EN 61784-3-2:2008

SLOVENSKI STANDARD
01-september-2008
Industrijska komunikacijska omrežja - Profili - 3-2. del: Funkcijska varnost
procesnih vodil - Dodatne specifikacije za CPF 2 (IEC 61784-3-2:2007)
Industrial communication networks - Profiles - Part 3-2: Functional safety fieldbuses -
Additional specifications for CPF 2
Industrielle Kommunikationsnetze - Profile - Teil 3-2: Funktional sichere Übertragung bei
Feldbussen - Zusätzliche Festlegungen für die Kommunikationsprofilfamilie 2
Réseaux de communication industriels - Profils - Partie 3-2: Bus de terrain de sécurité
fonctionnelle - Spécification supplémentaire pour CPF 2
Ta slovenski standard je istoveten z: EN 61784-3-2:2008
ICS:
25.040.40 Merjenje in krmiljenje Industrial process
industrijskih postopkov measurement and control
35.100.05 9HþVORMQHXSRUDEQLãNH Multilayer applications
UHãLWYH
2003-01.Slovenski inštitut za standardizacijo. Razmnoževanje celote ali delov tega standarda ni dovoljeno.

EUROPEAN STANDARD
EN 61784-3-2
NORME EUROPÉENNE
June 2008
EUROPÄISCHE NORM
ICS 35.100.05; 25.040.40
English version
Industrial communication networks -
Profiles -
Part 3-2: Functional safety fieldbuses -
Additional specifications for CPF 2
(IEC 61784-3-2:2007)
Réseaux de communication industriels -  Industrielle Kommunikationsnetze -
Profils - Profile -
Partie 3-2: Bus de terrain Teil 3-2: Funktional sichere Übertragung
de sécurité fonctionnelle - bei Feldbussen -
Spécification supplémentaire pour CPF 2 Zusätzliche Festlegungen
(CEI 61784-3-2:2007) für die Kommunikationsprofilfamilie 2
(IEC 61784-3-2:2007)
This European Standard was approved by CENELEC on 2008-05-01. CENELEC members are bound to comply
with the CEN/CENELEC Internal Regulations which stipulate the conditions for giving this European Standard
the status of a national standard without any alteration.

Up-to-date lists and bibliographical references concerning such national standards may be obtained on
application to the Central Secretariat or to any CENELEC member.

This European Standard exists in three official versions (English, French, German). A version in any other
language made by translation under the responsibility of a CENELEC member into its own language and notified
to the Central Secretariat has the same status as the official versions.

CENELEC members are the national electrotechnical committees of Austria, Belgium, Bulgaria, Cyprus, the
Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia,
Lithuania, Luxembourg, Malta, the Netherlands, Norway, Poland, Portugal, Romania, Slovakia, Slovenia, Spain,
Sweden, Switzerland and the United Kingdom.

CENELEC
European Committee for Electrotechnical Standardization
Comité Européen de Normalisation Electrotechnique
Europäisches Komitee für Elektrotechnische Normung

Central Secretariat: rue de Stassart 35, B - 1050 Brussels

© 2008 CENELEC - All rights of exploitation in any form and by any means reserved worldwide for CENELEC members.
Ref. No. EN 61784-3-2:2008 E
Foreword
The text of document 65C/470/FDIS, future edition 1 of IEC 61784-3-2, prepared by SC 65C, Industrial
networks, of IEC TC 65, Industrial-process measurement, control and automation, was submitted to the
IEC-CENELEC parallel vote and was approved by CENELEC as EN 61784-3-2 on 2008-05-01.
The following dates were fixed:
– latest date by which the EN has to be implemented
at national level by publication of an identical
national standard or by endorsement (dop) 2009-02-01
– latest date by which the national standards conflicting
with the EN have to be withdrawn (dow) 2011-05-01
The International Electrotechnical Commission (IEC) and CENELEC draw attention to the fact that it is
claimed that compliance with this document may involve the use of patents concerning the functional
safety communication profiles for family 2 as follows, where the [xx] notation indicates the holder of the
patent right:
US 6,631,476 [RA] Safety network for industrial controller providing redundant connections on single
media
US 6,701,198 [RA] Safety network for industrial controller allowing initialization on standard networks
US 6,721,900 [RA] Safety network for industrial controller having reduced bandwidth requirements
US 6,891,850 [RA] Network independent safety protocol for industrial controller
US 6,915,444 [RA] Network independent safety protocol for industrial controller using data
manipulation techniques
The IEC and CENELEC take no position concerning the evidence, validity and scope of these patent
rights.
The holders of these patent rights have assured the IEC that they are willing to negotiate licences under
reasonable and non-discriminatory terms and conditions with applicants throughout the world. In this
respect, the statements of the holders of these patent rights are registered with IEC.
Information may be obtained from:
[RA] Rockwell Automation, Inc.
1201 S. Second Street
Milwaukee, WI 53204
USA
Attention: Intellectual Propert Dept.

Attention is drawn to the possibility that some of the elements of this document may be the subject of
patent rights other than those identified above. IEC and CENELEC shall not be held responsible for
identifying any or all such patent rights.
Annex ZA has been added by CENELEC.
__________
- 3 - EN 61784-3-2:2008
Endorsement notice
The text of the International Standard IEC 61784-3-2:2007 was approved by CENELEC as a European
Standard without any modification.
In the official version, for Bibliography, the following notes have to be added for the standards indicated:
IEC 60204-1 NOTE  Harmonized as EN 60204-1:2006 (not modified).
IEC 61158 NOTE  Harmonized in EN 61158 series (not modified).
IEC 61496 NOTE  Harmonized as EN 61496-1:2004 (modified)
and as CLC/TS 61496-2:2006 (not modified)
and CLC/TC 61496-3:2008 (not modified)
IEC 61508-4 NOTE  Harmonized as EN 61508-4:2001 (not modified).
IEC 61508-6 NOTE  Harmonized as EN 61508-6:2001 (not modified).
IEC 61784-5 NOTE  Harmonized in EN 61784-5 series (not modified).
IEC 61800-5-2 NOTE  Harmonized as EN 61800-5-2:2007 (not modified).
IEC 62061 NOTE  Harmonized as EN 62061:2005 (not modified).
ISO 12100-1 NOTE  Harmonized as EN ISO 12100-1:2003 (not modified).
ISO 13849-1 NOTE  Harmonized as EN ISO 13849-1:2006 (not modified).
ISO 13849-2 NOTE  Harmonized as EN ISO 13849-2:2003 (not modified).
__________
Annex ZA
(normative)
Normative references to international publications
with their corresponding European publications

The following referenced documents are indispensable for the application of this document. For dated
references, only the edition cited applies. For undated references, the latest edition of the referenced
document (including any amendments) applies.

NOTE  When an international publication has been modified by common modifications, indicated by (mod), the relevant EN/HD
applies.
Publication Year Title EN/HD Year

1) 2)
IEC 61131-2 - Programmable controllers - EN 61131-2 2007
Part 2: Equipment requirements and tests

1) 2)
IEC 61131-3 - Programmable controllers - EN 61131-3 2003
Part 3: Programming languages
1) 2)
IEC 61158-2 - Industrial communication networks - EN 61158-2 2008
Fieldbus specifications -
Part 2: Physical layer specification and service
definition
1) 2)
IEC 61158-3-2 - Industrial communication networks - EN 61158-3-2 2008
Fieldbus specifications -
Part 3-2: Data-link layer service definition -
Type 2 elements
1) 2)
IEC 61158-4-2 - Industrial communication networks - EN 61158-4-2 2008
Fieldbus specifications -
Part 4-2: Data-link layer protocol
specification - Type 2 elements

1) 2)
IEC 61158-5-2 - Industrial communication networks - EN 61158-5-2 2008
Fieldbus specifications -
Part 5-2: Application layer service definition -
Type 2 elements
1) 2)
IEC 61158-6-2 - Industrial communication networks - EN 61158-6-2 2008
Fieldbus specifications -
Part 6-2: Application layer protocol
specification - Type 2 elements

1) 2)
IEC 61326-3-1 - Electrical equipment for measurement, EN 61326-3-1 2008
control and laboratory use -
EMC requirements -
Part 3-1: Immunity requirements for safety-
related systems and for equipment intended to
perform safety-related functions (functional
safety) - General industrial applications

1) 2)
IEC 61326-3-2 - Electrical equipment for measurement, EN 61326-3-2 2008
control and laboratory use -
EMC requirements -
Part 3-2: Immunity requirements for safety-
related systems and for equipment intended to
perform safety-related functions (functional
safety) - Industrial applications with specified
electromagnetic environment
1)
Undated reference.
2)
Valid edition at date of issue.

- 5 - EN 61784-3-2:2008
Publication Year Title EN/HD Year

IEC 61508 Series Functional safety of EN 61508 Series
electrical/electronic/programmable electronic
safety-related systems
1) 2)
IEC 61784-1 - Industrial communication networks - Profiles - EN 61784-1 2008
Part 1: Fieldbus profiles
1) 2)
IEC 61784-2 - Industrial communication networks - Profiles - EN 61784-2 2008
Part 2: Additional fieldbus profiles for real-time
networks based on ISO/IEC 8802-3

1) 2)
IEC 61784-3 - Industrial communication networks - Profiles - EN 61784-3 2008
Part 3: Functional safety fieldbuses - General
rules and profile definitions
1) 2)
IEC 61784-5-2 - Industrial communication networks - Profiles - EN 61784-5-2 2008
Part 5-2: Installation of fieldbuses - Installation
profiles for CPF 2
1) 2)
IEC 61918 (mod) - Industrial communication networks - EN 61918 2008
Installation of communication networks in
industrial premises
1)
IEC 62026-3 - Low-voltage switchgear and controlgear - - -
Controller-device interfaces (CDIs) -
Part 3: DeviceNet
1)
ISO 15745-2 - Industrial automation systems and - -
integration - Open systems application
integration framework -
Part 2: Reference description for ISO 11898
based control systems
1)
ISO 15745-3 - Industrial automation systems and - -
integration - Open systems application
integration framework -
Part 3: Reference description for IEC 61158
based control systems
1)
ISO 15745-4 - Industrial automation systems and - -
integration - Open systems application
integration framework -
Part 4: Reference description for
Ethernet-based control systems

IEC 61784-3-2
Edition 1.0 2007-12
INTERNATIONAL
STANDARD
Industrial communication networks – Profiles –
Part 3-2: Functional safety fieldbuses – Additional specifications for CPF 2

INTERNATIONAL
ELECTROTECHNICAL
COMMISSION
PRICE CODE
XK
ICS 35.100.05 25.040.40 ISBN 2-8318-9399-2

– 2 – 61784-3-2 © IEC:2007(E)
CONTENTS
FOREWORD.11
INTRODUCTION.13
1 Scope.17
2 Normative references .17
3 Terms, definitions, symbols, abbreviated terms and conventions .18
3.1 Terms and definitions .18
3.1.1 Common terms and definitions .18
3.1.2 CPF 2: Additional terms and definitions .22
3.2 Symbols and abbreviated terms.23
3.2.1 Common symbols and abbreviated terms .23
3.2.2 CPF 2: Additional symbols and abbreviated terms .23
3.3 Conventions .24
4 Overview of FSCP 2/1 (CIP Safety™).24
4.1 General .24
4.2 FSCP 2/1 .24
5 General .25
5.1 External documents providing specifications for the profile.25
5.2 Safety functional requirements .26
5.3 Safety measures .26
5.4 Safety communication layer structure .27
5.5 Relationships with FAL (and DLL, PhL) .27
5.5.1 General .27
5.5.2 Data types .27
6 Safety communication layer services .28
6.1 Introduction .28
6.2 Connection object .28
6.2.1 General .28
6.2.2 Class attribute extensions .28
6.2.3 Service extensions .29
6.2.4 Explicit message response format for SafetyOpen and SafetyClose .29
6.3 Connection Manager object .30
6.3.1 General .30
6.3.2 ForwardOpen for safety .30
6.3.3 Safety network segment .32
6.3.4 Originator rules for calculating the connection parameter CRC .34
6.3.5 SafetyOpen processing flowcharts.34
6.3.6 Checks required by Multipoint producers with existing connections .37
6.3.7 Electronic key usage for safety.37
6.3.8 RPI vs. API in safety connections .37
6.3.9 Application path construction for safety .37
6.3.10 Safety Validator connection types.39
6.3.11 Application reply data in a successful SafetyOpen response.40
6.3.12 Unsuccessful SafetyOpen response .41
6.3.13 ForwardClose for safety.44
6.4 Identity object.44
6.4.1 General .44

61784-3-2 © IEC:2007(E) – 3 –
6.4.2 Changes to common services .44
6.5 Link objects .45
6.5.1 DeviceNet object changes .45
6.5.2 TCP/IP Interface object changes .45
6.6 Safety Supervisor object.46
6.6.1 General .46
6.6.2 Safety Supervisor class attributes.46
6.6.3 Subclasses.47
6.6.4 Safety Supervisor instance attributes.47
6.6.5 Semantics .50
6.6.6 Subclasses.56
6.6.7 Safety Supervisor common services .56
6.6.8 Safety Supervisor behavior.67
6.7 Safety Validator object .74
6.7.1 General .74
6.7.2 Class attributes .74
6.7.3 Instance attributes .75
6.7.4 Class services .81
6.7.5 Instance services.81
6.7.6 Object behavior .82
6.8 Connection Configuration Object .85
6.8.1 General .85
6.8.2 Class attribute extensions .85
6.8.3 Instance attributes, additions and extensions. .85
6.8.4 Instance attribute semantics extensions or restrictions for safety.87
6.8.5 Special Safety Related Parameters – (Attribute 13) .92
6.8.6 Object-specific services.96
6.8.7 Common service extensions for safety.96
6.8.8 Object behavior .98
7 Safety communication layer protocol .99
7.1 Safety PDU format .99
7.1.1 Safety PDU encoding .99
7.1.2 Safety CRC .109
7.2 Communication protocol behavior.110
7.2.1 Sequence of safety checks .110
7.2.2 Connection termination. 110
7.2.3 Cross checking error .111
7.3 Time stamp operation.111
7.4 Protocol sequence diagrams .112
7.4.1 General .112
7.4.2 Normal safety transmission.112
7.4.3 Lost, corrupted and delayed message transmission. 113
7.4.4 Lost, corrupted or delayed message transmission with production
repeated.116
7.4.5 Point-to-point ping .118
7.4.6 Multipoint ping on CP 2/3 Safety.119
7.4.7 Multipoint ping on CP 2/2 safety networks .120
7.4.8 Multipoint ping – retry with success .121
7.4.9 Multipoint ping – retry with timeout .122

– 4 – 61784-3-2 © IEC:2007(E)
7.5 Safety protocol definition .123
7.5.1 General .123
7.5.2 High level view of a safety device .123
7.5.3 Safety Validator object .124
7.5.4 Relationship between SafetyValidatorServer and
SafetyValidatorClient .124
7.5.5 SafetyValidatorClient function definition . 125
7.5.6 SafetyValidatorServer function definition . 133
7.6 Safety message and protocol data specifications. 143
7.6.1 Mode octet .143
7.6.2 Time Stamp Section .144
7.6.3 Time Coordination Message .144
7.6.4 Time correction message.145
7.6.5 Safety data production.145
7.6.6 Producer dynamic variables.152
7.6.7 Producer per consumer dynamic variables . 154
7.6.8 Consumer data variables .156
7.6.9 Consumer input static variables. 158
7.6.10 Consumer dynamic variables .158
8 Safety communication layer management.160
8.1 Overview .160
8.2 Definition of the measures used during connection establishment . 161
8.3 Originator-Target relationship validation . 164
8.4 Detection of mis-routed connection requests .165
8.5 SafetyOpen processing .165
8.6 Ownership management.166
8.7 Bridging different physical layers.167
8.8 Safety connection establishment .168
8.8.1 Overview .168
8.8.2 Basic facts for connection establishment . 168
8.8.3 Configuring safety connections.169
8.8.4 Network time expectation multiplier . 170
8.8.5 Establishing connections .172
8.8.6 Recommendations for consumer number allocation . 174
8.8.7 Recommendations for connection establishment . 175
8.8.8 Ownership establishment.175
8.8.9 Ownership use cases .176
8.8.10 PID/CID usage and establishment .179
8.8.11 Proper PID/CID usage in multipoint and point-to-point connections .179
8.8.12 Network supported services.181
8.8.13 FSCP 2/1 Safety device type .182
8.9 Safety configuration process .186
8.9.1 Introduction to safety configuration . 186
8.9.2 Configuration goals .186
8.9.3 Configuration overview .187
8.9.4 User configuration guidelines . 188
8.9.5 Configuration process SIL3 justification .189
8.9.6 Device functions for tool configuration .190
8.9.7 Password security .190

61784-3-2 © IEC:2007(E) – 5 –
8.9.8 SNCT interface services .190
8.9.9 Configuration lock.190
8.9.10 Effect of configuration lock on device behavior . 191
8.9.11 Configuration ownership .192
8.9.12 Configuration mode .192
8.9.13 Measures used to ensure integrity of configuration process .192
8.9.14 Download process .194
8.9.15 Verification process .197
8.9.16 Verification process .200
8.9.17 Configuration error analysis.201
8.10 Electronic Data Sheets extensions for safety.204
8.10.1 General rules for EDS based safety devices . 204
8.10.2 EDS extensions for safety .205
9 System requirements.209
9.1 Indicators and switches .209
9.1.1 General indicator requirements.209
9.1.2 LED indications for setting the device UNID.209
9.1.3 Module Status LED.210
9.1.4 Indicator warning .210
9.1.5 Network Status LED .210
9.1.6 MACID determination .212
9.1.7 Reset switch.213
9.2 Installation guidelines.214
9.3 Safety function response time .214
9.3.1 Overview .214
9.3.2 Network time expectation .214
9.3.3 Equations for calculating network reaction times . 215
9.4 Duration of demands .217
9.5 Constraints for calculation of system characteristics. 217
9.5.1 Number of nodes .217
9.5.2 Network PFH .217
9.5.3 Bit Error Rate (BER) .219
9.6 Maintenance.220
9.7 Safety manual .220
10 Certification.220
Annex A (informative) Additional information for functional safety communication
profiles of CPF 2 .221
A.1 Hash function example code.221
Bibliography.233

Table 1 – Communications errors and detection measures matrix.26
Table 2 – New class attributes .28
Table 3 – Service extensions .29
Table 4 – SafetyOpen and SafetyClose response format .29
Table 5 – Safety network segment identifier.32
Table 6 – Safety network segment definition .32
Table 7 – Safety network segment router format .34

– 6 – 61784-3-2 © IEC:2007(E)
Table 8 – Multipoint producer parameter evaluation rules .37
Table 9 – ForwardOpen setting options for safety connections.39
Table 10 – Network connection parameters for safety connections .40
Table 11 – CP 2/3 Safety target application reply (size: 10 octets).41
Table 12 – SafetyOpen target application reply (size: 16 octets) .41
Table 13 – New and extended error codes for safety .42
Table 14 – SafetyOpen error event guidance table.43
Table 15 – Identity object common service changes .44
Table 16 – New DeviceNet object instance attribute .45
Table 17 – New TCP/IP Interface object Instance Attribute .45
Table 18 – Safety Supervisor class attributes .46
Table 19 – Safety Supervisor instance attributes .47
Table 20 – Device status attribute state values .51
Table 21 – Exception status attribute format .51
Table 22 – Common exception detail attribute values .52
Table 23 – Exception detail format summary.53
Table 24 – Summary of device behavior for various CFUNID values .55
Table 25 – Safety Supervisor common services .57
Table 26 – Safety Supervisor object specific services .57
Table 27 – Configure_Request message structure .59
Table 28 – Validate_Configuration message structure.59
Table 29 – Validate_Configuration success message structure .59
Table 30 – Validate_Configuration error code .60
Table 31 – Validate_Configuration extended codes.60
Table 32 – Set_Password message structure.62
Table 33 – Reset_Password message structure.62
Table 34 – Configuration_Lock/Unlock message structure .63
Table 35 – Mode_Change message structure .63
Table 36 – Safety_Reset message structure .64
Table 37 – Safety Supervisor safety reset types .64
Table 38 – Attribute bit map parameter .64
Table 39 – Reset processing rules for rest types.65
Table 40 – Propose_TUNID service .65
Table 41 – Apply_TUNID service .66
Table 42 – Safety Supervisor events.68
Table 43 – State event matrix for Safety Supervisor.69
Table 44 – Configuration owner control vs. device state.72
Table 45 – State mapping of Safety Supervisor to Identity object .73
Table 46 – Safety Supervisor object event mapping.73
Table 47 – Identity object event mapping .74
Table 48 – Safety Validator class attributes .75
Table 49 – Safety Validator instance attributes .75
Table 50 – Safety Validator state assignments.78

61784-3-2 © IEC:2007(E) – 7 –
Table 51 – Safety Validator type, bit field assignments .78
Table 52 – Multipoint producer SafetyOpen parameter evaluation rules .80
Table 53 – Safety Validator class services .81
Table 54 – Safety Validator instance services.81
Table 55 – Safety Validator Get_Attributes_All service data.82
Table 56 – Safety Validator state event matrix .84
Table 57 – State mapping between Safety Supervisor and Safety Validator objects .85
Table 58 – Connection configuration object class attribute extensions .85
Table 59 – Connection Configuration Object instance attribute additions/extensions.86
Table 60 – Connection flag bit definitions.88
Table 61 – O-to-T connection parameters .89
Table 62 – T-to-O connection parameters .90
Table 63 – Data map formats.91
Table 64 – Data map format 0.92
Table 65 – Data map format 1.92
Table 66 – Target device’s SCCRC values.94
Table 67 – Target device’s SCTS values.95
Table 68 – Time correction connection parameters for multipoint connection .95
Table 69 – Connection Configuration Object-specific services .96
Table 70 – Get_Attributes_All Response service data (added attributes ) .97
Table 71 – Set_Attributes_All Request service data (added attributes) .97
Table 72 – State Mapping between Safety Supervisor and the CCO objects .98
Table 73 – Connection sections and PDU formats.100
Table 74 – Mode octet variables .101
Table 75 – Time Stamp variables.103
Table 76 – Time Coordination message variables .104
Table 77 – Time Correction Message variables.106
Table 78 – CRC polynomials used .109
Table 79 – Connection sections and message formats. 110
Table 80 – Data reception - Link triggered .135
Table 81 – Time_Correction reception - Link triggered . 136
Table 82 – Data reception - Application triggered. 136
Table 83 – Time_Correction reception - Application triggered .136
Table 84 – Consuming application – Safety data monitoring .137
Table 85 – Producer connection status determination . 146
Table 86 – Consuming safety connection status .156
Table 87 – Connection establishment errors and measures to detect errors. 161
Table 88 – SNN Date/Time allocations.162
Table 89 – SNN legal range of time values .162
Table 90 – Safety connection parameters .170
Table 91 – SafetyOpen summary .172
Table 92 – Originator/Target service mapping.183
Table 93 – Unsupported originator/target service types.183

– 8 – 61784-3-2 © IEC:2007(E)
Table 94 – Configuration goals .187
Table 95 – Configuration owner control vs. device state.192
Table 96 – Errors and detection measures.201
Table 97 – Parameter class keywords.206
Table 98 – New Connection Manager section keywords for safety . 206
Table 99 – Connection Manager field usage for safety.207
Table 100 – Connection parameter field settings for safety . 208
Table 101 – LED indications for setting UNID .209
Table 102 – Module Status LED.210
Table 103 – Network status LED states .211
Table 104 – Connection reaction time type – producing/consuming applications . 215

Figure 1 – Relationships of IEC 61784-3 with other standards (machinery) .13
Fi
...