IEC 61784-3-17:2016

Industrial communication networks - Profiles - Part 3-17: Functional safety fieldbuses - Additional specifications for CPF 17

IEC 61784-3-17:2016 specifies a safety communication layer (services and protocol) based on CPF 17 of IEC 61784-2 (CP 17/1) and IEC 61158 Type 21. It identifies the principles for functional safety communications defined in IEC 61784-3 that are relevant for this safety communication layer. This safety communication layer is intended for implementation in safety devices only.

Réseaux de communication industriels - Profils - Partie 3-17: Bus de terrain de sécurité fonctionnelle - Spécifications supplémentaires pour CPF 17

L'IEC 61784-3-17:2016 spécifie une couche de communication de sécurité (services et protocole) reposant sur CPF 17 de l'IEC 61784-2 (CP 17/1) et de l'IEC 61158 Type 21. Elle identifie les principes en matière de communications de sécurité fonctionnelle définies dans l'IEC 61784-3 pertinents pour cette couche de communication de sécurité. Cette couche de communication de sécurité est destinée à la mise en oeuvre sur les appareils de sécurité uniquement.

General Information

• Status: Published
• Publication Date: 27-Jul-2016
• ICS: 01 - GENERALITIES. TERMINOLOGY. STANDARDIZATION. DOCUMENTATION
• ICS: 25.040.40 - Industrial process measurement and control
• ICS: 35.100.05 - Multilayer applications
• Technical Committee: SC 65C - Industrial networks
• Current Stage: PPUB - Publication issued
• Start Date: 28-Jul-2016
• Completion Date: 28-Jul-2016

Standards Content (sample)

IEC 61784-3-17
Edition 1.0 2016-07
INTERNATIONAL
STANDARD
NORME
INTERNATIONALE
colour
inside
Industrial communication networks – Profiles –
Part 3-17: Functional safety fieldbuses – Additional specifications for CPF 17
Réseaux de communication industriels – Profils –
Partie 3-17: Bus de terrain de sécurité fonctionnelle – Spécifications
supplémentaires pour CPF 17
IEC 61784-3-17:2016-07(en-fr)
---------------------- Page: 1 ----------------------
THIS PUBLICATION IS COPYRIGHT PROTECTED
Copyright © 2016 IEC, Geneva, Switzerland

All rights reserved. Unless otherwise specified, no part of this publication may be reproduced or utilized in any form

or by any means, electronic or mechanical, including photocopying and microfilm, without permission in writing from

either IEC or IEC's member National Committee in the country of the requester. If you have any questions about IEC

copyright or have an enquiry about obtaining additional rights to this publication, please contact the address below or

your local IEC member National Committee for further information.

Droits de reproduction réservés. Sauf indication contraire, aucune partie de cette publication ne peut être reproduite

ni utilisée sous quelque forme que ce soit et par aucun procédé, électronique ou mécanique, y compris la photocopie

et les microfilms, sans l'accord écrit de l'IEC ou du Comité national de l'IEC du pays du demandeur. Si vous avez des

questions sur le copyright de l'IEC ou si vous désirez obtenir des droits supplémentaires sur cette publication, utilisez

les coordonnées ci-après ou contactez le Comité national de l'IEC de votre pays de résidence.

IEC Central Office Tel.: [phone]
3, rue de Varembé Fax: [phone]
CH-1211 Geneva 20 [e-mail]
Switzerland www.iec.ch
About the IEC

The International Electrotechnical Commission (IEC) is the leading global organization that prepares and publishes

International Standards for all electrical, electronic and related technologies.
About IEC publications

The technical content of IEC publications is kept under constant review by the IEC. Please make sure that you have the

latest edition, a corrigenda or an amendment might have been published.
IEC Catalogue - webstore.iec.ch/catalogue Electropedia - www.electropedia.org

The stand-alone application for consulting the entire The world's leading online dictionary of electronic and

bibliographical information on IEC International Standards, electrical terms containing 20 000 terms and definitions in

Technical Specifications, Technical Reports and other English and French, with equivalent terms in 15 additional

documents. Available for PC, Mac OS, Android Tablets and languages. Also known as the International Electrotechnical

iPad. Vocabulary (IEV) online.

IEC publications search - www.iec.ch/searchpub IEC Glossary - std.iec.ch/glossary

The advanced search enables to find IEC publications by a 65 000 electrotechnical terminology entries in English and

variety of criteria (reference number, text, technical French extracted from the Terms and Definitions clause of

committee,…). It also gives information on projects, replaced IEC publications issued since 2002. Some entries have been

and withdrawn publications. collected from earlier publications of IEC TC 37, 77, 86 and

CISPR.
IEC Just Published - webstore.iec.ch/justpublished

Stay up to date on all new IEC publications. Just Published IEC Customer Service Centre - webstore.iec.ch/csc

details all new publications released. Available online and If you wish to give us your feedback on this publication or

also once a month by email. need further assistance, please contact the Customer Service

Centre: [e-mail].
A propos de l'IEC

La Commission Electrotechnique Internationale (IEC) est la première organisation mondiale qui élabore et publie des

Normes internationales pour tout ce qui a trait à l'électricité, à l'électronique et aux technologies apparentées.

A propos des publications IEC

Le contenu technique des publications IEC est constamment revu. Veuillez vous assurer que vous possédez l’édition la

plus récente, un corrigendum ou amendement peut avoir été publié.
Catalogue IEC - webstore.iec.ch/catalogue Electropedia - www.electropedia.org
Application autonome pour consulter tous les renseignements
Le premier dictionnaire en ligne de termes électroniques et
bibliographiques sur les Normes internationales,
électriques. Il contient 20 000 termes et définitions en anglais
Spécifications techniques, Rapports techniques et autres
et en français, ainsi que les termes équivalents dans 15
documents de l'IEC. Disponible pour PC, Mac OS, tablettes
langues additionnelles. Egalement appelé Vocabulaire
Android et iPad.
Electrotechnique International (IEV) en ligne.
Recherche de publications IEC - www.iec.ch/searchpub
Glossaire IEC - std.iec.ch/glossary

La recherche avancée permet de trouver des publications IEC 65 000 entrées terminologiques électrotechniques, en anglais

en utilisant différents critères (numéro de référence, texte, et en français, extraites des articles Termes et Définitions des

comité d’études,…). Elle donne aussi des informations sur les publications IEC parues depuis 2002. Plus certaines entrées

projets et les publications remplacées ou retirées. antérieures extraites des publications des CE 37, 77, 86 et

CISPR de l'IEC.
IEC Just Published - webstore.iec.ch/justpublished
Service Clients - webstore.iec.ch/csc
Restez informé sur les nouvelles publications IEC. Just

Published détaille les nouvelles publications parues. Si vous désirez nous donner des commentaires sur cette

Disponible en ligne et aussi une fois par mois par email. publication ou si vous avez des questions contactez-nous:

[e-mail].
---------------------- Page: 2 ----------------------
IEC 61784-3-17
Edition 1.0 2016-07
INTERNATIONAL
STANDARD
NORME
INTERNATIONALE
colour
inside
Industrial communication networks – Profiles –
Part 3-17: Functional safety fieldbuses – Additional specifications for CPF 17
Réseaux de communication industriels – Profils –
Partie 3-17: Bus de terrain de sécurité fonctionnelle – Spécifications
supplémentaires pour CPF 17
INTERNATIONAL
ELECTROTECHNICAL
COMMISSION
COMMISSION
ELECTROTECHNIQUE
INTERNATIONALE
ICS 25.040.40, 35.100.05 ISBN 978-2-8322-3493-8

Warning! Make sure that you obtained this publication from an authorized distributor.

Attention! Veuillez vous assurer que vous avez obtenu cette publication via un distributeur agréé.

® Registered trademark of the International Electrotechnical Commission
Marque déposée de la Commission Electrotechnique Internationale
---------------------- Page: 3 ----------------------
– 2 – IEC 61784-3-17:2016  IEC 2016
CONTENTS

FOREWORD ......................................................................................................................... 5

0 Introduction ................................................................................................................... 7

0.1 General ................................................................................................................. 7

0.2 Patent declaration ................................................................................................. 9

1 Scope .......................................................................................................................... 10

2 Normative references................................................................................................... 10

3 Terms, definitions, symbols, abbreviated terms, and conventions .................................. 11

3.1 Terms and definitions .......................................................................................... 11

3.1.1 Common terms and definitions ..................................................................... 11

3.1.2 CPF 17: Additional terms and definitions ...................................................... 17

3.2 Symbols and abbreviated terms ........................................................................... 17

3.2.1 Common symbols and abbreviated terms ...................................................... 17

3.2.2 CPF 17: Additional symbols and abbreviated terms ....................................... 18

3.3 Conventions ........................................................................................................ 18

4 Overview of FSCP 17/1 (RAPIEnet Safety™)................................................................ 18

5 General ....................................................................................................................... 20

5.1 External documents providing specifications for the profile ................................... 20

5.2 Safety functional requirements ............................................................................ 20

5.3 Safety measures ................................................................................................. 20

5.3.1 General ....................................................................................................... 20

5.3.2 (Virtual) sequence number ........................................................................... 21

5.3.3 Time expectation with watchdog ................................................................... 21

5.3.4 Connection authentication ............................................................................ 21

5.3.5 Feedback message ...................................................................................... 21

5.3.6 Data integrity assurance ............................................................................... 21

5.4 Safety communication layer structure .................................................................. 22

5.4.1 Principle of FSCP 17/1 safety communications ............................................. 22

5.4.2 CPF 17 communication structures ................................................................ 22

5.5 Relationships with FAL (and DLL, PhL) ................................................................ 22

5.5.1 General ....................................................................................................... 22

5.5.2 Data types ................................................................................................... 23

6 Safety communication layer services ............................................................................ 23

6.1 Overview............................................................................................................. 23

6.2 Functional Safety connection ............................................................................... 23

6.2.1 General ....................................................................................................... 23

6.2.2 Initiator class specification ........................................................................... 23

6.2.3 Responder-class specification ...................................................................... 24

6.2.4 Sender class specification ............................................................................ 25

6.2.5 Receiver class specification ......................................................................... 27

6.3 Functional Safety data transmission service ......................................................... 29

6.4 Functional Safety connection relation .................................................................. 29

7 Safety communication layer protocol ............................................................................ 30

7.1 Safety PDU format .............................................................................................. 30

7.1.1 General ....................................................................................................... 30

7.1.2 FSPDU command......................................................................................... 31

---------------------- Page: 4 ----------------------
IEC 61784-3-17:2016  IEC 2016 – 3 –

7.1.3 Authentication key ........................................................................................ 31

7.1.4 FSPDU CRC ................................................................................................ 31

7.2 FSCP 17/1 communication procedure .................................................................. 34

7.2.1 FSCP 17/1 device states .............................................................................. 34

7.3 Response to communication errors ...................................................................... 42

7.3.1 General ....................................................................................................... 42

7.4 State table for SCL of CPF 17 ............................................................................. 42

7.4.1 General ....................................................................................................... 42

7.4.2 Events ......................................................................................................... 43

7.4.3 State table for Initiator .................................................................................. 44

7.4.4 State table for Responder............................................................................. 53

8 Safety communication layer management ..................................................................... 62

8.1 FSCP 17/1 parameter handling ............................................................................ 62

8.2 Functional Safety communication parameters ...................................................... 62

9 System requirements ................................................................................................... 62

9.1 Indicators and switches ....................................................................................... 62

9.2 Installation guidelines .......................................................................................... 62

9.3 Safety function response time .............................................................................. 62

9.4 Duration of demands ........................................................................................... 65

9.5 Constraints for calculation of system characteristics ............................................ 65

9.5.1 General ....................................................................................................... 65

9.5.2 Number of devices ....................................................................................... 65

9.5.3 Probabilistic consideration ............................................................................ 65

9.6 Maintenance ....................................................................................................... 66

9.7 Safety manual ..................................................................................................... 66

10 Assessment ................................................................................................................. 66

Annex A (informative) Additional information for functional safety communication

profiles of CPF 17 ............................................................................................................... 67

A.1 Hash function calculation ..................................................................................... 67

A.2 … ....................................................................................................................... 68

Annex B (informative) Information for assessment of the functional safety

communication profiles of CPF 17 ....................................................................................... 69

Bibliography ....................................................................................................................... 70

Figure 1 – Relationships of IEC 61784-3 with other standards (machinery) ............................. 7

Figure 2 – Relationships of IEC 61784-3 with other standards (process) ................................ 8

Figure 3 – Communication relationships among FSCP 17 devices ........................................ 19

Figure 4 – Safety layer architecture ..................................................................................... 22

Figure 5 – Functional Safety Cycle ...................................................................................... 29

Figure 6 – Connection relationships among FSCP 17/1 devices ........................................... 30

Figure 7 – Functional Safety PDU for CPF 17 over type 21 PDU .......................................... 30

Figure 8 – FSPDU CRC code generation process ................................................................ 32

Figure 9 – Example of sequence number changing .............................................................. 33

Figure 10 – CRC comparison operation ............................................................................... 34

Figure 11 – FSCP 17/1 device states .................................................................................. 35

Figure 12 – State diagram for Functional Safety device ....................................................... 43

Figure 13 – State diagram for Initiator ................................................................................. 44

---------------------- Page: 5 ----------------------
– 4 – IEC 61784-3-17:2016  IEC 2016

Figure 14 – State diagram for Responder ............................................................................ 53

Figure 15 – Safety function response time ........................................................................... 63

Figure 16 – Residual error rate of FSCP 17/1 ...................................................................... 66

Table 1 – Deployed measures to manage errors .................................................................. 21

Table 2 – General FSPDU ................................................................................................... 31

Table 3 – FSPDU command ................................................................................................ 31

Table 4 – FSPDU with 4 octets of safety data and RESET command after restart (reset

connection) or error ............................................................................................................ 36

Table 5 – FSPDU with 4 octets of safety data and RESET command to acknowledge a

reset command from the Initiator ......................................................................................... 36

Table 6 – Connection request PDU for the Initiator in CONNECTION state ........................... 37

Table 7 – Connection response PDU for the Responder in CONNECTION state ................... 37

Table 8 – Safety data transferred in the SET_PARA state .................................................... 38

Table 9 – Sending FSPDU with 6 octets of safety data from the Initiator in SET_PARA

state ................................................................................................................................... 38

Table 10 – Expected FSPDU with 6 octets of safety data from the Responder in

SET_PARA state ................................................................................................................ 39

Table 11 – Safety data from the Initiator in the WAIT_PARA state ........................................ 39

Table 12 – Sending FSPDU with 6 octets of safety data from the Initiator in the

WAIT_PARA state .............................................................................................................. 40

Table 13 – Receiving FSPDU with 6 octets of safety data from the Responder in the

WAIT_PARA state .............................................................................................................. 40

Table 14 – FSPDU of Safety data in the DATA state ............................................................ 41

Table 15 – Example of 4 octets of safety data from a Sender ............................................... 41

Table 16 – Example of ACK PDU from the Receiver with 4 octets of safety data ................... 41

Table 17 – Functional Safety communication errors ............................................................. 42

Table 18 – Functional Safety communication error codes ..................................................... 42

Table 19 – States of the Functional Safety Initiator .............................................................. 43

Table 20 – States of the Functional Safety Responder ......................................................... 43

Table 21 – Events in the Functional Safety state ................................................................. 44

Table 22 – Functional Safety communication parameters ..................................................... 62

Table A.1 – the lookup table for FSCP 17/1 ......................................................................... 68

---------------------- Page: 6 ----------------------
IEC 61784-3-17:2016  IEC 2016 – 5 –
INTERNATIONAL ELECTROTECHNICAL COMMISSION
____________
INDUSTRIAL COMMUNICATION NETWORKS –
PROFILES –
Part 3-17: Functional safety fieldbuses –
Additional specifications for CPF 17
FOREWORD

1) The International Electrotechnical Commission (IEC) is a worldwide organization for standardization comprising

all national electrotechnical committees (IEC National Committees). The object of IEC is to promote

international co-operation on all questions concerning standardization in the electrical and electronic fields. To

this end and in addition to other activities, IEC publishes International Standards, Technical Specifications,

Technical Reports, Publicly Available Specifications (PAS) and Guides (hereafter referred to as “IEC

Publication(s)”). Their preparation is entrusted to technical committees; any IEC National Committee interested

in the subject dealt with may participate in this preparatory work. International, governmental and non-

governmental organizations liaising with the IEC also participate in this preparation. IEC collaborates closely

with the International Organization for Standardization (ISO) in accordance with conditions determined by

agreement between the two organizations.

2) The formal decisions or agreements of IEC on technical matters express, as nearly as possible, an international

consensus of opinion on the relevant subjects since each technical committee has representation from all

interested IEC National Committees.

3) IEC Publications have the form of recommendations for international use and are accepted by IEC National

Committees in that sense. While all reasonable efforts are made to ensure that the technical content of IEC

Publications is accurate, IEC cannot be held responsible for the way in which they are used or for any

misinterpretation by any end user.

4) In order to promote international uniformity, IEC National Committees undertake to apply IEC Publications

transparently to the maximum extent possible in their national and regional publications. Any divergence

between any IEC Publication and the corresponding national or regional publication shall be clearly indicated in

the latter.

5) IEC itself does not provide any attestation of conformity. Independent certification bodies provide conformity

assessment services and, in some areas, access to IEC marks of conformity. IEC is not responsible for any

services carried out by independent certification bodies.

6) All users should ensure that they have the latest edition of this publication.

7) No liability shall attach to IEC or its directors, employees, servants or agents including individual experts and

members of its technical committees and IEC National Committees for any personal injury, property damage or

other damage of any nature whatsoever, whether direct or indirect, or for costs (including legal fees) and

expenses arising out of the publication, use of, or reliance upon, this IEC Publication or any other IEC

Publications.

8) Attention is drawn to the Normative references cited in this publication. Use of the referenced publications is

indispensable for the correct application of this publication.

International Standard IEC 61784-3-17 has been prepared by subcommittee 65C: Industrial

networks, of IEC technical committee 65: Industrial-process measurement, control and

automation.
The text of this standard is based on the following documents:
FDIS Report on voting
65C/851/FDIS 65C/854/RVD

Full information on the voting for the approval of this standard can be found in the report on

voting indicated in the above table.

This publication has been drafted in accordance with the ISO/IEC Directives, Part 2.

---------------------- Page: 7 ----------------------
– 6 – IEC 61784-3-17:2016  IEC 2016

A list of all parts of the IEC 61784-3 series, published under the general title Industrial

communication networks – Profiles – Functional safety fieldbuses, can be found on the IEC

website.

The committee has decided that the contents of this publication will remain unchanged until

the stability date indicated on the IEC web site under "http://webstore.iec.ch" in the data

related to the specific publication. At this date, the publication will be
• reconfirmed,
• withdrawn,
• replaced by a revised edition, or
• amended.

IMPORTANT – The 'colour inside' logo on the cover page of this publication indicates

that it contains colours which are considered to be useful for the correct

understanding of its contents. Users should therefore print this document using a

colour printer.
---------------------- Page: 8 ----------------------
IEC 61784-3-17:2016  IEC 2016 – 7 –
0 Introduction
0.1 General

The IEC 61158 fieldbus standard together with its companion standards IEC 61784-1 and

IEC 61784-2 defines a set of communication protocols that enable distributed control of

automation applications. Fieldbus technology is now considered well accepted and well

proven. Thus fieldbus enhancements continue to emerge, addressing applications for areas

such as real time, safety-related and security-related applications.

This standard explains the relevant principles for functional safety communications with

reference to IEC 61508 series and specifies several safety communication layers (profiles and

corresponding protocols) based on the communication profiles and protocol layers of

IEC 61784-2 and the IEC 61158 series. It does not cover electrical safety and intrinsic safety

aspects.

Figure 1 shows the relationships between this standard and relevant safety and fieldbus

standards in a machinery environment.
IEC

NOTE Subclauses 6.7.6.4 (high complexity) and 6.7.8.1.6 (low complexity) of IEC 62061 specify the relationship

between PL (Category) and SIL.
Figure 1 – Relationships of IEC 61784-3 with other standards (machinery)
---------------------- Page: 9 ----------------------
– 8 – IEC 61784-3-17:2016  IEC 2016

Figure 2 shows the relationships between this standard and relevant safety and fieldbus

standards in a process environment.
IEC

For specified electromagnetic environments; otherwise IEC 61326-3-1 or IEC 61000-6-7.

EN ratified.
Figure 2 – Relationships of IEC 61784-3 with other standards (process)

Safety communication layers which are implemented as parts of safety-related systems

according to IEC 61508 series provide the necessary confidence in the transportation of

messages (information) between two or more participants on a fieldbus in a safety-related

system, or sufficient confidence of safe behaviour in the event of fieldbus errors or failures.

Safety communication layers specified in this standard do this in such a way that a fieldbus

can be used for applications requiring functional safety up to the Safety Integrity Level (SIL)

specified by its corresponding functional safety communication profile.

The resulting SIL claim of a system depends on the implementation of the selected functional

safety communication profile (FSCP) within this system – implementation of a functional

safety communication profile in a standard device is not sufficient to qualify it as a safety

device.
---------------------- Page: 10 ----------------------
IEC 61784-3-17:2016  IEC 2016 – 9 –
This standard describes:

• basic principles for implementing the requirements of IEC 61508 series for safety-

related data communications, including possible transmission faults, remedial
measures and considerations affecting data integrity;

• functional safety communication profiles for several communication profile families in

IEC 61784-1 and IEC 61784-2, including safety layer extensions to the communication

service and protocols sections of the IEC 61158 series.
0.2 Patent declaration

The International Electrotechnical Commission (IEC) draws attention to the fact that it is

claimed that compliance with this document may involve the use of patents concerning the

functional safety communication profiles for family 17 as follows, where the [xx] notation

indicates the holder of the patent right:
PCT/KR2012/008651 [LSIS] Communication apparatus and Communication method
PCT/KR2012/008653 [LSIS] Communication apparatus and Communication method
PCT/KR2012/008654 [LSIS] Communication apparatus and Communication method
PCT/KR2012/008655 [LSIS] Communication apparatus and Communication method
KR 10-1389604 [LSIS] Communication Device and communication method
KR 1
...