2 — Relationships of EN 50325–5 with other standards (machinery) . 6
Figure 3 — Relationships of EN 50325–5 with other standards (process) . 7
Figure 4 — Relationship of SR data objects. 11
Figure 5 — Communication layers . 13
Figure 6 — Example of SRDO transmission . 14
Figure 7 — Example of SCT timing . 26
Figure 8 — Example of SRVT timing . 27
Figure 9 — SRDO write . 27
Figure 10 — GFC write . 28
Figure 11 — Safety function response time . 30
Figure A.1 — Model I . 33
Figure A.2 —Model II . 33
Figure A.3 — Model III . 34
Figure A.4 — Model IV . 34
Tables
Table 1 — Communication errors and safety measures matrix . 12
Table 2 — SRDO write . 14
Table 3 — SRDO communication parameter record . 15
Table 4 — Object definition . 16
Table 5 — Entry definition . 17
Table 6 — Value definition . 19
Table 7 — Object definition . 19
Table 8 — Entry definition . 20
Table 9 — SR parameter data for SRDO 1 for CRC calculation . 23
Table 10 — Object definition . 23
Table 11 — Entry definition . 24
Table 12 — Object definition . 25
Table 13 — Entry definition . 25
Table 14 — Object definition . 26
Table 15 — Entry definition . 26

- 5 - EN 50325-5:2010
Introduction
The EN 50325-4 fieldbus standard defines a communication protocol that enables distributed control of
automated applications. Fieldbus technology is now considered well accepted and well proven. Thus many
fieldbus enhancements are emerging, addressing not yet standardized areas such as real time, safety-
related and security-related applications.
This European Standard specifies a safety communication layer (profile and corresponding protocols) based
on the
...