SPRY347 June   2022

 

  1.   At a glance
  2.   Authors
  3.   3
  4.   Introduction
  5.   Functional safety requirements for industrial robots
    1.     ISO 13849 in factory automation
    2.     ISO 10218 in industrial robots
  6.   Designing functional safety architectures for industrial robots
    1.     Dual external safety controllers
    2.     Single integrated safety controller
    3.     Dual integrated safety controllers
  7.   Processor-level integration for industrial robots
  8.   Making certification easier
    1.     Documentation support
    2.     Software support
  9.   Summary
  10.   References

Dual external safety controllers

The traditional approach separates safety controllers from the application (communication and compute) processors. Figure 1 shows how two separate safety controller devices facilitate safety channel 1 and safety channel 2 . Control and communication applications run on an application processor while two separate devices with individual data, clock, and power paths serve as the checker for safety.

GUID-20220519-SS0I-S04L-NCLJ-KJ8DH2GSDL74-low.jpg Figure 1 Dual external safety controller.

In addition to the trend toward miniaturization and lower cost, there has been a corresponding movement toward the integration of safety functions. Having multiple types of processing cores (such as Arm Cortex-A, Cortex-R5F and Cortex-M) and implementing the appropriate functional safety capabilities (such as isolated power and clock domains for different cores, hardware diagnostic functions, freedom from interference) can offer system designers flexibility in implementing safety architecture.