EN 61784-3-2:2017
(Main)Industrial communication networks - Profiles - Part 3-2: Functional safety fieldbuses - Additional specifications for CPF 2
Industrial communication networks - Profiles - Part 3-2: Functional safety fieldbuses - Additional specifications for CPF 2
IEC 61784 3-2:2016 specifies a safety communication layer (services and protocol) based on CPF 2 of IEC 61784-1, IEC 61784-2 and IEC 61158 Type 2. It identifies the principles for functional safety communications defined in IEC 61784-3 that are relevant for this safety communication layer. This safety communication layer is intended for implementation in safety devices only. This third edition cancels and replaces the second edition published in 2010. This edition constitutes a technical revision. The main changes with respect to the previous edition are listed below (and highlighted in yellow in this document): - Added detailed requirements for use of FSCP 2/1 in conjunction with CP 16/3 (see 4.1, 6.4.3, 6.5.3, 8.2, 8.13, and miscellaneous references when referencing CPF 2 networks); - Defined object class section keywords for safety to EDS file definition in 8.10.2.1; - New sections on safety CRC overview in 7.1.2.1 and Rollover counts for EF format in 7.4; - Corrections to PFH calculations in 9.5.2; - Change from MACID to NodeID as general reference to network identifier.
Industrielle Kommunikationsnetze - Profile - Teil 3-2: Funktional sichere Übertragung bei Feldbussen - Zusätzliche Festlegungen für die Kommunikationsprofilfamilie 2
Réseaux de communication industriels - Profils - Partie 3-2: Bus de terrain de sécurité fonctionnelle - Spécifications supplémentaires pour CPF 2
IEC 61784 3-2:2016 spécifie une couche de communication relative à la sécurité (services et protocole) fondée sur la CPF 2 de l'IEC 61784-1, l'IEC 61784-2 et le Type 2 de l'IEC 61158. Elle identifie les principes applicables aux communications de sécurité fonctionnelle définies dans l'IEC 61784-3, et appropriés à cette couche de communication de sécurité. Cette couche de communication de sécurité est destinée à être mise en oeuvre uniquement sur les appareils de sécurité. Cette troisième édition annule et remplace la deuxième édition parue en 2010. Cette édition constitue une révision technique. Les modifications majeures par rapport à l'édition précédente sont énumérées ci-dessous (et surlignées en jaune dans le présent document): - Ajout d'exigences détaillées pour l'utilisation de FSCP 2/1 en liaison avec CP 16/3 (voir 4.1, 6.4.3, 6.5.3, 8.2, 8.13, et diverses références lors du référencement des réseaux CPF 2); - Définition des mots-clés de la section de classe d'objet pour la sécurité donnée dans la définition du fichier EDS en 8.10.2.1; - De nouvelles sections sur la présentation générale du CRC de sécurité en 7.1.2.1 et les comptages de remplacement pour le format EF en 7.4; - Corrections apportées aux calculs de la PFH en 9.5.2; - Changement de MACID en NodeID à titre de référence générale à l'identifiant de réseau.
Industrijska komunikacijska omrežja - Profili - 3-2. del: Funkcijska varnost procesnih vodil - Dodatne specifikacije za CPF 2 (IEC 61784-3-2:2016)
Ta del skupine standardov IEC 61784-3 določa varnostno komunikacijsko plast (storitve in protokoli), ki temelji na CPF 2 standardov IEC 61784-1, IEC 61784-2 in IEC 61158, tip 2. Določa načela za komunikacijsko funkcionalno varnost, opredeljena v IEC 61784-3, ki so pomembna za to varnostno komunikacijsko plast. Ta varnostna komunikacijska plast je predvidena za uporabo v varnostnih napravah.
OPOMBA 1: Standard ne zajema električne varnosti in intrinzičnih varnostnih vidikov. Električna varnost se nanaša na nevarnosti, kot je električni udar. Intrinzična varnost se nanaša na nevarnosti, ki so povezane s potencialno eksplozivnimi atmosferami. Ta 1. del določa mehanizme za prenos, ki jih je mogoče uporabiti pri prenosu z vidika varnosti pomembnih sporočil med udeleženci v porazdeljenem omrežju z uporabo tehnologije procesnih vodil v skladu z zahtevami skupine 2 standardov IEC 61508 za funkcijsko varnost. TI mehanizmi se lahko uporabljajo pri različnih industrijskih uporabah, kot so procesni nadzor, proizvodna avtomatizacija in stroji.
Ta del podaja smernice za razvijalce in ocenjevalce združljivih naprav in sistemov.
OPOMBA 2: Posledična stopnja varnostne celovitosti (SIL) sistema je odvisna od izvedbe izbranega komunikacijskega profila za funkcionalno varnost znotraj tega sistema. Izvedba komunikacijskega profila za funkcionalno varnost v standardni napravi v skladu s tem delom ne zadostuje, da bi naprava izpolnjevala zahteve za varnostno napravo.
General Information
- Status
- Withdrawn
- Publication Date
- 09-Nov-2017
- Withdrawal Date
- 09-Nov-2020
- Technical Committee
- CLC/TC 65X - Industrial-process measurement, control and automation
- Drafting Committee
- IEC/SC 65C - IEC_SC_65C
- Current Stage
- 9960 - Withdrawal effective - Withdrawal
- Start Date
- 23-Jun-2024
- Completion Date
- 23-Jun-2024
Relations
- Effective Date
- 23-Jan-2023
- Effective Date
- 11-May-2021
- Effective Date
- 30-Jul-2014
- Effective Date
- 30-Jul-2014
Get Certified
Connect with accredited certification bodies for this standard

BSI Group
BSI (British Standards Institution) is the business standards company that helps organizations make excellence a habit.
National Aerospace and Defense Contractors Accreditation Program (NADCAP)
Global cooperative program for special process quality in aerospace.
CARES (UK Certification Authority for Reinforcing Steels)
UK certification for reinforcing steels and construction.
Sponsored listings
Frequently Asked Questions
EN 61784-3-2:2017 is a standard published by CLC. Its full title is "Industrial communication networks - Profiles - Part 3-2: Functional safety fieldbuses - Additional specifications for CPF 2". This standard covers: IEC 61784 3-2:2016 specifies a safety communication layer (services and protocol) based on CPF 2 of IEC 61784-1, IEC 61784-2 and IEC 61158 Type 2. It identifies the principles for functional safety communications defined in IEC 61784-3 that are relevant for this safety communication layer. This safety communication layer is intended for implementation in safety devices only. This third edition cancels and replaces the second edition published in 2010. This edition constitutes a technical revision. The main changes with respect to the previous edition are listed below (and highlighted in yellow in this document): - Added detailed requirements for use of FSCP 2/1 in conjunction with CP 16/3 (see 4.1, 6.4.3, 6.5.3, 8.2, 8.13, and miscellaneous references when referencing CPF 2 networks); - Defined object class section keywords for safety to EDS file definition in 8.10.2.1; - New sections on safety CRC overview in 7.1.2.1 and Rollover counts for EF format in 7.4; - Corrections to PFH calculations in 9.5.2; - Change from MACID to NodeID as general reference to network identifier.
IEC 61784 3-2:2016 specifies a safety communication layer (services and protocol) based on CPF 2 of IEC 61784-1, IEC 61784-2 and IEC 61158 Type 2. It identifies the principles for functional safety communications defined in IEC 61784-3 that are relevant for this safety communication layer. This safety communication layer is intended for implementation in safety devices only. This third edition cancels and replaces the second edition published in 2010. This edition constitutes a technical revision. The main changes with respect to the previous edition are listed below (and highlighted in yellow in this document): - Added detailed requirements for use of FSCP 2/1 in conjunction with CP 16/3 (see 4.1, 6.4.3, 6.5.3, 8.2, 8.13, and miscellaneous references when referencing CPF 2 networks); - Defined object class section keywords for safety to EDS file definition in 8.10.2.1; - New sections on safety CRC overview in 7.1.2.1 and Rollover counts for EF format in 7.4; - Corrections to PFH calculations in 9.5.2; - Change from MACID to NodeID as general reference to network identifier.
EN 61784-3-2:2017 is classified under the following ICS (International Classification for Standards) categories: 25.040.40 - Industrial process measurement and control; 35.100.05 - Multilayer applications. The ICS classification helps identify the subject area and facilitates finding related standards.
EN 61784-3-2:2017 has the following relationships with other standards: It is inter standard links to EN 61784-3-2:2010, EN IEC 61784-3-2:2021, EN 61784-3-18:2011, EN 61784-3-3:2010. Understanding these relationships helps ensure you are using the most current and applicable version of the standard.
EN 61784-3-2:2017 is available in PDF format for immediate download after purchase. The document can be added to your cart and obtained through the secure checkout process. Digital delivery ensures instant access to the complete standard document.
Standards Content (Sample)
SLOVENSKI STANDARD
01-februar-2018
1DGRPHãþD
SIST EN 61784-3-2:2010
Industrijska komunikacijska omrežja - Profili - 3-2. del: Funkcijska varnost
procesnih vodil - Dodatne specifikacije za CPF 2 (IEC 61784-3-2:2016)
ndustrial communication networks - Profiles - Part 3-2: Functional safety fieldbuses -
Additional specifications for CPF 2 (IEC 61784-3-2:2016)
Industrielle Kommunikationsnetze - Profile - Teil 3-2: Funktional sichere Übertragung bei
Feldbussen - Zusätzliche Festlegungen für die Kommunikationsprofilfamilie 2 (IEC 61784
-3-2:2016)
Réseaux de communication industriels - Profils - Partie 3-2: Bus de terrain de sécurité
fonctionnelle - Spécifications supplémentaires pour CPF 2 (IEC 61784-3-2:2016)
Ta slovenski standard je istoveten z: EN 61784-3-2:2017
ICS:
25.040.40 Merjenje in krmiljenje Industrial process
industrijskih postopkov measurement and control
35.100.05 9HþVORMQHXSRUDEQLãNH Multilayer applications
UHãLWYH
2003-01.Slovenski inštitut za standardizacijo. Razmnoževanje celote ali delov tega standarda ni dovoljeno.
EUROPEAN STANDARD EN 61784-3-2
NORME EUROPÉENNE
EUROPÄISCHE NORM
November 2017
ICS 25.040.40; 35.100.05 Supersedes EN 61784-3-2:2010
English Version
Industrial communication networks - Profiles - Part 3-2:
Functional safety fieldbuses - Additional specifications for CPF 2
(IEC 61784-3-2:2016)
Réseaux de communication industriels - Profils - Partie 3-2: Industrielle Kommunikationsnetze - Profile - Teil 3-2:
Bus de terrain de sécurité fonctionnelle - Spécifications Funktional sichere Übertragung bei Feldbussen -
supplémentaires pour CPF 2 Zusätzliche Festlegungen für die
(IEC 61784-3-2:2016) Kommunikationsprofilfamilie 2
(IEC 61784-3-2:2016)
This European Standard was approved by CENELEC on 2016-08-17. CENELEC members are bound to comply with the CEN/CENELEC
Internal Regulations which stipulate the conditions for giving this European Standard the status of a national standard without any alteration.
Up-to-date lists and bibliographical references concerning such national standards may be obtained on application to the CEN-CENELEC
Management Centre or to any CENELEC member.
This European Standard exists in three official versions (English, French, German). A version in any other language made by translation
under the responsibility of a CENELEC member into its own language and notified to the CEN-CENELEC Management Centre has the
same status as the official versions.
CENELEC members are the national electrotechnical committees of Austria, Belgium, Bulgaria, Croatia, Cyprus, the Czech Republic,
Denmark, Estonia, Finland, Former Yugoslav Republic of Macedonia, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia,
Lithuania, Luxembourg, Malta, the Netherlands, Norway, Poland, Portugal, Romania, Serbia, Slovakia, Slovenia, Spain, Sweden,
Switzerland, Turkey and the United Kingdom.
European Committee for Electrotechnical Standardization
Comité Européen de Normalisation Electrotechnique
Europäisches Komitee für Elektrotechnische Normung
CEN-CENELEC Management Centre: Avenue Marnix 17, B-1000 Brussels
© 2017 CENELEC All rights of exploitation in any form and by any means reserved worldwide for CENELEC Members.
Ref. No. EN 61784-3-2:2017 E
European foreword
The text of document 65C/851/FDIS, future edition 3 of IEC 61784-3-2, prepared by SC 65C
"Industrial networks", of IEC/TC 65 "Industrial-process measurement, control and automation" was
submitted to the IEC-CENELEC parallel vote and approved by CENELEC as EN 61784-3-2:2017.
The following dates are fixed:
• latest date by which the document has to be (dop) 2018-05-10
implemented at national level by
publication of an identical national
standard or by endorsement
(dow) 2020-11-10
• latest date by which the national
standards conflicting with the
document have to be withdrawn
This document supersedes EN 61784-3-2:2010.
Attention is drawn to the possibility that some of the elements of this document may be the subject of
patent rights. CENELEC shall not be held responsible for identifying any or all such patent rights.
Endorsement notice
The text of the International Standard IEC 61784-3-2:2016 was approved by CENELEC as a
European Standard without any modification.
In the official version, for Bibliography, the following notes have to be added for the standards indicated:
IEC 61000-6-7 NOTE Harmonized as EN 61000-6-7.
IEC 61131-6 NOTE Harmonized as EN 61131-6.
IEC 61158 (all parts) NOTE Harmonized as EN 61158 (all parts).
IEC 61496 (all parts) NOTE Harmonized as EN 61496 (all parts).
IEC 61508-1:2010 NOTE Harmonized as EN 61508-1:2010 (not modified).
IEC 61508-4:2010 NOTE Harmonized as EN 61508-4:2010 (not modified).
IEC 61508-5:2010 NOTE Harmonized as EN 61508-5:2010 (not modified).
IEC 61511 (all parts) NOTE Harmonized as EN 61511 (all parts).
IEC 61784-5 (all parts) NOTE Harmonized as EN 61784-5 (all parts).
IEC 61800-5-2 NOTE Harmonized as EN 61800-5-2.
IEC 62061 NOTE Harmonized as EN 62061.
IEC 62443 (all parts) NOTE Harmonized as prEN 62443 (all parts)
IEC/TR 62685 NOTE Harmonized as CLC/TR 62685.
ISO 10218-1 NOTE Harmonized as EN ISO 10218-1.
ISO 12100 NOTE Harmonized as EN ISO 12100.
ISO 13849 (all parts) NOTE Harmonized as EN ISO 13849 (all parts).
IEC 62026-3 NOTE Harmonized as EN 62026-3.
Annex ZA
(normative)
Normative references to international publications
with their corresponding European publications
The following documents are referred to in the text in such a way that some or all of their content
constitutes requirements of this document. For dated references, only the edition cited applies. For
undated references, the latest edition of the referenced document (including any amendments)
applies.
NOTE 1 Where an International Publication has been modified by common modifications, indicated by (mod), the relevant
EN/HD applies.
NOTE 2 Up-to-date information on the latest versions of the European Standards listed in this annex is available here:
www.cenelec.eu.
Publication Year Title EN/HD Year
IEC 61131-2 - Industrial-process measurement and control EN 61131-2 -
– Programmable controllers – Part 2:
Equipment requirements and tests
IEC 61131-3 - Programmable controllers - Part 3: EN 61131-3 -
Programming languages
IEC 61158-2 - Industrial communication networks - EN 61158-2 -
Fieldbus specifications - Part 2: Physical
layer specification and service definition
IEC 61158-3-2 - Industrial communication networks - EN 61158-3-2 -
Fieldbus specifications - Part 3-2: Data-link
layer service definition - Type 2 elements
IEC 61158-3-19 - Industrial communication networks - EN 61158-3-19 -
Fieldbus specifications - Part 3-19: Data-link
layer service definition - Type 19 elements
IEC 61158-4-2 - Industrial communication networks - EN 61158-4-2 -
Fieldbus specifications - Part 4-2: Data-link
layer protocol specification - Type 2
elements
IEC 61158-4-19 - Industrial communication networks - EN 61158-4-19 -
Fieldbus specifications - Part 4-19: Data-link
layer protocol specification - Type 19
elements
IEC 61158-5-2 - Industrial communication networks - EN 61158-5-2 -
Fieldbus specifications - Part 5-2:
Application layer service definition - Type 2
elements
IEC 61158-5-19 - Industrial communication networks - EN 61158-5-19 -
Fieldbus specifications - Part 5-19:
Application layer service definition - Type 19
elements
IEC 61158-6-2 - Industrial communication networks - EN 61158-6-2 -
Fieldbus specifications - Part 6-2:
Application layer protocol specification -
Type 2 elements
IEC 61158-6-19 - Industrial communication networks - EN 61158-6-19 -
Fieldbus specifications - Part 6-19:
Application layer protocol specification -
Type 19 elements
IEC 61326-3-1 - Electrical equipment for measurement, EN 61326-3-1 -
control and laboratory use - EMC
requirements - Part 3-1: Immunity
requirements for safety-related systems and
for equipment intended to perform safety-
related functions (functional safety) -
General industrial applications
IEC 61326-3-2 - Electrical equipment for measurement, - -
control and laboratory use ¿ EMC
requirements ¿ Part 3-2: Immunity
requirements for safety-related systems and
for equipment intended to perform safety-
related functions (functional safety) ¿
Industrial applications with specified
electromagnetic environment
IEC 61508 series Functional safety of EN 61508 series
electrical/electronic/programmable electronic
safety-related systems
IEC 61784-1 - Industrial communication networks - Profiles EN 61784-1 -
- Part 1: Fieldbus profiles
IEC 61784-2 - Industrial communication networks - Profiles EN 61784-2 -
- Part 2: Additional fieldbus profiles for real-
time networks based on ISO/IEC 8802-3
IEC 61784-3 - Industrial communication networks - Profiles EN 61784-3 -
- Part 3: Functional safety fieldbuses -
General rules and profile definitions
IEC 61784-5-2 - Industrial communication networks - Profiles EN 61784-5-2 -
- Part 5-2: Installation of fieldbuses -
Installation profiles for CPF 2
IEC 61918 (mod) - Industrial communication networks - EN 61918 -
Installation of communication networks in
industrial premises
ISO 13849-1 2006 Safety of machinery - Safety-related parts of EN ISO 13849-1 2008
control systems - Part 1: General principles
for design
ISO 15745-2 2003 Industrial automation systems and - -
integration - Open systems application
integration framework - Part 2: Reference
description for ISO 11898-based control
systems
ISO 15745-3 2003 Industrial automation systems and - -
integration - Open systems application
integration framework - Part 3: Reference
description for IEC 61158 based control
systems
ISO 15745-4 2003 Industrial automation systems and - -
integration - Open systems application
integration framework - Part 4: Reference
description for Ethernet-based control
systems
IEC 61784-3-2 ®
Edition 3.0 2016-07
INTERNATIONAL
STANDARD
NORME
INTERNATIONALE
colour
inside
Industrial communication networks – Profiles –
Part 3-2: Functional safety fieldbuses – Additional specifications for CPF 2
Réseaux de communication industriels – Profils –
Partie 3-2: Bus de terrain de sécurité fonctionnelle – Spécifications
supplémentaires pour CPF 2
INTERNATIONAL
ELECTROTECHNICAL
COMMISSION
COMMISSION
ELECTROTECHNIQUE
INTERNATIONALE
ICS 25.040.40, 35.100.05 ISBN 978-2-8322-3480-8
– 2 – IEC 61784-3-2:2016 IEC 2016
CONTENTS
FOREWORD. 12
0 Introduction . 14
0.1 General . 14
0.2 Patent declaration . 16
1 Scope . 17
2 Normative references . 17
3 Terms, definitions, symbols, abbreviated terms and conventions . 19
3.1 Terms and definitions . 19
3.1.1 Common terms and definitions . 19
3.1.2 CPF 2: Additional terms and definitions . 24
3.2 Symbols and abbreviated terms . 24
3.2.1 Common symbols and abbreviated terms . 24
3.2.2 CPF 2: Additional symbols and abbreviated terms. 25
3.3 Conventions . 26
4 Overview of FSCP 2/1 (CIP Safety™) . 26
4.1 General . 26
4.2 FSCP 2/1 . 26
5 General . 27
5.1 External documents providing specifications for the profile . 27
5.2 Safety functional requirements . 28
5.3 Safety measures . 28
5.4 Safety communication layer structure . 29
5.5 Relationships with FAL (and DLL, PhL) . 30
5.5.1 General . 30
5.5.2 Data types . 30
6 Safety communication layer services . 30
6.1 Introduction . 30
6.2 Connection object . 31
6.2.1 General . 31
6.2.2 Class attribute extensions . 31
6.2.3 Service extensions . 31
6.2.4 Explicit message response format for SafetyOpen and SafetyClose . 32
6.3 Connection Manager object . 32
6.3.1 General . 32
6.3.2 ForwardOpen for safety . 33
6.3.3 Safety network segment . 35
6.3.4 Originator rules for calculating the connection parameter CRC . 38
6.3.5 SafetyOpen processing flowcharts . 38
6.3.6 Checks required by Multipoint producers with existing connections . 41
6.3.7 Electronic key usage for safety . 42
6.3.8 RPI vs. API in safety connections . 42
6.3.9 Application path construction for safety . 42
6.3.10 Safety Validator connection types . 43
6.3.11 Application reply data in a successful SafetyOpen response . 46
6.3.12 Unsuccessful SafetyOpen response . 48
6.3.13 ForwardClose for safety . 50
IEC 61784-3-2:2016 IEC 2016 – 3 –
6.4 Identity object . 50
6.4.1 General . 50
6.4.2 Changes to common services . 50
6.4.3 Extensions for CP 16/3 devices . 51
6.5 Link objects . 51
6.5.1 DeviceNet object changes . 51
6.5.2 TCP/IP Interface object changes . 52
6.5.3 SERCOS III Link object . 52
6.6 Safety Supervisor object. 53
6.6.1 General . 53
6.6.2 Safety Supervisor class attributes . 54
6.6.3 Subclasses . 54
6.6.4 Safety Supervisor instance attributes . 54
6.6.5 Semantics . 58
6.6.6 Subclasses . 64
6.6.7 Safety Supervisor common services . 64
6.6.8 Safety Supervisor behavior . 75
6.7 Safety Validator object . 82
6.7.1 General . 82
6.7.2 Class attributes . 82
6.7.3 Instance attributes . 83
6.7.4 Class services . 88
6.7.5 Instance services . 89
6.7.6 Object behavior . 89
6.8 Connection Configuration Object . 92
6.8.1 General . 92
6.8.2 Class attribute extensions . 92
6.8.3 Instance attributes, additions and extensions. . 92
6.8.4 Instance attribute semantics extensions or restrictions for safety . 95
6.8.5 Special Safety Related Parameters – (Attribute 13) . 99
6.8.6 Object-specific services . 105
6.8.7 Common service extensions for safety . 105
6.8.8 Object behavior . 107
7 Safety communication layer protocol . 108
7.1 Safety PDU format . 108
7.1.1 Safety PDU encoding . 108
7.1.2 Safety CRC . 120
7.2 Communication protocol behavior . 121
7.2.1 Sequence of safety checks . 121
7.2.2 Connection termination . 121
7.2.3 Cross checking error . 121
7.3 Time stamp operation . 122
7.4 Rollover counts in the EF . 123
7.5 Protocol sequence diagrams . 123
7.5.1 General . 123
7.5.2 Normal safety transmission . 123
7.5.3 Lost, corrupted and delayed message transmission . 124
7.5.4 Lost, corrupted or delayed message transmission with production
repeated . 127
– 4 – IEC 61784-3-2:2016 IEC 2016
7.5.5 Point-to-point ping . 129
7.5.6 Multipoint ping on CP 2/3 Safety . 130
7.5.7 Multipoint ping on CP 2/2 safety networks . 131
7.5.8 Multipoint ping – retry with success . 132
7.5.9 Multipoint ping – retry with timeout . 133
7.6 Safety protocol definition . 134
7.6.1 General . 134
7.6.2 High level view of a safety device . 134
7.6.3 Safety Validator object . 134
7.6.4 Relationship between SafetyValidatorServer and SafetyValidatorClient . 135
7.6.5 Extended Format time stamp rollover handling . 135
7.6.6 SafetyValidatorClient function definition . 140
7.6.7 SafetyValidatorServer function definition . 148
7.7 Safety message and protocol data specifications . 161
7.7.1 Mode octet . 161
7.7.2 Time Stamp Section . 162
7.7.3 Time Coordination Message . 162
7.7.4 Time correction message . 163
7.7.5 Safety data production . 163
7.7.6 Producer dynamic variables . 171
7.7.7 Producer per consumer dynamic variables . 173
7.7.8 Consumer data variables . 174
7.7.9 Consumer input static variables . 176
7.7.10 Consumer dynamic variables . 177
8 Safety communication layer management . 179
8.1 Overview . 179
8.2 Definition of the measures used during connection establishment . 179
8.3 Originator-Target relationship validation . 183
8.4 Detection of mis-routed connection requests . 183
8.5 SafetyOpen processing . 184
8.6 Ownership management . 184
8.7 Bridging different physical layers . 185
8.8 Safety connection establishment . 187
8.8.1 Overview . 187
8.8.2 Basic facts for connection establishment . 187
8.8.3 Configuring safety connections . 187
8.8.4 Network time expectation multiplier . 189
8.8.5 Establishing connections . 190
8.8.6 Recommendations for consumer number allocation . 193
8.8.7 Recommendations for connection establishment . 194
8.8.8 Ownership establishment . 194
8.8.9 Ownership use cases . 195
8.8.10 PID/CID usage and establishment . 198
8.8.11 Proper PID/CID usage in multipoint and point-to-point connections . 198
8.8.12 Network supported services . 200
8.8.13 FSCP 2/1 safety device type . 201
8.9 Safety configuration process . 205
8.9.1 Introduction to safety configuration . 205
8.9.2 Configuration goals . 205
IEC 61784-3-2:2016 IEC 2016 – 5 –
8.9.3 Configuration overview . 206
8.9.4 User configuration guidelines . 207
8.9.5 Configuration process SIL3 justification . 208
8.9.6 Device functions for tool configuration . 209
8.9.7 Password security . 209
8.9.8 SNCT interface services . 209
8.9.9 Configuration lock . 209
8.9.10 Effect of configuration lock on device behavior . 210
8.9.11 Configuration ownership . 211
8.9.12 Configuration mode . 211
8.9.13 Measures used to ensure integrity of configuration process . 211
8.9.14 Download process . 213
8.9.15 Verification process . 216
8.9.16 Verification process . 218
8.9.17 Configuration error analysis . 219
8.10 Electronic Data Sheets extensions for safety . 223
8.10.1 General rules for EDS based safety devices . 223
8.10.2 EDS extensions for safety . 224
8.11 Requirements for CP 2/2 . 229
8.11.1 EPI rules for safety messages that travel over CP 2/2 . 229
8.11.2 Default safety I/O service . 229
8.11.3 Duplicate IP detection . 229
8.11.4 Priority for safety connections . 229
8.12 Requirements for CP 2/3 . 230
8.12.1 Allocation of CP 2/3 identifiers . 230
8.12.2 Additional requirements . 232
8.13 CP 16/3 requirements . 232
8.13.1 General architecture for CPF 2 on CP 16/3 . 232
8.13.2 Baseline FSCP 2/1 on CP 16/3 device . 233
8.13.3 Supported objects and services in CP 16/3 devices . 234
8.13.4 Transport layer requirements . 234
8.13.5 FSCP 2/1 and the CP 16/3 device model . 237
8.13.6 UNID assignment on CP 16/3 . 238
9 System requirements . 241
9.1 Indicators and switches . 241
9.1.1 General indicator requirements . 241
9.1.2 LED indications for setting the device UNID . 241
9.1.3 Module Status LED . 241
9.1.4 Indicator warning . 242
9.1.5 Network Status LED . 242
9.1.6 Switches . 243
9.2 Installation guidelines . 245
9.3 Safety function response time . 246
9.3.1 Overview . 246
9.3.2 Network time expectation . 246
9.3.3 Equations for calculating network reaction times . 247
9.4 Duration of demands . 249
9.5 Constraints for calculation of system characteristics . 249
9.5.1 Number of nodes . 249
– 6 – IEC 61784-3-2:2016 IEC 2016
9.5.2 Network PFH . 249
9.5.3 Bit Error Rate (BER) . 252
9.6 Maintenance . 253
9.7 Safety manual . 253
10 Assessment . 253
Annex A (informative) Additional information for functional safety communication
profiles of CPF 2 . 254
A.1 Hash function example code . 254
A.2 … . 268
Annex B (informative) Information for assessment of the functional safety
communication profiles of CPF 2 . 269
Bibliography . 270
Figure 1 – Relationships of IEC 61784-3 with other standards (machinery) . 14
Figure 2 – Relationships of IEC 61784-3 with other standards (process) . 15
Figure 3 – Relationship of Safety Validators . 27
Figure 4 – Communication layers . 30
Figure 5 – ForwardOpen with safety network segment . 34
Figure 6 – Safety network target format . 36
Figure 7 – Target Processing SafetyOpen with no configuration data (Form 2
SafetyOpen) . 39
Figure 8 – Target Processing for SafetyOpen with configuration data (Form 1
SafetyOpen) . 40
Figure 9 – Originator logic to determine which format to use . 41
Figure 10 – Applying device configuration . 68
Figure 11 – Configure and Validate processing flowcharts . 69
Figure 12 – UNID handling during “Waiting for TUNID” . 75
Figure 13 – Safety Supervisor state diagram . 76
Figure 14 – Configuration, testing and locked relationships . 80
Figure 15 – Safety connection types . 86
Figure 16 – Safety Validator state transition diagram . 90
Figure 17 – Logic for Auto-detecting format type . 104
Figure 18 – Connection Configuration Object state diagram . 107
Figure 19 – Connection Configuration Object data flow . 108
Figure 20 – Format of the mode octet . 109
Figure 21 – 1 or 2 octet data section, Base Format . 110
Figure 22 – 1 or 2 octet data section, Extended Format . 111
Figure 23 – 3 to 250 octet data section format, Base Format . 111
Figure 24 – 3 to 250 octet data section format, Extended Format . 112
Figure 25 – Time Stamp section format, Base Format . 113
Figure 26 – BF Time Coordination message encoding . 114
Figure 27 – EF Time Coordination message encoding . 114
Figure 28 – BF Time Correction message encoding . 115
Figure 29 – EF Time Correction message encoding . 115
IEC 61784-3-2:2016 IEC 2016 – 7 –
Figure 30 – 1 or 2 octet point-to-point PDU encoding . 117
Figure 31 – 1 or 2 Octet multipoint PDU encoding . 117
Figure 32 – 1 or 2 Octet, multipoint, Format 2 safety connection format . 118
Figure 33 – 3 to 250 Octet Point-to-point PDU encoding . 118
Figure 34 – 3 to 248 Octet Multipoint PDU encoding . 119
Figure 35 – 3 to 248 Octet, Multipoint, safety connection format . 119
Figure 36 – CRC Calculation order for Extended Format messages . 120
Figure 37 – Time stamp sequence . 122
Figure 38 – Sequence diagram of a normal producer/consumer safety sequence . 123
Figure 39 – Sequence diagram of a normal producer/consumer safety sequence
(production repeated). 124
Figure 40 – Sequence diagram of a corrupted producer to consumer message . 125
Figure 41 – Sequence diagram of a lost producer to consumer message . 126
Figure 42 – Sequence diagram of a delayed message . 127
Figure 43 – Sequence diagram of a corrupted producer to consumer message with
production repeated . 128
Figure 44 – Sequence diagram of a connection terminated due to delays . 129
Figure 45 – Sequence diagram of a failure of safety CRC check . 129
Figure 46 – Sequence diagram of a point-to-point ping – normal response . 130
Figure 47 – Sequence diagram of a successful multipoint ping, CP 2/3 safety . 131
Figure 48 – Sequence diagram of a successful multipoint ping, CP 2/2 safety . 132
Figure 49 – Sequence diagram of a multipoint ping retry . 133
Figure 50 – Sequence diagram of a multipoint ping timeout . 133
Figure 51 – Safety device reference model entity relation diagram . 134
Figure 52 – Two devices interchanging safety data via a SafetyValidatorClient and a
SafetyValidatorServer . 135
Figure 53 – Point-to-point, originating consumer. target producer . 137
Figure 54 – Point-to-point, originator producer, target consumer . 138
Figure 55 – Multi-point, originator consumer, target producer . 139
Figure 56 – Safety production data flow . 140
Figure 57 – Consumer safety data monitoring . 149
Figure 58 – SafetyValidatorServer – application triggered . 150
Figure 59 – Target ownership . 183
Figure 60 – SafetyOpen forms . 184
Figure 61 – Connection ownership state chart . 185
Figure 62 – SafetyOpen UNID mapping . 185
Figure 63 – Common CPF 2 application layer . 186
Figure 64 – End-to-End routing example . 186
Figure 65 – Sources for safety related connection parameters . 189
Figure 66 – Parameter mapping between originator and target . 190
Figure 67 – CP 2/3 Safety connection establishment in targets for Form 2a SafetyOpen . 192
Figure 68 – General sequence to detect configuration is required . 193
Figure 69 – PID/CID exchanges for two originator scenarios . 198
Figure 70 – Seed generation for multipoint connections . 199
– 8 – IEC 61784-3-2:2016 IEC 2016
Figure 71 – PID/CID runtime handling . 200
Figure 72 – Connection categories and supported services . 203
Figure 73 – Recommended connection types . 204
Figure 74 – Logic-to-logic supported services . 204
Figure 75 – Recommended connection types for logic to logic . 205
Figure 76 – Configuration data transfers . 206
Figure 77 – Protection measures in safety devices . 208
Figure 78 – Configuration, testing a
...




Questions, Comments and Discussion
Ask us and Technical Secretary will try to provide an answer. You can facilitate discussion about the standard in here.
Loading comments...