EN IEC 61784-3-3:2021
(Main)Industrial communication networks - Profiles - Part 3-3: Functional safety fieldbuses - Additional specifications for CPF 3
Industrial communication networks - Profiles - Part 3-3: Functional safety fieldbuses - Additional specifications for CPF 3
IEC 61784-3-3:2021 specifies a safety communication layer (services and protocol) based on CPF 3 of IEC 61784-1, IEC 61784-2 (CP 3/1, CP 3/2, CP 3/4, CP 3/5 and CP 3/6) and IEC 61158 Types 3 and 10. It identifies the principles for functional safety communications defined in IEC 61784-3 that are relevant for this safety communication layer. This safety communication layer is intended for implementation in safety devices only. NOTE 1 It does not cover electrical safety and intrinsic safety aspects. Electrical safety relates to hazards such as electrical shock. Intrinsic safety relates to hazards associated with potentially explosive atmospheres. This document defines mechanisms for the transmission of safety-relevant messages among participants within a distributed network using fieldbus technology in accordance with the requirements of IEC 61508 (all parts) for functional safety. These mechanisms may be used in various industrial applications such as process control, manufacturing automation and machinery. This document provides guidelines for both developers and assessors of compliant devices and systems. NOTE 2 The resulting SIL claim of a system depends on the implementation of the selected functional safety communication profile within this system – implementation of a functional safety communication profile according to this document in a standard device is not sufficient to qualify it as a safety device.
Industrielle Kommunikationsnetze - Profile - Teil 3-3: Funktional sichere Übertragung bei Feldbussen - Zusätzliche Festlegungen für die Kommunikationsprofilfamilie 3
Réseaux de communication industriels - Profils - Partie 3-3: Bus de terrain de sécurité fonctionnelle - Spécifications supplémentaires pour CPF 3
L'IEC 61784-3-3:2021 spécifie une couche de communication de sécurité (services et protocole) qui repose sur la CPF 3 de l'IEC 61784-1 et les Types 3 et 10 de l'IEC 61784-2 (CP 3/1, CP 3/2, CP 3/4, CP 3/5 et CP 3/6) et de l'IEC 61158. Elle identifie les principes applicables aux communications de sécurité fonctionnelle définies dans l'IEC 61784-3, qui correspondent à cette couche de communication de sécurité. Cette couche de communication de sécurité est destinée à être mise en œuvre uniquement sur les appareils de sécurité. NOTE 1 Elle ne couvre pas les aspects relatifs à la sécurité électrique et à la sécurité intrinsèque. La sécurité électrique concerne les dangers tels que les chocs électriques. La sécurité intrinsèque concerne les dangers associés aux atmosphères explosibles. Le présent document définit les mécanismes de transmission des messages relatifs à la sécurité entre les participants d'un réseau réparti, en utilisant la technologie de bus de terrain conformément aux exigences de la série IEC 61508 (toutes les parties) concernant la sécurité fonctionnelle. Ces mécanismes peuvent être utilisés dans différentes applications industrielles, par exemple la commande de processus, l'usinage automatique et les machines. Le présent document fournit des lignes directrices aux développeurs, ainsi qu'aux évaluateurs d'appareils et de systèmes conformes. NOTE 2 La revendication du SIL qui en résulte pour un système dépend de la mise en œuvre du profil de communication de sécurité fonctionnelle retenu au sein du système (la mise en œuvre d'un profil de communication de sécurité fonctionnelle conforme au présent document dans un appareil normal ne suffit pas à le qualifier d'appareil de sécurité).
Industrijska komunikacijska omrežja - Profili - 3-3. del: Funkciijska varnost procesnih vodil - Dodatne specifikacije za CPF 3
General Information
- Status
- Published
- Publication Date
- 17-Jun-2021
- Technical Committee
- CLC/TC 65X - Industrial-process measurement, control and automation
- Drafting Committee
- IEC/SC 65C - IEC_SC_65C
- Current Stage
- 6060 - Document made available - Publishing
- Start Date
- 18-Jun-2021
- Completion Date
- 18-Jun-2021
Relations
- Effective Date
- 22-Jun-2021
Overview
EN IEC 61784-3-3:2021 - Industrial communication networks - Profiles - Part 3-3 - specifies a safety communication layer (services and protocol) for functional safety fieldbuses based on CPF 3. The document defines additional specifications that apply to CPF 3 profiles (including IEC 61158 Types 3 and 10) and identifies the principles from IEC 61784-3 relevant to this safety layer. It is intended for implementation in safety devices only and provides mechanisms for transmitting safety‑relevant messages in distributed fieldbus networks in accordance with IEC 61508 requirements.
Note: the standard does not cover electrical or intrinsic safety; it focuses on communication-layer functional safety.
Key Topics and Technical Requirements
- Safety communication layer services and protocol: Defines F‑Host and F‑Device driver services, safety PDU structures, and management functions required for safe data exchange.
- Safety PDU format and signatures: Specifies safety PDU structure, status/control bytes, MonitoringNumber mechanisms, and CRC2 signature concepts to detect corruption and tampering.
- Timing and monitoring: Requirements for monitoring safety times, sequence checking, and detection of unacceptable delays, loss, insertion, repetition, masquerade and other communication faults.
- Driver behaviour and state machines: F‑Host and F‑Device state diagrams, startup and restart procedures, runtime parameter changes and diagnostics.
- Diagnosis and alarm generation: Guidelines for safety alarms, layer-level diagnostics and reporting for compliance assessment.
- Safety management and parameters: F‑parameter definitions, management of safety configuration and implications for SIL claims.
- Scope limits and SIL considerations: Clarifies that the achievable Safety Integrity Level (SIL) depends on how the profile is implemented within a complete system - implementing this profile in a standard device alone does not make it a certified safety device.
Practical Applications
- Process control (chemical, oil & gas)
- Manufacturing automation and machinery safety systems
- Safety instrumented systems (SIS) and distributed safety I/O
- Fieldbus-based safety communications in industrial networks
This standard is commonly applied when integrating safety devices over CPF 3 fieldbuses (for example PROFIsafe™ implementations) to ensure deterministic, certified-capable safety communication.
Who Should Use This Standard
- Device and firmware developers for safety I/O modules and controllers
- System integrators and control engineers implementing distributed safety systems
- Functional safety assessors and certification bodies evaluating SIL claims
- Network architects designing fieldbus safety segments
Related Standards
Includes normative links and alignment with: IEC 61784-1/2/3, IEC 61158 (Types 3 & 10), IEC 61508, IEC 61511, ISO 13849, IEC 62443 and EMC/installation standards referenced in the profile.
Keywords: EN IEC 61784-3-3:2021, functional safety fieldbuses, CPF 3, safety communication layer, IEC 61508, PROFIsafe, safety PDU, SIL, fieldbus safety.
Frequently Asked Questions
EN IEC 61784-3-3:2021 is a standard published by CLC. Its full title is "Industrial communication networks - Profiles - Part 3-3: Functional safety fieldbuses - Additional specifications for CPF 3". This standard covers: IEC 61784-3-3:2021 specifies a safety communication layer (services and protocol) based on CPF 3 of IEC 61784-1, IEC 61784-2 (CP 3/1, CP 3/2, CP 3/4, CP 3/5 and CP 3/6) and IEC 61158 Types 3 and 10. It identifies the principles for functional safety communications defined in IEC 61784-3 that are relevant for this safety communication layer. This safety communication layer is intended for implementation in safety devices only. NOTE 1 It does not cover electrical safety and intrinsic safety aspects. Electrical safety relates to hazards such as electrical shock. Intrinsic safety relates to hazards associated with potentially explosive atmospheres. This document defines mechanisms for the transmission of safety-relevant messages among participants within a distributed network using fieldbus technology in accordance with the requirements of IEC 61508 (all parts) for functional safety. These mechanisms may be used in various industrial applications such as process control, manufacturing automation and machinery. This document provides guidelines for both developers and assessors of compliant devices and systems. NOTE 2 The resulting SIL claim of a system depends on the implementation of the selected functional safety communication profile within this system – implementation of a functional safety communication profile according to this document in a standard device is not sufficient to qualify it as a safety device.
IEC 61784-3-3:2021 specifies a safety communication layer (services and protocol) based on CPF 3 of IEC 61784-1, IEC 61784-2 (CP 3/1, CP 3/2, CP 3/4, CP 3/5 and CP 3/6) and IEC 61158 Types 3 and 10. It identifies the principles for functional safety communications defined in IEC 61784-3 that are relevant for this safety communication layer. This safety communication layer is intended for implementation in safety devices only. NOTE 1 It does not cover electrical safety and intrinsic safety aspects. Electrical safety relates to hazards such as electrical shock. Intrinsic safety relates to hazards associated with potentially explosive atmospheres. This document defines mechanisms for the transmission of safety-relevant messages among participants within a distributed network using fieldbus technology in accordance with the requirements of IEC 61508 (all parts) for functional safety. These mechanisms may be used in various industrial applications such as process control, manufacturing automation and machinery. This document provides guidelines for both developers and assessors of compliant devices and systems. NOTE 2 The resulting SIL claim of a system depends on the implementation of the selected functional safety communication profile within this system – implementation of a functional safety communication profile according to this document in a standard device is not sufficient to qualify it as a safety device.
EN IEC 61784-3-3:2021 is classified under the following ICS (International Classification for Standards) categories: 25.040.40 - Industrial process measurement and control; 35.100.05 - Multilayer applications. The ICS classification helps identify the subject area and facilitates finding related standards.
EN IEC 61784-3-3:2021 has the following relationships with other standards: It is inter standard links to EN 61784-3-3:2017. Understanding these relationships helps ensure you are using the most current and applicable version of the standard.
EN IEC 61784-3-3:2021 is available in PDF format for immediate download after purchase. The document can be added to your cart and obtained through the secure checkout process. Digital delivery ensures instant access to the complete standard document.
Standards Content (Sample)
SLOVENSKI STANDARD
01-oktober-2021
Nadomešča:
SIST EN 61784-3-3:2018
Industrijska komunikacijska omrežja - Profili - 3-3. del: Funkciijska varnost
procesnih vodil - Dodatne specifikacije za CPF 3
Industrial communication networks - Profiles - Part 3-3: Functional safety fieldbuses -
Additional specifications for CPF 3
Industrielle Kommunikationsnetze - Profile - Teil 3-3: Funktional sichere Übertragung bei
Feldbussen - Zusätzliche Festlegungen für die Kommunikationsprofilfamilie 3
Réseaux de communication industriels - Profils - Partie 3-3: Bus de terrain de sécurité
fonctionnelle - Spécifications supplémentaires pour CPF 3
Ta slovenski standard je istoveten z: EN IEC 61784-3-3:2021
ICS:
25.040.40 Merjenje in krmiljenje Industrial process
industrijskih postopkov measurement and control
35.100.05 Večslojne uporabniške Multilayer applications
rešitve
2003-01.Slovenski inštitut za standardizacijo. Razmnoževanje celote ali delov tega standarda ni dovoljeno.
EUROPEAN STANDARD EN IEC 61784-3-3
NORME EUROPÉENNE
EUROPÄISCHE NORM
June 2021
ICS 25.040.40; 35.100.05 Supersedes EN 61784-3-3:2017 and all of its
amendments and corrigenda (if any)
English Version
Industrial communication networks - Profiles - Part 3-3:
Functional safety fieldbuses - Additional specifications for CPF 3
(IEC 61784-3-3:2021)
Réseaux de communication industriels - Profils - Partie 3-3: Industrielle Kommunikationsnetze - Profile - Teil 3-3:
Bus de terrain de sécurité fonctionnelle - Spécifications Funktional sichere Übertragung bei Feldbussen -
supplémentaires pour CPF 3 Zusätzliche Festlegungen für die
(IEC 61784-3-3:2021) Kommunikationsprofilfamilie 3
(IEC 61784-3-3:2021)
This European Standard was approved by CENELEC on 2021-06-09. CENELEC members are bound to comply with the CEN/CENELEC
Internal Regulations which stipulate the conditions for giving this European Standard the status of a national standard without any alteration.
Up-to-date lists and bibliographical references concerning such national standards may be obtained on application to the CEN-CENELEC
Management Centre or to any CENELEC member.
This European Standard exists in three official versions (English, French, German). A version in any other language made by translation
under the responsibility of a CENELEC member into its own language and notified to the CEN-CENELEC Management Centre has the
same status as the official versions.
CENELEC members are the national electrotechnical committees of Austria, Belgium, Bulgaria, Croatia, Cyprus, the Czech Republic,
Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, the
Netherlands, Norway, Poland, Portugal, Republic of North Macedonia, Romania, Serbia, Slovakia, Slovenia, Spain, Sweden, Switzerland,
Turkey and the United Kingdom.
European Committee for Electrotechnical Standardization
Comité Européen de Normalisation Electrotechnique
Europäisches Komitee für Elektrotechnische Normung
CEN-CENELEC Management Centre: Rue de la Science 23, B-1040 Brussels
© 2021 CENELEC All rights of exploitation in any form and by any means reserved worldwide for CENELEC Members.
Ref. No. EN IEC 61784-3-3:2021 E
European foreword
The text of document 65C/1083/FDIS, future edition 4 of IEC 61784-3-3, prepared by SC 65C
"Industrial networks" of IEC/TC 65 "Industrial-process measurement, control and automation" was
submitted to the IEC-CENELEC parallel vote and approved by CENELEC as EN IEC 61784-3-3:2021.
The following dates are fixed:
• latest date by which the document has to be implemented at national (dop) 2022-03-09
level by publication of an identical national standard or by endorsement
• latest date by which the national standards conflicting with the (dow) 2024-06-09
document have to be withdrawn
This document supersedes EN 61784-3-3:2017 and all of its amendments and corrigenda (if any).
Attention is drawn to the possibility that some of the elements of this document may be the subject of
patent rights. CENELEC shall not be held responsible for identifying any or all such patent rights.
Endorsement notice
The text of the International Standard IEC 61784-3-3:2021 was approved by CENELEC as a
European Standard without any modification.
In the official version, for Bibliography, the following notes have to be added for the standards
indicated:
IEC 60870-5-1 NOTE Harmonized as EN 60870-5-1
IEC 61000-1-2 NOTE Harmonized as EN 61000-1-2
IEC 61131-6 NOTE Harmonized as EN 61131-6
IEC 61158 (series) NOTE Harmonized as EN 61158 (series)
IEC 61496 (series) NOTE Harmonized as EN IEC 61496 (series)
IEC 61508-1:2010 NOTE Harmonized as EN 61508-1:2010 (not modified)
IEC 61508-4:2010 NOTE Harmonized as EN 61508-4:2010 (not modified)
IEC 61508-5:2010 NOTE Harmonized as EN 61508-5:2010 (not modified)
IEC 61508-6:2010 NOTE Harmonized as EN 61508-6:2010 (not modified)
IEC 61158-3-3 NOTE Harmonized as EN 61158-3-3
IEC 61158-4-3 NOTE Harmonized as EN IEC 61158-4-3
IEC 61158-5 (series) NOTE Harmonized as EN 61158-5 (series)
IEC 61784-3 (series) NOTE Harmonized as EN 61784-3 (series)
IEC 61784-5 (series) NOTE Harmonized as EN IEC 61784-5 (series)
IEC 61800-5-2 NOTE Harmonized as EN 61800-5-2
IEC 61804 (series) NOTE Harmonized as EN IEC 61804 (series)
ISO 10218-1 NOTE Harmonized as EN ISO 10218-1
ISO 13849 (series) NOTE Harmonized as EN ISO 13849 (series)
Annex ZA
(normative)
Normative references to international publications
with their corresponding European publications
The following documents are referred to in the text in such a way that some or all of their content
constitutes requirements of this document. For dated references, only the edition cited applies. For
undated references, the latest edition of the referenced document (including any amendments)
applies.
NOTE 1 Where an International Publication has been modified by common modifications, indicated by (mod), the
relevant EN/HD applies.
NOTE 2 Up-to-date information on the latest versions of the European Standards listed in this annex is available
here: www.cenelec.eu.
Publication Year Title EN/HD Year
IEC 60204-1 - Safety of machinery - Electrical equipment of EN 60204-1 -
machines - Part 1: General requirements
IEC 61000-6-7 - Electromagnetic compatibility (EMC) - Part 6-7: EN 61000-6-7 -
Generic standards - Immunity requirements for
equipment intended to perform functions in a
safety-related system (functional safety) in
industrial locations
IEC 61010-2-201 2017 Safety requirements for electrical equipment EN IEC 61010-2-201 2018
for measurement, control, and laboratory use -
Part 2-201: Particular requirements for control
equipment
IEC 61158-2 - Industrial communication networks - Fieldbus EN 61158-2 -
specifications - Part 2: Physical layer
specification and service definition
IEC 61158-5-3 - Industrial communication networks - Fieldbus EN 61158-5-3 -
specifications - Part 5-3: Application layer
service definition - Type 3 elements
IEC 61158-5-10 - Industrial communication networks - Fieldbus EN IEC 61158-5-10 -
specifications - Part 5-10: Application layer
service definition - Type 10 elements
IEC 61158-6-3 - Industrial communication networks - Fieldbus EN IEC 61158-6-3 -
specifications - Part 6-3: Application layer
protocol specification - Type 3 elements
IEC 61158-6-10 - Industrial communication networks - Fieldbus EN IEC 61158-6-10 -
specifications - Part 6-10: Application layer
protocol specification - Type 10 elements
IEC 61326-3-1 - Electrical equipment for measurement, control EN 61326-3-1 -
and laboratory use - EMC requirements - Part
3-1: Immunity requirements for safety-related
systems and for equipment intended to
perform safety-related functions (functional
safety) – General industrial applications
Publication Year Title EN/HD Year
IEC 61326-3-2 - Electrical equipment for measurement, control EN IEC 61326-3-2 -
and laboratory use - EMC requirements - Part
3-2: Immunity requirements for safety-related
systems and for equipment intended to
perform safety-related functions (functional
safety) - Industrial applications with specified
electromagnetic environment
IEC 61508 series Functional safety of EN 61508 series
electrical/electronic/programmable electronic
safety-related systems
IEC 61508-2 - Functional safety of EN 61508-2 -
electrical/electronic/programmable electronic
safety-related systems - Part 2: Requirements
for electrical/electronic/programmable
electronic safety-related systems (see
Functional Safety and IEC 61508
IEC 61511 series Functional safety - Safety instrumented EN 61511 series
systems for the process industry sector
IEC 61784-1 - Industrial communication networks - Profiles EN IEC 61784-1 -
Part 1: Fieldbus profiles
IEC 61784-2 - Industrial communication networks - Profiles - EN IEC 61784-2 -
Part 2: Additional fieldbus profiles for real-time
networks based on ISO/IEC/IEEE 8802-3
IEC 61784-3 2021 Industrial communication networks - Profiles - EN IEC 61784-3 2021
Part 3: Functional safety fieldbuses - General
rules and profile definitions
IEC 61784-5-3 - Industrial communication networks – Profiles – EN IEC 61784-5-3 -
Part 5-3: Installation of fieldbuses – Installation
profiles for CPF 3
IEC 61918 2018 Industrial communication networks - EN IEC 61918 2018
Installation of communication networks in
industrial premises
IEC 62061 - Safety of machinery - Functional safety of EN IEC 62061 -
safety-related control systems
IEC 62280 2014 Railway applications - Communication, - -
signalling and processing systems - Safety
related communication in transmission
systems
IEC 62443 series Security for industrial automation and control EN IEC 62443 series
systems
ISO 13849-1 2015 Safety of machinery - Safety-related parts of EN ISO 13849-1 2015
control systems - Part 1: General principles for
design
ISO 13849-2 2012 Safety of machinery - Safety-related parts of EN ISO 13849-2 2012
control systems - Part 2: Validation
IEC 61784-3-3 ®
Edition 4.0 2021-05
INTERNATIONAL
STANDARD
NORME
INTERNATIONALE
colour
inside
Industrial communication networks – Profiles –
Part 3-3: Functional safety fieldbuses – Additional specifications for CPF 3
Réseaux de communication industriels – Profils –
Partie 3-3: Bus de terrain de sécurité fonctionnelle – Spécifications
supplémentaires pour CPF 3
INTERNATIONAL
ELECTROTECHNICAL
COMMISSION
COMMISSION
ELECTROTECHNIQUE
INTERNATIONALE
ICS 25.040.40; 35.100.05 ISBN 978-2-8322-9749-0
– 2 – IEC 61784-3-3:2021 IEC 2021
CONTENTS
FOREWORD . 9
0 Introduction . 11
0.1 General . 11
0.2 Patent declaration . 12
1 Scope . 14
2 Normative references . 14
3 Terms, definitions, symbols, abbreviated terms and conventions . 16
3.1 Terms and definitions . 16
3.1.1 Common terms and definitions . 16
3.1.2 CPF 3: Additional terms and definitions . 22
3.2 Symbols and abbreviated terms . 27
3.2.1 Common symbols and abbreviated terms . 27
3.2.2 CPF 3: Additional symbols and abbreviated terms . 28
3.3 Conventions . 29
4 Overview of FSCP 3/1 (PROFIsafe™). 29
5 General . 32
5.1 External documents providing specifications for the profile . 32
5.2 Safety functional requirements . 32
5.3 Safety measures . 32
5.4 Safety communication layer structure . 33
5.4.1 Principle of FSCP 3/1 safety communications . 33
5.4.2 CPF 3 communication structures . 35
5.5 Relationships with FAL (and DLL, PhL) . 37
5.5.1 Device model . 37
5.5.2 Application and communication relationships . 38
5.5.3 Data types . 38
6 Safety communication layer services . 39
6.1 F-Host driver services . 39
6.2 F-Device driver services . 43
6.3 Diagnosis . 45
6.3.1 Safety alarm generation . 45
6.3.2 F-(Sub)Module safety layer diagnosis . 45
7 Safety communication layer protocol . 46
7.1 Safety PDU format . 46
7.1.1 Safety PDU structure . 46
7.1.2 Safety IO data . 47
7.1.3 Status and Control Byte . 47
7.1.4 (Virtual) MonitoringNumber . 49
7.1.5 (Virtual) MNR mechanism (F_CRC_Seed=0) . 50
7.1.6 (Virtual) MNR mechanism (F_CRC_Seed=1) . 50
7.1.7 CRC2 Signature (F_CRC_Seed=0) . 52
7.1.8 CRC2 Signature (F_CRC_Seed=1) . 53
7.1.9 Non-safety IO data . 54
7.2 FSCP 3/1 behavior . 54
7.2.1 General . 54
IEC 61784-3-3:2021 IEC 2021 – 3 –
7.2.2 F-Host driver state diagram . 55
7.2.3 F-Device driver state diagram . 58
7.2.4 F-Device driver restart . 62
7.2.5 Sequence diagrams . 62
7.2.6 Timing diagram for a MonitoringNumber reset . 69
7.2.7 Monitoring of safety times . 69
7.3 Reaction in the event of a malfunction . 72
7.3.1 Corruption of safety data . 72
7.3.2 Unintended repetition . 72
7.3.3 Incorrect sequence . 73
7.3.4 Loss . 73
7.3.5 Unacceptable delay . 73
7.3.6 Insertion . 73
7.3.7 Masquerade. 73
7.3.8 Addressing . 73
7.3.9 Out-of-sequence . 74
7.3.10 Loop-back. 74
7.3.11 Network boundaries and router . 74
7.4 F-Startup and parameter change at runtime . 75
7.4.1 Standard startup procedure . 75
8 Safety communication layer management . 75
8.1 F-Parameter. 75
8.1.1 Summary . 75
8.1.2 F_Source/Destination_Address (Codename) . 76
8.1.3 F_WD_Time (F-Watchdog time) . 77
8.1.4 F_WD_Time_2 (secondary F-Watchdog time) . 77
8.1.5 F_Prm_Flag1 (Parameters for the safety layer management) . 77
8.1.6 F_Prm_Flag2 (Parameters for the safety layer management) . 80
8.1.7 F_iPar_CRC (value of iPar_CRC across iParameters) . 81
8.1.8 F_Par_CRC calculation (across F-Parameters) . 81
8.1.9 Structure of the F-Parameter record data object . 82
8.2 iParameter and iPar_CRC . 82
8.3 Safety parameterization . 83
8.3.1 Objectives . 83
8.3.2 GSDL and GSDML safety extensions . 84
8.3.3 Securing safety parameters and GSD data . 86
8.4 Safety configuration . 90
8.4.1 Order of IO data types . 90
8.4.2 Securing the safety IO data description . 90
8.4.3 DataItem data type section examples . 91
8.5 Data type information usage . 95
8.5.1 F-Host Channel driver . 95
8.5.2 Rules for standard F-Host Channel drivers . 96
8.5.3 Recommendations for the use of F-Host Channel drivers . 97
8.6 Safety parameter assignment mechanisms . 98
8.6.1 F-Parameter assignment . 98
8.6.2 General iParameter assignment . 98
8.6.3 System integration requirements for iParameterization tools . 98
8.6.4 iPar-Server . 100
– 4 – IEC 61784-3-3:2021 IEC 2021
9 System requirements . 111
9.1 Indicators and switches . 111
9.2 Installation guidelines . 111
9.3 Safety function response time . 111
9.3.1 Model . 111
9.3.2 Calculation and optimization . 113
9.3.3 Adjustment of watchdog times for FSCP 3/1 . 115
9.3.4 Engineering tool support . 116
9.3.5 Retries (repetition of messages) . 116
9.4 Duration of demands . 117
9.5 Constraints for the calculation of system characteristics . 117
9.5.1 Probabilistic considerations . 117
9.5.2 Safety related assumptions . 119
9.5.3 Non safety related constraints (availability) . 120
9.6 Maintenance . 120
9.6.1 F-(Sub)Module commissioning / replacement . 120
9.6.2 Identification and maintenance functions . 120
9.7 Safety manual . 121
9.8 Wireless transmission channels . 122
9.8.1 Black channel approach . 122
9.8.2 Availability . 122
9.8.3 Security measures . 122
9.8.4 Stationary and mobile applications . 122
9.9 Relationship between functional safety and security . 123
9.10 Conformance classes . 123
10 Assessment . 125
10.1 Safety policy . 125
10.2 Obligations . 125
Annex A (informative) Additional information for functional safety communication
profiles of CPF 3 . 126
A.1 Hash function calculation . 126
A.2 Example values for MonitoringNumbers (MNR) . 130
Annex B (informative) Information for assessment of the functional safety
communication profiles of CPF 3. 131
Annex C (normative) Optional features . 132
C.1 Reaction on Device_Fault in F-Host . 132
C.1.1 Situation . 132
C.1.2 Documentation for the user . 132
C.1.3 Optional extensions of F-Host driver Transition Table . 132
C.1.4 Recommendation for the case without Extensions of F-Host driver
Transitions . 135
C.2 Optional extensions of F-Host driver to "Disable F-(Sub)Module" . 135
C.3 Combination of "Disable F-(Sub)Module" and "reaction on Device_Fault" . 139
C.4 FSCP 3/1 and PROFIenergy . 141
C.4.1 Use of FSCP 3/1-Devices with PROFIenergy . 141
C.4.2 Sequence in case of PROFIenergy power off on . 141
C.5 Requirement multiple F-Hosts communicate with single F-(Sub)Module . 141
C.6 FSCP 3/1 PiR . 142
Bibliography . 143
IEC 61784-3-3:2021 IEC 2021 – 5 –
Figure 1 – Relationships of IEC 61784-3 with other standards (machinery) . 11
Figure 2 – Relationships of IEC 61784-3 with other standards (process) . 12
Figure 3 – Basic communication preconditions for FSCP 3/1. 30
Figure 4 – Structure of an FSCP 3/1 safety PDU . 30
Figure 5 – Safety communication on CPF 3 . 31
Figure 6 – Standard CPF 3 transmission system . 34
Figure 7 – Safety layer architecture . 35
Figure 8 – Basic communication layers . 35
Figure 9 – Crossing network borders with routers . 36
Figure 10 – Complete safety transmission paths . 37
Figure 11 – IO Device model . 38
Figure 12 – FSCP 3/1 communication structure . 39
Figure 13 – F application interface of F-Host driver instances . 40
Figure 14 – Motivation for "Channel-related Passivation" . 41
Figure 15 – F-Device driver interfaces . 43
Figure 16 – Safety PDU for CPF 3 . 47
Figure 17 – Status Byte . 47
Figure 18 – Control Byte . 48
Figure 19 – The Toggle Bit function . 49
Figure 20 – MonitoringNumber integration . 50
Figure 21 – F-Host driver CRC2 signature generation (F_CRC_Seed=0) . 52
Figure 22 – Details of the CRC2 signature calculation (F_CRC_Seed=0) . 53
Figure 23 – CRC2 signature calculation (F_CRC_Seed=1) . 53
Figure 24 – Details of the CRC2 signature calculation (F_CRC_Seed=1) . 54
Figure 25 – Safety layer communication relationship . 54
Figure 26 – F-Host driver state diagram . 55
Figure 27 – F-Device driver state diagram . 59
Figure 28 – Interaction F-Host driver / F-Device driver during start-up . 63
Figure 29 – Interaction F-Host driver / F-Device driver during F-Host power off > on . 64
Figure 30 – Interaction F-Host driver / F-Device driver with delayed power on . 65
Figure 31 – Interaction F-Host driver / F-Device driver during power off → on . 66
Figure 32 – Interaction while F-Host driver recognizes CRC error . 67
Figure 33 – Interaction while F-Device driver recognizes CRC error . 68
Figure 34 – Impact of the MNR reset signal . 69
Figure 35 – Monitoring the message transit time F-Host ↔ F-(Sub)Module . 70
Figure 36 – Extended watchdog time on request . 72
Figure 37 – Effect of F_WD_Time_2 . 77
Figure 38 – F_Prm_Flag1 . 78
Figure 39 – F_Check_iPar . 78
Figure 40 – F_SIL . 78
Figure 41 – F_CRC_Length . 79
Figure 42 – F_CRC_Seed . 79
– 6 – IEC 61784-3-3:2021 IEC 2021
Figure 43 – F_Prm_Flag2 . 80
Figure 44 – F_Passivation . 80
Figure 45 – F_Block_ID . 80
Figure 46 – F_Par_Version . 81
Figure 47 – F-Parameter . 82
Figure 48 – iParameter block . 83
Figure 49 – F-Parameter extension within the GSDML specification . 85
Figure 50 – F_Par_CRC signature including iPar_CRC . 86
Figure 51 – F-Host Channel driver as "glue" between F-(Sub)Module and application
program . 96
Figure 52 – Layout example of an F-Host Channel driver . 97
Figure 53 – F-Parameter assignment for F-(Sub)Modules . 98
Figure 54 – System integration of CPD-Tools . 99
Figure 55 – iPar-Server mechanism (commissioning) . 100
Figure 56 – iPar-Server mechanism (for example F-(Sub)Module replacement) . 102
Figure 57 – iPar-Server request coding ("status model") . 103
Figure 58 – Coding of SR_Type . 104
Figure 59 – iPar-Server request coding ("alarm model") . 105
Figure 60 – iPar-Server state diagram . 108
Figure 61 – Example safety function with a critical response time path . 112
Figure 62 – Simplified typical response time model . 112
Figure 63 – Frequency distributions of typical response times of the model . 113
Figure 64 – Context of delay times and watchdog times . 114
Figure 65 – Timing sections forming the FSCP 3/1 F_WD_Time . 115
Figure 66 – Frequency distribution of response times with message retries . 116
Figure 67 – Residual error probabilities for the 24-bit CRC polynomial . 117
Figure 68 – Residual error probabilities for the 32-bit CRC polynomial . 118
Figure 69 – Monitoring of corrupted messages . 119
Figure A.1 – Typical "C" procedure of a cyclic redundancy check . 126
Figure C.1 – F-Host driver application interface with feature Reaction on Device_Fault . 132
Figure C.2 – F-Host driver application interface with feature Disable F-(Sub)Module . 136
Figure C.3 – Timing diagram to use Disable F-(Sub)Module . 136
Table 1 – Deployed measures to master errors . 33
Table 2 – Data types for FSCP 3/1 . 38
Table 3 – F_MessageTrailer for FSCP 3/1 . 38
Table 4 – Safety layer diagnosis messages . 45
Table 5 – Buffer entry on CRC2 error . 46
Table 6 – MonitoringNumber of an F-Host driver SPDU . 50
Table 7 – MonitoringNumber of an F-Device driver SPDU . 50
Table 8 – MonitoringNumber of an F-Host driver SPDU . 51
Table 9 – MonitoringNumber of an F-Device driver SPDU . 51
Table 10 – Definition of terms used in F-Host driver state diagram. 55
IEC 61784-3-3:2021 IEC 2021 – 7 –
Table 11 – F-Host driver states and transitions . 56
Table 12 – Definition of terms used in Figure 27 . 59
Table 13 – F-Device driver states and transitions . 60
Table 14 – SIL monitor times . 71
Table 15 – Safety network boundaries . 75
Table 16 – Codename octet order . 76
Table 17 – Allowed combinations of F_CRC_Seed and F_Passivation . 79
Table 18 – GSDL keywords for F-Parameters and F-IO structures . 84
Table 19 – Algorithm to build CRC0 . 87
Table 20 – GSD example in GSDL notation. 88
Table 21 – GSD example in GSDML notation . 89
Table 22 – Serialized octet stream for the examples . 89
Table 23 – Order of IO data types . 90
Table 24 – IO data structure items . 91
Table 25 – DataItem section for F_IN_OUT_1 . 92
Table 26 – DATA_STRUCTURE_CRC for F_IN_OUT_1 . 92
Table 27 – DataItem section for F_IN_OUT_2 . 93
Table 28 – DATA_STRUCTURE_CRC for F_IN_OUT_2 . 93
Table 29 – DataItem section for F_IN_OUT_5 . 94
Table 30 – DATA_STRUCTURE_CRC for F_IN_OUT_5 . 94
Table 31 – DataItem section for F_IN_OUT_6 . 95
Table 32 – DATA_STRUCTURE_CRC for F_IN_OUT_6 . 95
Table 33 – Sample F-Host Channel drivers . 96
Table 34 – Requirements for iParameterization . 99
Table 35 – Specifier for the iPar-Server Request . 104
Table 36 – Structure of the Read_RES_PDU ("read record") . 106
Table 37 – Structure of the Write_REQ_PDU ("write record") . 106
Table 38 – Structure of the Pull_RES_PDU ("Pull") . 106
Table 39 – Structure of the Push_REQ_PDU ("Push"). 107
Table 40 – iPar-Server states and transitions . 109
Table 41 – iPar-Server management measures . 110
Table 42 – Definition of terms in Figure 69 . 119
Table 43 – Information to be included in the safety manual . 121
Table 44 – F-Host conformance class requirements . 123
Table 45 – Main characteristics of protocol versions . 124
Table 46 – F-Host driver / F-Device driver conformance matrix . 124
Table A.1 – The table "Crctab24" for 24 bit CRC signature calculations . 127
Table A.2 – The table "Crctab32" for 32 bit CRC signature calculations . 128
Table A.3 – The table "Crctab16" for 16 bit CRC signature calculations . 129
Table A.4 – Values of CN_incrNR_64 and MNR for F-Host PDU . 130
Table C.1 – Definition of additional terms used in driver transitions . 133
Table C.2 – F-Host driver transitions – added with reaction on Device_Fault . 133
Table C.3 – Prevent unintentional restart by application measures. 135
– 8 – IEC 61784-3-3:2021 IEC 2021
Table C.4 – F-Host driver transitions – with feature Disable F-(Sub)Module . 137
Table C.5 – F-Host driver transitions – added with "reaction on Device_Fault" and
"Disable F-(Sub)Module" . 139
IEC 61784-3-3:2021 IEC 2021 – 9 –
INTERNATIONAL ELECTROTECHNICAL COMMISSION
____________
INDUSTRIAL COMMUNICATION NETWORKS –
PROFILES –
Part 3-3: Functional safety fieldbuses –
Additional specifications for CPF 3
FOREWORD
1) The International Electrotechnical Commission (IEC) is a worldwide organization for standardization comprising
all national electrotechnical committees (IEC National Committees). The object of IEC is to promote international
co-operation on all questions concerning standardization in the electrical and electronic fields. To this end and
in addition to other activities, IEC publishes International Standards, Technical Specifications, Technical Reports,
Publicly Available Specifications (PAS) and Guides (hereafter referred to as “IEC Publication(s)”). Their
preparation is entrusted to technical committees; any IEC
...




Questions, Comments and Discussion
Ask us and Technical Secretary will try to provide an answer. You can facilitate discussion about the standard in here.
Loading comments...