Application manual

Electronic Position Switches

Robot Controller
RobotWare 5.13
 Application manual
Electronic Position Switches
RobotWare 5.13

Document ID: 3HAC027709-001

Revision: E
© Copyright 2006-2010 ABB. All rights reserved.
The information in this manual is subject to change without notice and should not be
construed as a commitment by ABB. ABB assumes no responsibility for any errors that
may appear in this manual.
Except as may be expressly stated anywhere in this manual, nothing herein shall be
construed as any kind of guarantee or warranty by ABB for losses, damages to persons
or property, fitness for a specific purpose or the like.
In no event shall ABB be liable for incidental or consequential damages arising from
use of this manual and products described herein.
This manual and parts thereof must not be reproduced or copied without ABB's written
permission, and contents thereof must not be imparted to a third party nor be used for
any unauthorized purpose. Contravention will be prosecuted.
Additional copies of this manual may be obtained from ABB at its then current charge.

© Copyright 2006-2010 ABB. All rights reserved.

© Copyright 2006-2010 ABB All rights reserved.

ABB AB
Robotics Products
SE-721 68 Västerås
Sweden
 Table of Contents

Overview of this manual. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5

Product documentation, M2004 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
Safety . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9

1 Introduction 11
1.1 Overview of Electronic Position Switches . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
1.2 Terminology . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13

2 Electronic Position Switches functions 15

2.1 Monitor Axis Range . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
2.2 Cyclic Sync Check . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
2.3 Software Sync Check . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
2.4 Control Error Supervision . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20
2.5 Operational Safety Range . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21

3 Installation 23
3.1 Hardware installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23
3.1.1 I/O connector data . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23
3.1.2 I/O signals. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
3.1.3 Power supply . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29
3.1.4 SMB connection for additional axis . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31
3.2 Software installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32
3.2.1 Installing required software . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32

4 Configuration 33
4.1 Create a safety user. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33
4.2 EPS Configuration Wizard . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34
4.3 Configuration for robots with non-zero calibration position . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45
4.4 Configuration for MultiMove. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48
4.5 Activating the safety configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50
4.6 Validate the configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52
4.7 Viewing the configuration on the FlexPendant . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 54

5 Synchronization 55
5.1 Synchronization guidelines for Cyclic Sync Check . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55
© Copyright 2006-2010 ABB. All rights reserved.

5.2 Synchronization guidelines for Software Sync Check . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57

6 Running in production 59
6.1 Reaction time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59
6.2 Recovery after safety violation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 60
6.3 Virtual signals. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61
6.4 Status LED . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62

7 Example application 63
7.1 Example with two work zones . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63

8 Safety aspects for Electronic Position Switches 67

8.1 Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67
8.2 Safety requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 68
8.2.1 Standards conformance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 68
8.2.2 Specific safety requirements. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69
8.3 Safe design of Electronic Position Switches . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 70
8.4 Certifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73

3HAC027709-001 Revision: E 3
Table of Contents

8.5 Conclusion . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 74

Index 75

© Copyright 2006-2010 ABB. All rights reserved.

4 3HAC027709-001 Revision: E
 Overview of this manual

Overview of this manual

About this manual

This manual describes the Electronic Position Switches option and contains installation
descriptions of the hardware. It also describes the add-in software, which is added to
RobotStudio and used for configuration of Electronic Position Switches.

Usage
This manual should be used during installation and configuration of Electronic Position
Switches.

Who should read this manual?

This manual is mainly intended for:
• personnel that are responsible for installations and configurations of hardware/
software
• personnel that make configurations of the I/O system
• system integrators

Prerequisites
The reader should have the required knowledge of:
• mechanical installation work
• electrical installation work
• working with industrial robots
• using RobotStudio
• personal safety, see the safety chapter in Product manual - IRC5.

Organization of chapters
The manual is organized in the following chapters:
© Copyright 2006-2010 ABB. All rights reserved.

Chapter Contents
1. Introduction This chapter gives an overview of the Electronic Position
Switches option, and describes the purpose.
2. Electronic Position Descriptions of all functions included in Electronic Position
Switches functions Switches.
3. Installation Workflows for how to install hardware and software for Electronic
Position Switches.
4. Configuration Workflows for how to configure Electronic Position Switches.
5. Synchronization Describes some considerations for the required synchronization.
6. Running in Information that is useful after installation, such as performance
production specifications, what to do if the supervision triggers and virtual
signals that can be used in a RAPID program.
7. Example Example of a typical problem that is solved with Electronic
application Position Switches.

Continues on next page

3HAC027709-001 Revision: E 5
Overview of this manual

Continued

References

Reference Document ID
Operating manual - RobotStudio 3HAC032104-001
Product manual - IRC5 3HAC021313-001
Technical reference manual - RAPID Instructions, Functions 3HAC16581-1
and Data types
Operating manual - Getting started, IRC5 and RobotStudio 3HAC027097-001

Revisions

Revision Description
- First edition. Released with Electronic Position Switches.
A Installation procedure removed from this manual. Installation and replacement
information can be found in Product manual - IRC5.
Information added about test pulses on output signals.
Example application added.
Minor corrections.
B Added section about reaction time.
In the EPS Configuration Wizard, the configuration of Monitor Axis Range has
a new checkbox called Invert function, which is described.
C New chapter added, Safety aspects for Electronic Position Switches. Additions/
corrections are made.
D Added section Configuration for robots with non-zero calibration position on
page 45.
Added information to Create RAPID program for synchronization on page 55.
Corrections following updates in the user interface in EPS Configuration Wizard
on page 34.
Added section Status LED on page 62.
Correction in section Virtual signals on page 61. The virtual signals cannot be
used in a RAPID program.
Added information to section Installing required software on page 32, that EPS
Configuration Wizard is pre-installed in RobotStudio from RobotWare 5.11.
E Updated section Installing required software on page 32: the EPS Configuration © Copyright 2006-2010 ABB. All rights reserved.
Wizard is installed with RobotStudio.
Software Sync Check is introduced as alternative to Cyclic Sync Check.
Added section Viewing the configuration on the FlexPendant on page 54.
Updated safety signal graphics for the levels Danger and Warning.

6 3HAC027709-001 Revision: E
 Product documentation, M2004

Product documentation, M2004

Categories for manipulator documentation

The manipulator documentation is divided into a number of categories. This listing is based
on the type of information in the documents, regardless of whether the products are standard
or optional.
All documents listed can be ordered from ABB on a DVD. The documents listed are valid for
M2004 manipulator systems.

Product manuals
All hardware, manipulators and controllers will be delivered with a Product manual that
contains:
• Safety information.
• Installation and commissioning (descriptions of mechanical installation, electrical
connections).
• Maintenance (descriptions of all required preventive maintenance procedures
including intervals).
• Repair (descriptions of all recommended repair procedures including spare parts).
• Additional procedures, if any (calibration, decommissioning).
• Reference information (article numbers for documentation referred to in Product
manual, procedures, lists of tools, safety standards).
• Parts list.
• Foldouts or exploded views.
• Circuit diagrams.

Technical reference manuals

The technical reference manuals describe the manipulator software in general and contain
relevant reference information.
© Copyright 2006-2010 ABB. All rights reserved.

• RAPID Overview: An overview of the RAPID programming language.

• RAPID Instructions, Functions and Data types: Description and syntax for all
RAPID instructions, functions, and data types.
• RAPID Kernel: A formal description of the RAPID programming language.
• System parameters: Description of system parameters and configuration workflows.

Application manuals
Specific applications (for example software or hardware options) are described in
Application manuals. An application manual can describe one or several applications.
An application manual generally contains information about:
• The purpose of the application (what it does and when it is useful).
• What is included (for example cables, I/O boards, RAPID instructions, system
parameters, CD with PC software).
• How to use the application.
• Examples of how to use the application.
Continues on next page
3HAC027709-001 Revision: E 7
Product documentation, M2004

Continued

Operating manuals
The operating manuals describe hands-on handling of the products. The manuals are aimed
at those having first-hand operational contact with the product, that is production cell
operators, programmers, and trouble shooters.
The group of manuals includes:
• Emergency safety information
• General safety information
• Getting started, IRC5 and RobotStudio
• IRC5 with FlexPendant
• RobotStudio
• Introduction to RAPID
• Trouble shooting, for the controller and manipulator.

© Copyright 2006-2010 ABB. All rights reserved.

8 3HAC027709-001 Revision: E
 Safety

Safety

Safety of personnel
When working inside the robot controller it is necessary to be aware of voltage-related risks.
A danger of high voltage is associated with the following parts:
• Units inside the controller, for example I/O units can be supplied with power from an
external source.
• The mains supply/mains switch.
• The power unit.
• The power supply unit for the computer system (230 VAC).
• The rectifier unit (400-480 VAC and 700 VDC). Capacitors!
• The drive unit (700 VDC).
• The service outlets (115/230 VAC).
• The power supply unit for tools, or special power supply units for the machining
process.
• The external voltage connected to the controller remains live even when the robot is
disconnected from the mains.
• Additional connections.
Therefore, it is important that all safety regulations are followed when doing mechanical and
electrical installation work.

Safety regulations
Before beginning mechanical and/or electrical installations, make sure you are familiar with
the safety regulations described in Product manual - IRC5.
© Copyright 2006-2010 ABB. All rights reserved.

3HAC027709-001 Revision: E 9
10
Safety

3HAC027709-001 Revision: E
© Copyright 2006-2010 ABB. All rights reserved.
 1 Introduction
1.1. Overview of Electronic Position Switches

1 Introduction
1.1. Overview of Electronic Position Switches

Purpose
Electronic Position Switches is a safety controller in the robot system. The purpose of the
safety controller is to ensure a high safety level in the robot system using electronic position
switches and safe digital output signals.
The output signals can be connected to, for instance, a safety PLC that will generate stops in
the robot system by opening the safety chain. The safety controller also sends status signals
to the main computer, that is the standard IRC5 robot controller.
Some examples of applications:
• Monitoring of all robot axes.
• Replacing mechanical position switches.
WARNING!
The safety controller has passive monitoring, i.e. it does not stop the robot. If an axis is
outside its configured range, an output signal goes low. It is the responsibility of the
installation personnel to connect the output signals in such a way that the robot is stopped if
there is a risk of a dangerous situation.

What is included
The following is included with the option Electronic Position Switches [810-1]:
• Safety controller (3HAC026271-001)
• 14 pole plug contact for I/O connections.
The option Electronic Position Switches gives you access to EPS Configuration Wizard
functionality in RobotStudio.
With EPS Configuration Wizard you can:
• set up monitoring of all robot axes
© Copyright 2006-2010 ABB. All rights reserved.

• quickly modify the monitoring settings.

Basic approach
This is the general approach for setting up Electronic Position Switches. For more detailed
instructions of how this is done, see chapters Installation and Configuration.
1. Connect I/O connections to sync switch and safety PLC, or similar.
2. Create a safety user in the User Authorization System, UAS (using RobotStudio).
3. Configure the settings for Electronic Position Switches functions via the EPS
Configuration Wizard and restart the controller.
4. Log on as safety user and set the PIN code on the FlexPendant. Restart the controller.
5. Synchronize the safety controller, using a sync switch or software synchronization.
Now the monitoring functions are activated.
6. Validate the configuration.

Continues on next page

3HAC027709-001 Revision: E 11
1 Introduction
1.1. Overview of Electronic Position Switches

Continued

Limitations
Electronic Position Switches can only monitor one additional axis. This axis must be
connected to SMB link 1.
Continuously rotating axes cannot be monitored.
Drive units cannot be shared, for instance between positioner axes.
Electronic Position Switches uses only passive monitoring, that sets output signals but does
not stop the robot.

Supported robots
The following robot families are supported by SafeMove:
• IRB 140
• IRB 260
• IRB 660
• IRB 1600
• IRB 2400
• IRB 2600
• IRB 4400
• IRB 4600
• IRB 5400
• IRB 6620
• IRB6620LX
• IRB 6640
• IRB 6660
• IRB 6650S
• IRB 7600
Other robot models are not supported.
SafeMove cannot be used for parallel robots, such as IRB 360.
© Copyright 2006-2010 ABB. All rights reserved.
Requirements
Robust monitoring function in Electronic Position Switches requires correct settings of
payload and additional axes, since this will affect the calculated accepted servo lag. Please
also note that external forces applied on the manipulator can cause a negative influence on
the monitoring functions, since the servo lag might differ from the calculated values, due to
such external forces.
DANGER!
An Electronic Position Switches configuration must always be validated to verify that the
desired safety is achieved. If no validation is performed, or the validation is inadequate, the
configuration cannot be relied on for personal safety.

12 3HAC027709-001 Revision: E
 1 Introduction
1.2. Terminology

1.2. Terminology

About these terms

Some words have a specific meaning when used in this manual. It is important to understand
what is meant by these words. This manual’s definitions of these words are listed below.

Term list

Term Definition
Monitoring Passive monitoring with signaling function only.
Occupationally safe Safe for a person to be in an area.
Operationally safe Safe for the machinery but not safe for persons to enter the
area.
Safe input Dual monitored digital input.
Safe output Dual monitored digital output.
Safety controller A safety board used with IRC5. Can be an Electronic Position
Switch safety controller or a SafeMove safety controller.
Antivalent signal Same as complementary signal. The logical value of one
channel is the complement of the other in a dual channel signal.
Equivalent signal The logical value of one channel is equivalent to the other in a
dual channel.
© Copyright 2006-2010 ABB. All rights reserved.

3HAC027709-001 Revision: E 13
1 Introduction
1.2. Terminology

© Copyright 2006-2010 ABB. All rights reserved.

14 3HAC027709-001 Revision: E
 2 Electronic Position Switches functions
2.1. Monitor Axis Range

2 Electronic Position Switches functions

2.1. Monitor Axis Range

Monitor Axis Range

Monitor Axis Range is a monitoring function that determines if all axes are within the defined
ranges. Safe digital output signals are used to indicate when all axes are within their defined
ranges.
NOTE!
Monitor Axis Range can only safely determine that the monitored axes are within the defined
ranges (i.e. when the output signal is high). It is not safe to assume that an axis is outside the
defined range when the signal is low.

Monitoring functionality
The positions of the axes can be monitored as follows:
• Up to five safe digital output signals can be defined.
• For each safe digital output signal, a combination of up to seven axis ranges can be
defined.
If an axis is outside its defined range, a safe digital output signal goes low. Each set of axes
can be allocated an output signal.

Borderline positions
In very rare cases an error message (elog 20473) might be presented if the robot is stopped
for a longer time (> 40 min) in a position exactly on the border of the defined range due to
internal design.

Settings
The following settings need to be configured for Monitor Axis Range:
• Axis ranges (degrees or mm) for each axis.
© Copyright 2006-2010 ABB. All rights reserved.

• Assignment of safe digital output for each set of axis ranges.

• Invert axis for each axis.
• Allow inside for each set of axis ranges.

Limitations
Continuously rotating additional axes cannot be monitored. If an additional axis is
continuously rotating, it must not be configured for monitoring.
If you have a continuously rotating robot axis (using independent axis for axis 4 or 6)
monitoring is not used for that axis. Other robot axes can still be monitored, but the
independent axis must be specified in the configuration (see Select mechanical unit on page
35).

Continues on next page

3HAC027709-001 Revision: E 15
2 Electronic Position Switches functions
2.1. Monitor Axis Range

Continued

Example of ranges
This example shows a robot with defined axis ranges for axes 2 and 3 in three different
positions. The function Monitor Axis Range monitors that axis 2 is within range x2 and that
axis 3 is within range x3.
In positions A and B, all monitored axes are within the defined ranges. In position C, axis 3
is not within the defined range.

xx0600003331

x2 Defined axis position range for axis 2.

x3 Defined axis position range for axis 3.
A Robot position A. Both axis 2 and axis 3 are within the defined ranges.
B Robot position B. Both axis 2 and axis 3 are within the defined ranges.
C Robot position C. Axis 2 is within the defined range but axis 3 is not within its defined
range.

In this example, if range x2 and x3 are defined for the same signal, this signal will go low if
any of the axes is outside its defined range.
Note! The ranges define axis angles, not the position of the TCP. In robot position C, the TCP
is still within what seems to be a safe range, but axis 3 is outside its defined range.

© Copyright 2006-2010 ABB. All rights reserved.

Continues on next page

16 3HAC027709-001 Revision: E
 2 Electronic Position Switches functions
2.1. Monitor Axis Range

Continued

Example of usage
Define two ranges for axis 1 and let a safety PLC decide when the axis must be inside range
A and when it must be inside range B.

A ions
struct
Safetyin

xx0700000144

A Range for axis 1 defined for safe output signal 1.

B Range for axis 1 defined for safe output signal 2.
© Copyright 2006-2010 ABB. All rights reserved.

3HAC027709-001 Revision: E 17
2 Electronic Position Switches functions
2.2. Cyclic Sync Check

2.2. Cyclic Sync Check

Cyclic Sync Check

Cyclic Sync Check is a function that makes sure that the robot calibration is correct by using
a physical switch.

Functionality
The robot must move to a safe sync position to ensure that the safety controller and the robot
controller are synchronized. The safe sync position is defined during configuration and stored
in the safety controller.
With a defined interval (sync cycle time), the robot must move to the safe sync position and
activate a switch. If the sync check is not performed within the sync cycle time,all output
signals will go low (which should stop the robot if implemented correctly). A warning is
shown on the FlexPendant a pre-defined time (pre-warning time) before the sync cycle time
has passed.
When the switch is activated, the safety controller assumes that the robot revolution counters
are correct. It also calculates the arm position from the motor positions, the gear ratio, and its
internal revolution counter. If the position matches the stored sync position within half a
motor revolution, then the synchronization is assumed to be correct.
If the synchronization is correct, the safety controller then sends elog 20452 to the robot
controller, telling that the safety controller is synchronized to its mechanical units, and
continues with its regular operation.

Settings
The following settings need to be configured for Cyclic Sync Check:
• Sync cycle time, 12-720 hours.
• Pre-warning time, 1-11 hours.
• Angles and positions of robot (and additional axes) at sync position.
How to define these settings is described in Set sync position on page 42.
© Copyright 2006-2010 ABB. All rights reserved.
Virtual output signals from main computer
A virtual output signal is set when the prewarning time has expired. Another virtual signal
will correspond to the sync status. See also .

Limitations
• The safe sync position must be within reach for the robot. It must not be a singularity,
that is all six axis must have unique positions.

Related information
Synchronization guidelines for Cyclic Sync Check on page 55.

18 3HAC027709-001 Revision: E
 2 Electronic Position Switches functions
2.3. Software Sync Check

2.3. Software Sync Check

Software Sync Check

Software Sync Check is a function that makes sure that the robot calibration is correct. If
wrong robot calibration easily can be detected by the application, then it is generally possible
to execute the synchronization check by software. In that case it is done when required, not
cyclically.

Functionality
Software synchronization is performed by a safety user, who runs the service routine
SoftwareSync. How to run the service routine is described in section Use service routine to
perform synchronization on page 57.
If the safety controller has not been synchronized before, and the synchronization attempt was
unsuccessful, the user has to check and confirm on the FlexPendant that both the robot
controller and the safety controller have the same opinion about robot axes positions.

Settings
The following settings need to be configured for Software Sync Check:
• Angles and positions of robot (and additional axes) at sync position.
How to define these settings is described in Set sync position on page 42.

Virtual output signals from main computer

A virtual output signal corresponds to the sync status. See .

Limitations
Software Sync Check is only available for EPS board 3HAC026271-001 revision 06 or later.

Related information
Synchronization guidelines for Software Sync Check on page 57.
© Copyright 2006-2010 ABB. All rights reserved.

3HAC027709-001 Revision: E 19
2 Electronic Position Switches functions
2.4. Control Error Supervision

2.4. Control Error Supervision

Control Error Supervision

Control Error Supervision is a function that monitors the difference between the reference
value and the measured value of the motor position of each axis. Control Error Supervision
is required to ensure the accuracy in the monitoring functions.

Supervision functionality
The control error (servo lag) is the absolute value of the difference between the reference
value and the measured value of the motor position of each axis.
Control Error Supervision is activated automatically after the safety controller has been
synchronized with the robot position.
When Control Error Supervision trips the following happens:
• All output signals go low.
• An elog message (20454) is sent to the robot controller.
• A new synchronization is required.

Illustration of control error

en0700000723

Function activation

© Copyright 2006-2010 ABB. All rights reserved.

Control Error Supervision is always active. It can only be relaxed by Operational Safety
Range.

Dependencies to other functions

If Operational Safety Range is active, then Control Error Supervision is relaxed according to
user definitions.

Settings
Control Error Supervision settings are only required for additional axes.
For additional axes, the following settings need to be configured:
• Servo Lag
• Servo Delay Factor
How to define these settings is described in Configure additional axis on page 36.

Related information
Operational Safety Range on page 21.

20 3HAC027709-001 Revision: E
 2 Electronic Position Switches functions
2.5. Operational Safety Range

2.5. Operational Safety Range

Operational Safety Range

Operational Safety Range relaxes the monitoring of the servo lag if ALL configured axes are
within a defined axis range.

Functionality
Operational Safety Range is a special definition of an axis range that relaxes the Control Error
Supervision (servo lag) to a higher value if ALL configured axes are within (inclusive) the
defined axis range. It can be used, for instance, in machine tending, when the servo loop gain
is reduced (soft servo) or during Force Control.
If the robot is within the defined range, then the safety level is considered to be operationally
safe rather than occupationally safe. That means it is not safe for personnel to be in the range
defined for Operational Safety Range.
To activate the relaxed control error, all of the following conditions must be true:
• The reference values for ALL configured axes must be within the range defined by the
Operational Safety Range function.
• The measured values for ALL configured axes must be within the range defined by the
Operational Safety Range function.
The function is automatically activated after the safety controller has been synchronized with
the robot position. No dynamic activation is possible.
Up to 7 axes can be monitored simultaneously.

Settings
The following settings need to be configured for Operational Safety Range:
• Axis range definition for each axis, physical position in degrees or mm on arm side.
• Permissible control error for each axis, in degrees or mm on arm side.
The definition of axis range consists of:
© Copyright 2006-2010 ABB. All rights reserved.

• Minimum axis limit (degrees or mm).

• Maximum axis limit (degrees or mm).
How to define these settings is described in Configure the Operational Safety Range on page
41.

Related information
Control Error Supervision on page 20.

Continues on next page

3HAC027709-001 Revision: E 21
2 Electronic Position Switches functions
2.5. Operational Safety Range

Continued

Examples
This example shows a robot with defined axis ranges for axes 2 and 3. The function
Operational Safety Range monitors if axis 2 is within the range x2 and if axis 3 is within the
range x3. As long as the measured values and the reference values for both axes are within
these ranges, the Control Error Supervision is relaxed.

xx0600003319

© Copyright 2006-2010 ABB. All rights reserved.

22 3HAC027709-001 Revision: E
 3 Installation
3.1.1. I/O connector data

3 Installation
3.1 Hardware installation

3.1.1. I/O connector data

Location

xx0600003209

A I/O Connector on the safety controller

B Plug contact
C Power supply
D 5 safe outputs (10 signals)
© Copyright 2006-2010 ABB. All rights reserved.

E Sync switch (dual signal)

I/O connector pin descriptions

en0600003222

Continues on next page

3HAC027709-001 Revision: E 23
3 Installation
3.1.1. I/O connector data

Continued

Pin Signal Description

1 Power input 24 V Plus pole for power to the I/O connector.
2 Power input 0 V Minus pole for power to the I/O connector.
3 MAR signal 1A Monitored high side output signal for Monitor Axis Range. The
signals are configured in the EPS Configuration Wizard.
Switches on or off 24 Volts supplied by the power input (pin 1 and
2).
4 MAR signal 1B -"-
5 MAR signal 2A -"-
6 MAR signal 2B -"-
7 MAR signal 3A -"-
8 MAR signal 3B -"-
9 MAR signal 4A -"-
10 MAR signal 4B -"-
11 MAR signal 5A -"-
12 MAR signal 5B -"-
13 Sync switch input Input signal for synchronization check.
signal 1A A synchronization pulse is defined by this signal connected to
ground (0 V).
When there is no synchronization pulse, this signal should be open
or connected to 24 V.
14 Sync switch input Input signal for synchronization check.
signal 1B A synchronization pulse is defined by this signal connected to 24 V.
When there is no synchronization pulse, this signal should be open
or connected to ground (0 V).

Voltage and current data

Description Min value Max value

Voltage for I/O power supply 21.6 V 26.4 V
Voltage for low value on digital input -3 V +2 V
Voltage for high value on digital input +21 V +27 V © Copyright 2006-2010 ABB. All rights reserved.

Max output current by one digital output - 0.8 A

Sum of output current by all digital outputs - 2.2 A

Signal redundancy
All output signals have redundancy as a safety measure, i.e. output signal 1A and output
signal 1B should always be identical. If they differ for more than approximately 100 ms, there
is an internal error. Always handle this error by stopping all mechanical units.
The input signal used for sync check uses redundancy where input signal 1A is the inverted
signal of input signal 1B. Here you have the choice of only using input signal 1B, but this
must be defined in the EPS Configuration Wizard.

24 3HAC027709-001 Revision: E
 3 Installation
3.1.2. I/O signals

3.1.2. I/O signals

Using the input signal

The safety controller requires an input signal for Cyclic Sync Check. Connect a signal from
a sync switch. When the robot is in its sync position, pin 14 should be set high and pin 13
should be set low. If dual channel wiring is not used, connect only pin 14.
Principle for sync switch connected to the safety controller using dual input signal:

en0600003304

Principle for sync switch connected to the safety controller using single input signal:

en0600003305

Additional axis
When synchronizing an additional axis and a robot, use a separate sync switch for the
additional axis and connect it in series with the sync switch for the robot.
© Copyright 2006-2010 ABB. All rights reserved.

en0600003312

Exception: If the additional axis is a track motion or a robot-held tool, it can use the same
sync switch as the robot. These types of additional axes can be treated as a 7th robot axis.
Note that this makes it more complicated to find a non-singularity sync check position.

Continues on next page

3HAC027709-001 Revision: E 25
3 Installation
3.1.2. I/O signals

Continued

Using the output signals

The safety controller has 5 dual output signals that indicate if all axes are inside the defined
range. When performing the installation, it is the responsibility of the installation personnel
to make sure that these signals will stop the robot if an axis goes out of its allowed range.
Connect the output signals to a PLC, or similar equipment, that can stop the robot when a
signal goes low.
The safety controller works with redundancy (dual processors, dual output signals, etc.). Safe
robot behavior (inside defined range) is indicated by high value on the output signal, so that
a power failure will be interpreted as unsafe and stop the robot.
Make sure that the output signals from the safety controller are connected in such a way that
the redundancy is preserved (if one of the dual signals goes from 24 V to 0 V, the system
should stop). Also make sure that a low signal always represents the safe state that stops the
robot, so that a power failure on the PLC also stops the robot.
What the different output signals indicate is defined in the EPS Configuration Wizard, see
EPS Configuration Wizard on page 34.

Test pulses on output signals

Test pulses during start-up

At the beginning of each system start-up there are test pulses on the outputs present. This must
be considered at installation and commissioning so that it is not interpreted as an axis being
outside its defined range.

Test pulses during operation

Due to safety reasons there are test pulses on the output signals during operation. The pulses
have a maximum length of 2 ms and are only present when the outputs are high. This must
be considered at installation and commissioning so that it is not interpreted as an axis being
outside its defined range. Make sure the PLC or safety relay does not react on pulses shorter
than 2 ms.

Max inductive load © Copyright 2006-2010 ABB. All rights reserved.

The inductive load on the outputs must be less than 200 mH.

Continues on next page

26 3HAC027709-001 Revision: E
 3 Installation
3.1.2. I/O signals

Continued

Principle for connecting signals to PLC

en0600003223

Using a safety relay

An output signal from the safety controller can be connected to a safety relay which can stop
the robot immediately. This can be implemented by letting the safety relay open the circuit
for, for example, the general stop signal 1 and 2 on the panel board of the IRC5 controller.
© Copyright 2006-2010 ABB. All rights reserved.

en0600003306

Continues on next page

3HAC027709-001 Revision: E 27
3 Installation
3.1.2. I/O signals

Continued

Connect to Auto Stop on the panel board

A signal from a safety relay or a PLC can be connected to the Auto Stop signal of the panel
board in the IRC5 controller. If the Auto Stop circuit is open, the robot cannot move in auto
mode. However, it is still possible to move the robot in manual mode.

en0600003336

Connect to General Stop on the panel board

A signal from a safety relay or a PLC can be connected to the General Stop signal of the panel
board in the IRC5 controller. If the General Stop circuit is open, the robot cannot move either
in auto or manual mode.
Note that when the General Stop circuit is open, there is no way of jogging the robot back to
the defined range. Therefore, using the General Stop signal requires an additional switch to
close the circuit while jogging the robot back inside the defined range. For safety reasons, the
switch used to override the relay needs to be of safety level category 3 or higher according to
EN 954−1 (safety level is dependant of the required safety level for the installation). Use, for
example, a dead man’s handle.

© Copyright 2006-2010 ABB. All rights reserved.

en0600003337

28 3HAC027709-001 Revision: E
 3 Installation
3.1.3. Power supply

3.1.3. Power supply

Use IRC5 ground and isolate the I/O

The safety controller requires one system power supply and one I/O power supply. These two
power sources must have a common ground potential.
The I/O connector of the PLC must also have the same ground potential as the safety
controller (i.e. as the IRC5 cabinet). Since the ground potential of the PLC is not necessarily
the same as for IRC5, the I/O signals must be galvanically isolated from the PLC cabinet.

Example of isolated I/O

In this example the I/O connector of the PLC is isolated from the PLC and receives its power
supply from the same source as the safety controller’s I/O connector. The Sync switch also
uses the same power supply. The ground of the I/O power supply is connected to the ground
of the system power supply (i.e. the ground of the IRC5 power supply).
This setup is usable up to a distance of 30 meters between the IRC5 cabinet and the PLC.

en0600003225

If you use a single cabinet IRC5 controller, the I/O power supply can use an internal power
supply, located in the IRC5 cabinet. If you use a dual cabinet IRC5 controller, you need to use
© Copyright 2006-2010 ABB. All rights reserved.

an external power source.

Continues on next page

3HAC027709-001 Revision: E 29
3 Installation
3.1.3. Power supply

Continued

Example with safety bus

A solution with a safety bus will automatically solve the problem of galvanic isolation from
the PLC. It will also allow the distance between the IRC5 and PLC to be greater than 30
meters. The maximum distance for this solution depends on the safety bus used by the PLC.

en0600003226

© Copyright 2006-2010 ABB. All rights reserved.

30 3HAC027709-001 Revision: E
 3 Installation
3.1.4. SMB connection for additional axis

3.1.4. SMB connection for additional axis

About SMB connections

For Electronic Position Switches, you can only use SMB link 1. This means that you can only
connect one additional axis. The additional axis must be connected to the robot SMB or an
additional SMB on link 1.

Connect additional axis directly to the robot

Connect the SMB cable from the additional axis to the SMB connection on the robot. By
connecting the additional axis here, it will be read as axis 7 on the SMB cable from the robot
to the safety controller.
© Copyright 2006-2010 ABB. All rights reserved.

xx0600003339

A SMB connection on robot base, where the additional axis can be

connected as the 7th axis in SMB link 1.

This contact may be present for IRB 660, IRB 66XX and IRB 7600.
A similar contact exists for IRB1600, but is on a cable coming out of the robot base.
For other robot models, there is no prepared contact for a 7th axis on SMB link 1.

3HAC027709-001 Revision: E 31
3 Installation
3.2.1. Installing required software

3.2 Software installation

3.2.1. Installing required software

NOTE!
RobotStudio must be of the same version or later than the RobotWare used.

Install RobotStudio
The EPS Configuration Wizard is installed with RobotStudio. Install RobotStudio as
described in Operating manual - Getting started, IRC5 and RobotStudio.
RobotStudio can be installed with the options Minimal or Full, and the EPS Configuration
Wizard is installed with either of these installation options. The EPS Configuration Wizard is
available in the Online tab of RobotStudio.

Create a robot system

Create a robot system as described in Operating manual - Getting started, IRC5 and
RobotStudio. Use a drive module key that gives access to Electronic Position Switches and
select the option 810-1 Electronic Position Switches.

Configure IRC5
Configure the robot system (coordinate systems, tools, work objects, robot cell layout, etc.)
before configuring Electronic Position Switches.

© Copyright 2006-2010 ABB. All rights reserved.

32 3HAC027709-001 Revision: E
 4 Configuration
4.1. Create a safety user

4 Configuration
4.1. Create a safety user

Why do you need a safety user

Configuring Electronic Position Switches is normally done initially and then never changed
(until the robot is used for a different purpose). It is vital that the safety configuration is not
changed by unauthorized personnel. It is therefore recommended to have specific safety users
who are granted the right to configure Electronic Position Switches.

Prerequisites
You must have created a robot system with the option 810-1 Electronic Position Switches.
How to create a system is described in Operating manual - RobotStudio.

How to create a safety user

Action
1. Request write access from RobotStudio:
In the Online browser, right-click on the controller and select Request Write Access.
If in manual mode, confirm the write access on the FlexPendant.
2. Start UAS Administrative Tool:
In the Online browser, right-click on the controller and select Authenticate and then
Edit User Accounts.
3. Select the tab Groups.
4. Click Add and type a name for the group, e.g. "Safety".
5. Select the group you have created and check Safety Controller configuration and
Write access to controller disks.
The group may have more grants, but these two are the minimum required.
6. Select the tab Users.
7. Click Add and type a name for the user, e.g. "SafetyUser", and a password for the user.
8. Select the user you have created and check the group you previously created, e.g.
© Copyright 2006-2010 ABB. All rights reserved.

Safety.
The user may belong to more groups.
9. Click OK.
10. Restart the controller.

TIP!
Create different user groups as described in Operating manual - RobotStudio, section
Managing the user authorization system. Make sure that one administrator has the grant
Manage UAS settings and that the regular users (operators, Default user, etc.) do not have the
grants Safety Controller configuration, Write access to controller or Manage UAS settings.

3HAC027709-001 Revision: E 33
4 Configuration
4.2. EPS Configuration Wizard

4.2. EPS Configuration Wizard

What is the EPS Configuration Wizard

In the EPS Configuration Wizard you configure the ranges and tolerances used by the
functions of Electronic Position Switches.

Prerequisites
Only a safety user is allowed to download a configuration. A safety user must be created
before configuring Electronic Position Switches (see Create a safety user on page 33).

Start the EPS Configuration Wizard

Action
1. In RobotStudio’s Online browser, right click on the controller and select Authenticate
and then Login as Different User.
2. Select the safety user, e.g. SafetyUser. Type the password and click Login.
3. Select the controller you wish to configure. In the Online browser, right click on the
controller and select Safety Configuration and then EPS Wizard.
In the menu Tools, select EPS Configuration Wizard.
4. Click Next.

Select drive module

Select if you are configuring a single robot system or a MultiMove system.
If you configure a MultiMove system you must select which drive module you want to
configure. The configuration procedure must be repeated for each drive module. For
information about configuration of a MultiMove system, see Configuration for MultiMove on
page 48.

© Copyright 2006-2010 ABB. All rights reserved.

en0600003210

Click on Next.

Continues on next page

34 3HAC027709-001 Revision: E
 4 Configuration
4.2. EPS Configuration Wizard

Continued

Select configuration format

In the EPS Wizard you need to select the configuration format. Version 1.1.0 is the standard
format and the recommended selection, which also appears as a default setting in the dialog
box. In some rare cases, for example when you receive a new EPS unit as a replacement of
an old unit that is supporting the version 1.0.0 format, select the version 1.0.0.

Select mechanical unit

Check the mechanical unit you want to configure.
If you want to configure a robot and an additional axis, select both. There is a maximum of 7
axes per drive module, so if you configure a robot you cannot configure more than one
additional axis for that drive module.
If one axis is used as an independent axis, there can be no monitoring of that axis. Under
Independent Axis, you have the following choices regarding the option Independent Axes
[610-1]:
• None: Monitoring possible on all axes, but you cannot use the option Independent
Axes.
• Axis_4: Monitoring is possible on axes 1-3, but not on axes 4-6. You can now use the
option Independent Axes for axis 4 and/or axis 6.
• Axis_6: Monitoring is possible on axes 1-5, but not on axis 6. You can now use the
option Independent Axes for axis 6, but not for axis 4.
It is possible to open an existing configuration and make modifications to it. To get the current
configuration from the controller, click on Get from controller. To get a configuration that
is previously saved to file, click on Load from file.
© Copyright 2006-2010 ABB. All rights reserved.

en0600003211

Click on Next.

Continues on next page

3HAC027709-001 Revision: E 35
4 Configuration
4.2. EPS Configuration Wizard

Continued

Configure additional axis

If an additional axis was checked in the previous step, specify configuration parameters for
the additional axis (many of them are the same as some system parameters defined in the topic
Motion):
• Logical Axis - see system parameter Logical Axis in type Joint.
• Servo Lag - calculated lag (in radians on motor side) for the additional axis.
• Servo Delay - calculated delay factor (number of 4 ms units) when moving the
additional axis.
• Motor Commutation - see system parameter Commutator Offset in type Motor
Calibration.
• Link - see system parameter Measurement Link in type Measurement Channel.
• Node - see system parameter Measurement Node in type Measurement Channel.
• Board Position - see system parameter Board Position in type Measurement Channel.
• Upper Limit - upper limit of the axis (in mm or degrees on arm side, depending on if
Rotating Move is checked). See system parameter Upper Joint Bound in type Arm,
but notice that Upper Joint Bound is specified in radians on motor side.
• Lower Limit - lower limit of the axis (in mm or degrees on arm side, depending on if
Rotating Move is checked). See system parameter Lower Joint Bound in type Arm,
but notice that Lower Joint Bound is specified in radians on motor side.
• Transmission Joint - see system parameter Transmission Gear Ratio in type
Transmission.
• Rotating Move - should be checked for rotational additional axis and not checked for
linear additional axis.

© Copyright 2006-2010 ABB. All rights reserved.

en0600003212

Click on Next.
NOTE!
Accurate values for the additional axis are important to avoid problems with too large servo
lag.

Continues on next page

36 3HAC027709-001 Revision: E
 4 Configuration
4.2. EPS Configuration Wizard

Continued

Configure motor calibration offsets

The first time you configure a new robot you must provide the motor calibration offsets.
These values are required to achieve a high precision in the monitoring of the axes positions.
The calibration offset parameters are found in the system parameter Calibration Offset in type
Motor Calibration, topic Motion.
To set the motor calibration values, check the box Enable Calibration Offset Configuration
and then press the button Get From Controller or enter the values.
If the motor calibration values have already been set and downloaded to the controller, leave
Enable Calibration Offset Configuration unchecked and continue.

en0600003213

Click on Next.
NOTE!
Observe that the motor calibration values need to be set both for the robot controller and for
Electronic Position Switches. Therefore this dialog must be filled in even if the calibration
offsets already are set in the robot controller. Every time the calibration values are changed
© Copyright 2006-2010 ABB. All rights reserved.

in the robot controller they also need to be changed in the EPS Configuration Wizard. Also
remember to download the calibration file as described in Save and download to controller
on page 42.

Continues on next page

3HAC027709-001 Revision: E 37
4 Configuration
4.2. EPS Configuration Wizard

Continued

Configure the Monitor Axis Range

You can define up to five different safe output signals. For each signal you can define a range
for each axis. Select output signal to configure by clicking on the corresponding tab.
For each axis where you want to define an axis range, check the box Enable and set the range
by dragging the markers along the slide bar. The defined range is marked green on the scale.
By checking the box Invert for an axis the range between the markers is now outside the
defined range, shown as red on the scale.
The output signal is high when all axes are within the defined range, and low when one (or
more) axis is outside.

en0600003214

Click on Next.

Inverted function
By checking Invert function, a robot position is only considered hazardous if all axes are
inside their defined ranges.
Not inverted axis ranges and not inverted function:

© Copyright 2006-2010 ABB. All rights reserved.

If neither the axis ranges or the function is inverted, the safe zone (where no signal is set low)
is when all axes are inside their defined ranges. This safe zone corresponds to the white area
in the right picture below.

xx0700000436

Continues on next page

38 3HAC027709-001 Revision: E
 4 Configuration
4.2. EPS Configuration Wizard

Continued

Not inverted axis ranges and inverted function:

If the axis ranges are not inverted, but the function is inverted, the safe zone (where no signal
is set low) is everywhere except where all axes are inside their defined ranges. This safe zone
corresponds to the white area in the right picture below.

xx0700000438

Inverted axis ranges and not inverted function:

If the axis ranges are inverted but not the function, the safe zone (where no signal is set low)
is when all the axes are inside their defined ranges, i.e. when none of the axes are inside the
undefined range in the middle. This safe zone corresponds to the white area in the right
picture below.
© Copyright 2006-2010 ABB. All rights reserved.

xx0700000437

Continues on next page

3HAC027709-001 Revision: E 39
4 Configuration
4.2. EPS Configuration Wizard

Continued

Inverted axis ranges and inverted function:

If the axis ranges are inverted and the function is inverted, the safe zone (where no signal is
set low) is when one of the axes is inside the undefined range in the middle. This safe zone
corresponds to the white area in the right picture below.

xx0700000439

Example of how to use the inverted function:

A robot may have two working areas defined by axis ranges for axis 1 (MAR1 and MAR2).
To be able to move between these two working areas, axis 1 may be in the range in between,
under the condition that axis 2 is pointing up or backwards. By defining MAR3 as axis one
being between MAR1 and MAR2 and axis 2 pointing forward, and inverting the function, the
MAR3 signal will go low if both axis 1 and axis 2 are pointing straight forward.

Invert function

© Copyright 2006-2010 ABB. All rights reserved.

xx0700000443

Continues on next page

40 3HAC027709-001 Revision: E
 4 Configuration
4.2. EPS Configuration Wizard

Continued

xx0700000442

Configure the Operational Safety Range

If using soft servo, the servo lag can easily exceed the limits for the function Control Error
Supervision. In this step of the wizard you can set axis ranges where the tolerance for Control
Error Supervision is higher.
For each axis, set the range where the tolerance should be higher (the red area). Also set how
high the tolerance should be. The tolerance (in degrees on arm side) is specified in Tolerance.
© Copyright 2006-2010 ABB. All rights reserved.

en0600003215

Click on Next.

Continues on next page

3HAC027709-001 Revision: E 41
4 Configuration
4.2. EPS Configuration Wizard

Continued

Set sync position

Jog the robot to the synchronization position used by Cyclic Sync Check or Software Sync
Check and click on Get actual position.
Sync Check Cycle defines the maximum allowed time (in hours) between synchronization
checks.
Before the cycle time has expired, a warning will be shown on the FlexPendant. Pre-warning
defines how long before the cycle time is up this warning should occur.
When the cycle time has expired without a sync check, all output signals will go low.
If a dual input signal is used for the synchronization check, connected to pin X10.5 and X10.6
on the I/O connector, select Dual Channel in the drop-down box. If a single input signal is
used, connected to pin X10.6, select Single Channel. If the Software Sync Check function is
used, select Software Synchronization (only available for EPS board 3HAC026271-001
revision 06 or later).

en0600003216

Click on Next.

© Copyright 2006-2010 ABB. All rights reserved.

TIP!
Save the synchronization position as a robtarget in your RAPID program. Also, in the
RAPID program, create a timer and program the robot to perform a synchronization. Use a
shorter cycle than the configured Check Cycle minus Pre-Warning to avoid warnings on the
FlexPendant.

Save and download to controller

From the last dialog in the wizard, you can:
• Save the motor calibration file. If no motor calibration has been performed, this button
is grayed out.
• Save the safety configuration file.
• Download the motor calibration to the controller.
• Download the safety configuration to the controller.

Continues on next page

42 3HAC027709-001 Revision: E
 4 Configuration
4.2. EPS Configuration Wizard

Continued

en0600003217

Save motor calibration file

Save the motor calibration file so that you can load the values later, if required:
1. Click on Save to File under Motor Calibration. If no motor calibration has been
performed, this button is grayed out.
2. Select a file name and location for the file.

Save safety configuration file

Save the safety configuration file so that you can load the values later, if required:
1. Click on Save to File under Safety Configuration.
2. Select a file name and location for the file.

Download motor calibration to controller

Download the motor calibration to the controller:
1. Click on Download to Controller under Motor Calibration. If no motor calibration
© Copyright 2006-2010 ABB. All rights reserved.

has been performed, this button is grayed out.

2. A dialog informs you when the download is complete. Click OK.

Download safety configuration to controller

Download the safety configuration to the controller:
1. Click on Download to Controller under Safety Configuration.
2. A report of the safety configuration is shown, see picture below. The report can be
saved by clicking the Save button. By default the report is saved in the folder
C:\Documents and Settings\Username\Local Settings\Application Data on the
computer where EPS Configuration Wizard is running. The report can be printed by
right-clicking and selecting Print (it is recommended to print the report since it should
be used when validating the configuration as described in Validate the configuration
on page 52). Click OK to close the report.

Continues on next page

3HAC027709-001 Revision: E 43
4 Configuration
4.2. EPS Configuration Wizard

Continued

3. A dialog informs you when the download is complete. Click OK.

4. A PIN code for the configuration file is shown (which is also included in the safety
report). Write this PIN code down. You will need it when activating the safety
configuration on your system, see Activating the safety configuration on page 50.

en0600003363

Finish the EPS Configuration Wizard

1. Click on the button Finish.
2. Restart the controller (warm start).

© Copyright 2006-2010 ABB. All rights reserved.

44 3HAC027709-001 Revision: E
 4 Configuration
4.3. Configuration for robots with non-zero calibration position

4.3. Configuration for robots with non-zero calibration position

Calibration position axis angles

Some robots have calibration positions with one or more axis angles that is not zero.

xx0900000217

A Calibration marks, axis 3

B Calibration position, axis 1

Examples of non-zero calibration positions:

Calibration position values

Robot type Axis 1 Axis 2 Axis 3 Axis 4 Axis 5 Axis 6

IRB 5400-12 - Slim arm 40° 0° 58.7° 0° 0° 0°
IRB 5400-22 - Process arm 40° 0° 60° 0° 0° 0°

To find the exact axis angles for a robot, look at the system parameter Calibration Position
in topic Motion, type Arm.
© Copyright 2006-2010 ABB. All rights reserved.

Effects on the EPS configuration

For robots with non-zero calibration position it is necessary to perform manual corrections
during the EPS configuration. Follow the description in EPS Configuration Wizard on page
34 but adjust axis limits and sync position according to the following descriptions.

Adjust axis limits

Adjust the axis limits by subtracting the calibration offset value from the real axis limits you
want to set up.

Example
A robot has a calibration position with a 40° calibration offset for axis 1.

Limit Desired axis limit Configured axis limit

Low 10° 10° - 40° = -30°
High 75° 75° - 40° = 35°

Continues on next page

3HAC027709-001 Revision: E 45
4 Configuration
4.3. Configuration for robots with non-zero calibration position

Continued

en0900000220

Adjust the sync position

Adjust the axis degree values of the sync position by subtracting the calibration offset.

Example
A robot has a calibration offset of 40° for axis 1 and 60° for axis 3.
Click on Get actual position and get the following values:

© Copyright 2006-2010 ABB. All rights reserved.

en0900000221

Continues on next page

46 3HAC027709-001 Revision: E
 4 Configuration
4.3. Configuration for robots with non-zero calibration position

Continued

Adjust the sync position by subtracting 40° from axis 1 and 60° from axis 3:

en0900000222
© Copyright 2006-2010 ABB. All rights reserved.

3HAC027709-001 Revision: E 47
4 Configuration
4.4. Configuration for MultiMove

4.4. Configuration for MultiMove

Configuration file corresponding to drive module

In a MultiMove system there is one safety controller for each drive module that uses
Electronic Position Switches. A configuration file must be downloaded to each safety
controller. It is important that the configuration file downloaded to a safety controller contains
the configuration for those mechanical units controlled by that drive module.

MultiMove system with 4 safety controllers

en0600003310

A Safety controller 1 placed in the controller cabinet. Used to monitor robot 1

and additional axis 1.
B Safety controller 2 placed in drive module 2. Used to monitor robot 2.
C Safety controller 3 placed in drive module 3. Used to monitor robot 3. © Copyright 2006-2010 ABB. All rights reserved.
D Safety controller 4 placed in drive module 4. Used to monitor robot 4 and
additional axis 2.
E Controller cabinet
F Drive module 2
G Drive module 3
H Drive module 4
I Robot 1
J Robot 2
K Robot 3
L Robot 4
M Additional axis 1
N Additional axis 2

Continues on next page

48 3HAC027709-001 Revision: E
 4 Configuration
4.4. Configuration for MultiMove

Continued

How to configure EPS for MultiMove

When configuring a MultiMove system, follow the same procedure as described in EPS
Configuration Wizard on page 34 for the first safety controller (in the example above: robot
1 and additional axis 1). When the configuration file is downloaded to the controller, click on
Finish and then start the EPS Configuration Wizard again. Repeat this procedure once for
every safety controller and make sure the selected drive module corresponds to the
mechanical units configured.

en0600003311

You will get one unique PIN code for each safety configuration file. Write these PIN codes
down.
NOTE!
Make sure that, for every configuration file, the configured mechanical units belong to the
selected drive module. The EPS Configuration Wizard will allow you to configure any
mechanical unit for any selected drive unit, but the result will be an unexpected behavior.
© Copyright 2006-2010 ABB. All rights reserved.

3HAC027709-001 Revision: E 49
4 Configuration
4.5. Activating the safety configuration

4.5. Activating the safety configuration

Prerequisite
Before activating the safety configuration you must create the safety configuration file and
remember the PIN code for that file (seeEPS Configuration Wizard on page 34).

Activation procedure

Action
1. When a safety configuration is downloaded to your robot system, the controller must be
restarted (warm start).
2. When the controller starts up, an elog message (20266) will ask for a safety controller
PIN code. Acknowledge this message.
3. Change user on the FlexPendant:
1. On the ABB menu, select Log off.
2. Tap Yes to confirm.
3. Select the safety user, type the password and tap on Login.
4. Make sure the controller is in manual mode.
5. On the FlexPendant:
1. On the ABB menu, tap Control Panel and then Safety Controller.
2. Tap the line and type the PIN code for the safety configuration file (seeEPS Con-
figuration Wizard on page 34). Tap OK.
3. For a MultiMove system, enter one PIN code for each configuration file.
4. Tap OK.

© Copyright 2006-2010 ABB. All rights reserved.

en0600003332

6. When the PIN code is entered, a dialog will tell you if the PIN is correct. Tap Restart in
this dialog and the controller will restart.
If you typed an incorrect PIN code, the controller will restart anyway. Then you must start
over from step 2 of this procedure.

Continues on next page

50 3HAC027709-001 Revision: E
 4 Configuration
4.5. Activating the safety configuration

Continued

Action
7. When the controller starts up, an elog message (20451) will say that a synchronization
is required. Acknowledge this message.
Perform a sync check. Note that the output signals are low until the sync check is
performed. This means that if you have connected to the Auto Stop on the panel board,
sync check must be performed in manual mode. If you have connected to General Stop,
the circuit must be closed in a safe way during the sync check. SeeConnect to Auto Stop
on the panel board on page 28andConnect to General Stop on the panel board on page
28.
When the sync check is performed, an elog message (20452) will say that the robot is
synchronized. The Electronic Position Switches functionality is now active.

Safety configuration active until cold start

Once activated, the safety configuration is constantly active. Neither warm start nor i-start of
the controller will affect the safety configuration. However, a cold start of the controller will
remove all safety configurations.
© Copyright 2006-2010 ABB. All rights reserved.

3HAC027709-001 Revision: E 51
4 Configuration
4.6. Validate the configuration

4.6. Validate the configuration

DANGER!
An Electronic Position Switches configuration must always be validated to verify that the
desired safety is achieved. If no validation is performed, or the validation is inadequate, the
configuration cannot be relied on for personal safety.
TIP!
Do the following checks before you start the validation procedure:
1. Check the I/O signals according to section I/O connector data on page 23.
2. Create a safety user in the user authorization system and log in as a safety user.
3. Carry out the synchronization procedure and connect the sync switch according to
description in section I/O connector data on page 23.
4. Set up the synchronization position in the SafeMove Configurator. Also carry out a
calibration offset.
5. Run the service routine for the function Cyclic Break Check.
6. Start the validation procedure.

About the validation

The safety configuration must be validated by the customer. This validation must be
performed every time a safety controller is configured. It is recommended that the ABB
Safety Configuration Report is printed and used as a formal document for the verification.
The document has rows where dates and signatures should be written when the configuration
is verified.

© Copyright 2006-2010 ABB. All rights reserved.

en0700000103

Continues on next page

52 3HAC027709-001 Revision: E
 4 Configuration
4.6. Validate the configuration

Continued

How to validate
Move the robot in and out of the configured zones and make sure all signals behave the way
they are supposed to.
© Copyright 2006-2010 ABB. All rights reserved.

3HAC027709-001 Revision: E 53
4 Configuration
4.7. Viewing the configuration on the FlexPendant

4.7. Viewing the configuration on the FlexPendant

Accessing the configuration information

Action
1. On the ABB menu, tap Control Panel and then Safety Controller.
2. Tap the line for the safety controller you wish to view.
3. Tap View.

Configuration presentation

© Copyright 2006-2010 ABB. All rights reserved.

en0900001052

54 3HAC027709-001 Revision: E
 5 Synchronization
5.1. Synchronization guidelines for Cyclic Sync Check

5 Synchronization
5.1. Synchronization guidelines for Cyclic Sync Check

Dual channel or single channel

Verify that the right type of synchronization (dual channel or single channel) was selected in
the configuration.
See Set sync position on page 42.

Uniquely defined position

The robot position for the sync check must be chosen so that the position of the robot axes are
unambiguously defined. One way to make sure the sync check position is well-defined for all
axes is to use the instruction MoveAbsJ to move to the sync position. See Technical reference
manual - RAPID Instructions, Functions and Data types.
Note that the sync position should be within the axis ranges configured for Monitor Axis
Range to avoid that the robot stops on the way to the sync position.

Small sync switch surface

For physical synchronization, the sync switch surface that the robot touches must be small.
The surface of the tool touching the sync switch must also be small. If any robot axis moves
one motor revolution, the robot must be out of reach for the sync switch.

Always activate sync switch in the same way

For physical synchronization, always use the same tool. The robot should always touch the
sync switch with the same point on the tool.

Create RAPID program for synchronization

Create a RAPID program to perform a synchronization.This can be initiated from a PLC or
the main RAPID program. Perform the synchronization when the digital output signal
PSC1CSPREWARN goes high. The PSC1CSPREWARN signal is only activated when Dual
© Copyright 2006-2010 ABB. All rights reserved.

channel or Single channel synchronization has been selected in the configuration. When
Software synchronization has been selected, it is only necessary to do a synchronization if
SafeMove or the robot controller has become asynchronous.
Write the program so that the robot first goes to a position close to the sync switch and then
approach it slowly from the desired direction. If the approach is too fast, the accuracy of the
robot position may be too low.

Continues on next page

3HAC027709-001 Revision: E 55
5 Synchronization
5.1. Synchronization guidelines for Cyclic Sync Check

Continued

Example
In a system module elog 20470 is caught and an output signal is set. This signal can be used
by a PLC or a RAPID program.

MODULE SYNCINIT (sysmodule)

LOCAL VAR intnum irSyncPreWarn;

LOCAL TRAP tpSyncPreWarn

setDO doSyncPreWarn, 1;
TPWrite "SYNCHRONIZATION PRE WARNING. ";
RETURN;
ENDTRAP

PROC initSync()
CONNECT irSyncPreWarn WITH tpSyncPreWarn;
! 20470 SC 1 Synchronization Pre-warning
IError SYSTEM_ERR\ErrorId := 470,TYPE_ALL,irsyncPreWarn;
ENDPROC

ENDMODULE

Synchronization on closing edge

The synchronization is executed 1 second after the sync switch is closed. The 1 second delay
is implemented to avoid synchronization pulses before the manipulator has stopped in its
synchronization position.
Nothing happens when the sync switch is opened again.

Cyclic Sync Check output

Virtual output signals can be connected to physical output signals for communication with a
PLC. See also Virtual signals on page 61.

© Copyright 2006-2010 ABB. All rights reserved.

56 3HAC027709-001 Revision: E
 5 Synchronization
5.2. Synchronization guidelines for Software Sync Check

5.2. Synchronization guidelines for Software Sync Check

Selecting software synchronization

Verify that Software Synchronization was selected in the configuration.
See Set sync position on page 42.

Uniquely defined position

The robot position for the sync check must be chosen so that the position of the robot axes are
unambiguously defined. One way to make sure the sync check position is well-defined for all
axes is to use the instruction MoveAbsJ to move to the sync position. See Technical reference
manual - RAPID Instructions, Functions and Data types.
Note that the sync position should be within the axis ranges configured for Monitor Axis
Range to avoid that the robot stops on the way to the sync position.

Use easily verified sync position

Select a sync position where it is easy to verify the position of the robot axes. It is helpful to
use a position where the TCP touches a spike or something where it is easy to see if the robot
is in the correct position or not.

Use service routine to perform synchronization

WARNING!
If the robot position is not visually verified, to make sure all robot axes are in correct position,
the synchronization can jeopardize the safety.

Action
1. Move the robot to its sync position
(for example with MoveAbsJ).
2. Visually verify that the robot is in If an axis is in wrong position, the revolution
its sync position (all axes must be counters are most likely incorrect.
in correct position).
© Copyright 2006-2010 ABB. All rights reserved.

3. Log in as a safety user.

4. In the program view, tap Debug
and select Call Routine.

en0400001109

5. Select the service routine Soft-

wareSync and tap Go to.

Continues on next page

3HAC027709-001 Revision: E 57
5 Synchronization
5.2. Synchronization guidelines for Software Sync Check

Continued

Action
6. Follow the instructions in the
service routine.

© Copyright 2006-2010 ABB. All rights reserved.

58 3HAC027709-001 Revision: E
 6 Running in production
6.1. Reaction time

6 Running in production
6.1. Reaction time

Output signal response time

When a robot axis moves outside its configured range, the reaction time until the safe digital
output signal goes low is maximum 4 ms.
© Copyright 2006-2010 ABB. All rights reserved.

3HAC027709-001 Revision: E 59
6 Running in production
6.2. Recovery after safety violation

6.2. Recovery after safety violation

Auto Stop or General Stop

When an axis is outside its defined range, Electronic Position Switches sets an output signal
low. What is done with this signal depends on the installation. One recommended way of
connecting the output signals is so that they affect the Auto Stop signal or the General Stop
signal. See Connect to Auto Stop on the panel board on page 28 and Connect to General Stop
on the panel board on page 28.

Recovery from Auto Stop

If an axis is outside its defined range and causes an Auto Stop:
1. Switch the controller to manual mode.
2. Jog the robot back within the defined ranges for all axes.
As soon as all axes are within their defined range, the Auto Stop is released and you can
continue.

Recovery from General Stop

If an axis is outside its defined range and causes a General Stop:
1. Switch the controller to manual mode.
2. Safely close the safety circuit (e.g with a dead man’s handle) while jogging the robot back
within the defined ranges for all axes.
As soon as all axes are within their defined range, the General Stop is released and you
can continue.

© Copyright 2006-2010 ABB. All rights reserved.

60 3HAC027709-001 Revision: E
 6 Running in production
6.3. Virtual signals

6.3. Virtual signals

What is a virtual signal

The virtual signals can be viewed on the FlexPendant, but they are communicated over the
Ethernet connection and not a physical signal. They show the status of signals from the safety
controller and cannot be set by the user, which is why the are represented as digital inputs
(DI).
The virtual signals can be used by a RAPID program to produce helpful hints to the operator
of why the robot has stopped.
WARNING!
The virtual signals must not be used for safety implementation. Only the physical signals can
be used for safety implementation.

List of signals

Signal name Description

PSC1CSC Representation of the input signal from the sync switch to the safety
controller.
PSC1MAR1 Representation of the MAR1 signal from the safety controller.
PSC1MAR2 Representation of the MAR2 signal from the safety controller.
PSC1MAR3 Representation of the MAR3 signal from the safety controller.
PSC1MAR4 Representation of the MAR4 signal from the safety controller.
PSC1MAR5 Representation of the MAR5 signal from the safety controller.
PSC1PREWARN Request to do synchronization check. The value is 1 if the prewarning
time for Cyclic Sync Check has expired.

All other virtual signals starting with PSC (Positional Safety Controller) are for internal use.
Do not use them for customer applications.

Signals for MultiMove system

© Copyright 2006-2010 ABB. All rights reserved.

In a MultiMove system there is one set of signals from each safety controller, i.e. from each
drive module that is equipped with a safety controller. Signals from drive module 1 have
names starting with PSC1, signals from drive module 2 have names starting with PSC2, etc.

3HAC027709-001 Revision: E 61
6 Running in production
6.4. Status LED

6.4. Status LED

Location of the status LED

A red/green status LED is placed on the front panel of the safety controller. It indicates the
status of the safety controller.

14

xx0900000242

A Status LED

© Copyright 2006-2010 ABB. All rights reserved.

Status indications

LED indication Description

Solid green Safety controller CPU is running and communication is ok.
Solid red Internal hardware failure. Replace the safety controller.
Flashing green Communication failure or I/O power supply missing.

62 3HAC027709-001 Revision: E
 7 Example application
7.1. Example with two work zones

7 Example application
7.1. Example with two work zones

Assignment
A robot cell consists of one robot and two positioners. The robot should be able to work on a
work piece held by one positioner while an operator change work piece held by the other
positioner.
There are two light curtains protecting that no personnel enters the station where the robot is
working.

Safety instructions

Station 1
Station 2

Light curtain 1 Light curtain 2

en0700000215

Configure Monitor Axis Range signals

To implement the safety solution, two Monitor Axis Range signals must be configured. The
first signal should be high as long as the robot is not in station 1 (when it is safe for personnel
© Copyright 2006-2010 ABB. All rights reserved.

to enter station 1). The second signal should be high when the robot is not in station 2.
The following picture illustrates how these two signals are configured for robot axis 1 in the
EPS Configuration Wizard.

en0700000212

Continues on next page

3HAC027709-001 Revision: E 63
7 Example application
7.1. Example with two work zones

Continued

The following picture shows the angles for robot axis 1 where the signals (MAR1 and MAR2)
are high (green) and where they are low (red).

Safety instructions
MAR1 MAR2

Station 1
Station 2

Light curtain 1 Light curtain 2

en0700000214

Connecting signals to Auto Stop

This is a description of the principle for how to connect the signals. The light curtains signals
are high when they are untouched and low when the operator is in the station. The safety
condition that is to be implemented is that the operator and the robot must not be in the same
station.
Note that this illustration only shows single channels. In reality duplication will be used for
the following:
• dual output signals from the safety controller (e.g. MAR 1A and MAR 1B)

© Copyright 2006-2010 ABB. All rights reserved.

• dual output signals from the light curtains
• dual Auto Stop signals (Auto Stop 1 and Auto Stop 2)
• implement the logical gates with two channel safety relays, two channel safety PLC,
or similar equipment

Continues on next page

64 3HAC027709-001 Revision: E
 7 Example application
7.1. Example with two work zones

Continued

en0700000213

For more details about the connections, see section Hardware installation on page 23.
NOTE!
The logical blocks in the picture are principal blocks. To make a safe installation these blocks
must be realized using safety components fulfilling relevant safety standards for the
installation.
NOTE!
If other safety equipment is connected to Auto stop, make sure that the safety chain can be
© Copyright 2006-2010 ABB. All rights reserved.

broken by any of the safety implementations.

NOTE!
Use dual channels in the real implementation.

3HAC027709-001 Revision: E 65
7 Example application
7.1. Example with two work zones

© Copyright 2006-2010 ABB. All rights reserved.

66 3HAC027709-001 Revision: E
 8 Safety aspects for Electronic Position Switches
8.1. Overview

8 Safety aspects for Electronic Position Switches

8.1. Overview

Overview
Electronic Position Switches, EPS, is an additional safety computer in the IRC5 robot
controller, with the purpose of providing safe output signals representing the position of robot
axes. The output signals are typically connected to cell safety circuitry and/or a safety PLC
which takes care of interlocking in the robot cell, for example, in order to prevent robot and
operator to enter a common area simultaneously.
In this chapter we describe how EPS comply with relevant safety standards and regulations.
© Copyright 2006-2010 ABB. All rights reserved.

3HAC027709-001 Revision: E 67
8 Safety aspects for Electronic Position Switches
8.2.1. Standards conformance

8.2 Safety requirements

8.2.1. Standards conformance

Standards
EPS has been designed to fulfill applicable parts of the following standards.
• EN ISO 12100-1:2003 Safety of machinery - Basic concepts, general principles for
design - Part 1: Basic terminology, methodology
• EN ISO 12100-2:2003 Safety of machinery - Basic concepts, general principles for
design - Part 2: Technical principles
• EN 1050 Safety of Machinery, Principles of Risk Assessment
• EN 60204-1 Safety of machinery - Electrical equipment of machines - Part 1: General
requirements
• EN ISO 10218-1:2006, Robots for industrial environments - Safety requirements -
Part 1: Robot
• EN 61000-6-2 EMC, Generic immunity
• EN 61000-6-4 EMC, Generic emission
• EN 954-1:1999 Safety of machinery - Safety related parts of control systems - Part 1:
General principles for design
• EN ISO 13849-1:2006 Safety of machinery - Electrical equipment of machines - Part
1: General requirements (will replace EN 954-1 in Dec. 2009)
• Applicable parts of ANSI/RIA R15.06-1999
• IEC 61508, Functional safety of electrical/electronic/programmable electronic safety
related systems
• IEC 62061, Safety of machinery - Functional safety of safety-related electrical,
electronic and programmable electronic control systems
• Applicable parts of UL 1740, "Industrial robots and robotic equipment"

© Copyright 2006-2010 ABB. All rights reserved.

• CAN / CSA Z434-03

68 3HAC027709-001 Revision: E
 8 Safety aspects for Electronic Position Switches
8.2.2. Specific safety requirements

8.2.2. Specific safety requirements

Specific safety requirements for Electronic Position Switches

Electronic Position Switches shall comply with EN ISO 10218-1 in general and specifically
comply with chapter 5.4, that is, the following requirements.
When safety related control systems are required, the safety related parts shall be designed so
that:
• A single fault in any of these parts shall not lead to the loss of the safety function.
• Whenever reasonably practicable, the single fault shall be detected at or before the
next demand upon the safety function.
• When the single fault occurs, the safety function is always performed and a safe state
shall be maintained until the detected fault is corrected.
• All reasonably foreseeable faults shall be detected.
This requirement is considered to be of category 3 as described in EN 954-1:1999 (EU
harmonization of ISO 13849-1:1999), which is the current and valid standard for safety of
machinery. Category 3 is normally fulfilled by redundant circuits, like dual channels, which
is the case for EPS. EPS together with the robot controller also complies with performance
level (PL) "d" according to EN ISO 13849-1:2006, and SIL 2 according to IEC 61508.
© Copyright 2006-2010 ABB. All rights reserved.

3HAC027709-001 Revision: E 69
8 Safety aspects for Electronic Position Switches
8.3. Safe design of Electronic Position Switches

8.3. Safe design of Electronic Position Switches

Overview
Electronic Position Switches, EPS, has two important supervision functions.
The first one being to ensure that the axis computer and the drive system are working
correctly, making the robot follow the ordered value from the main computer as expected.
The second being to supervise the robot position and setting outputs low to indicate if the
robot is in a hazardous area.

Supervision of axis computer and drive system

EPS is a separate and from the IRC5 independent device mounted in the drive part, close to
the axis computer.
The EPS board is connected to the communication link between the main computer and the
axis computer, thus reading the absolute motor position values sent as reference to the axis
computer. The EPS board is also connected to the communication link between the Serial
Measurement Board (SMB) and the axis computer, and thereby reading the actual rotational
motor position values. Since these values are within one revolution, the absolute position is
calculated by adding values from internal revolution counters in both the axis computer and
in EPS.
By comparing these values, that is the ordered motor position and the actual motor position,
Electronic Position Switches can detect any difference (outside a permitted lag deviation)
between the two positions, thereby ensuring that the drive system is working properly
according to the first supervision function as described above.
It is important to ensure that the safety controller and the robot controller are synchronized.
The safe sync position is defined during configuration and stored in the safety controller.
Synchronization can be done by activation of a switch or by software depending on the
application
To detect such errors, the robot can be ordered to go regularly to a synchronization switch,
which will generate a synchronization pulse to EPS confirming that the robot revolution
© Copyright 2006-2010 ABB. All rights reserved.
counter is correct. In some applications it is more feasible to do the synchronization check by
software.
In this position EPS will also calculate the robot joint positions and check against a stored
value to confirm that the synchronization is correct, covering the following points.
• EPS is working correctly with the right revolution counter value.
• The right manipulator is used.
• The calibration value is correct.
• The SMB is working correctly.

Category 3 supervision
This supervision complies with category 3, as described above, since two separate channels
that is, the axis computer with the drive system, motors, resolvers, and measurement system
(channel 1) and the ordered value from the main computer (channel 2) shall always give the
same result using the EPS evaluation circuits, which in itself is dual channel, see illustration
below.

Continues on next page

70 3HAC027709-001 Revision: E
 8 Safety aspects for Electronic Position Switches
8.3. Safe design of Electronic Position Switches

Continued

Additional safety design

Additional safety, over and above what is formally required, is brought to the concept by the
inherent dual channel character of the resolver, thanks to its dual sine and cosine output,
where the square sum is supervised to be close to 1.
Also the single channel synchronization check is complying with category 3, even if only one
synch signal channel is used. The two channel requirement is in this case fulfilled in two
ways:
1. Check that the input signal is changing its value, that is has a flank, indicating that the
switch is working.
2. The double check of both receiving a physical synch pulse and the check that the
actual robot position corresponds to the stored value for the sync position.

Illustration, dual channel concept

© Copyright 2006-2010 ABB. All rights reserved.

xx0800000198

C1 Channel 1
C2 Channel 2
x1 Actual value
x2 Ordered value
AC Axis computer
DS Drive system
M Motor
R Resolver
SMB Serial measurement board
SC Safety controller (SafeMove boardEPS board)

Supervision of robot position

The second supervision function (to supervise the robot position and setting outputs low to
indicate if the robot is in a hazardous area) is fulfilled by letting EPS compare the robot
position with limit values configured by an authorized user (so called Safety User). If any axis
Continues on next page
3HAC027709-001 Revision: E 71
8 Safety aspects for Electronic Position Switches
8.3. Safe design of Electronic Position Switches

Continued

(or combination of axes) is outside its defined safe area, the supervision will activate an
output. Active outputs are set to low, so that they are valid also at power failure. There are
five outputs which each can represent an arbitrary combination of all robot axes (as selected
by the Safety User).
To ensure that also this supervision complies with the category 3 requirement, EPS is inside
working with a two channel microprocessor based system, where one channel is handling the
actual position and the other the ordered position. The outputs from EPS are also each
consisting of two channels, thus preserving the category 3 requirement.

© Copyright 2006-2010 ABB. All rights reserved.

72 3HAC027709-001 Revision: E
 8 Safety aspects for Electronic Position Switches
8.4. Certifications

8.4. Certifications

Overview
EPS has been certified by external organizations as described below.

BGIA concept certification

Berufsgenossenschaftliches Institut für Arbeitsschutz in Germany made a concept
certification with the following result.
The concept of EPS complies with:
• Category 4 according to EN 954-1
• SIL 3 according to EN 61508
• Cat. 4 and PL e according to ISO 13849-1
NOTE!
Electronic Position Switches as a part of the IRC5 controller is category 3, even though the
unit itself fulfills category 4.

UL certification
EPS is approved by UL according to the following standards:
• UL 1740
• UL 1998
• ANSI / RIA R15.06
• CAN / CSA Z434-03
• ANSI / RIA 10218-1:2007 (which is the US harmonized ISO 10218-1:2006)
NOTE!
Since ISO 10218-1:2006 thus is harmonized in EU as well as in North Americas, the UL
certification clearly shows that EPS fulfills the EU Machinery Directive. In addition to this
and since ISO 10218-1 refers to ISO 13849-1:1999 as a normative reference, it is also shown
that EPS complies with the category 3 requirements.
© Copyright 2006-2010 ABB. All rights reserved.

3HAC027709-001 Revision: E 73
8 Safety aspects for Electronic Position Switches
8.5. Conclusion

8.5. Conclusion

Conclusion
As has been shown above and confirmed by third party certifications, Electronic Position
Switches fulfills all relevant current safety standards globally.

© Copyright 2006-2010 ABB. All rights reserved.

74 3HAC027709-001 Revision: E
 Index

A MoveAbsJ 55, 57
activating the safety configuration 50 MultiMove 34, 48, 50
additional axis 25, 31, 36 N
Auto Stop 28, 60
non-zero calibration position 45
axis range 15, 16
O
B
occupationally safe 13
bus 30
Operational Safety Range
C configuring 41
calibration position 45 description 21
check cycle 42 operationally safe 13
cold start 51 output signals 23, 26
configuration file 48 P
connections 23, 25, 27
panel board 28
continuous rotating axes 15
PIN code 44, 50
Control Error Supervision
PLC 27, 29
description 20
power supply 29
current data 24
PSC1CSC 61
Cyclic Sync Check
PSC1MAR1 61
configuring 42
PSC1PREWARN 61
description 18
guidelines 55 R
D range 15, 16
reaction time 59
download to controller 42
recovery 60
drive module 34, 48
redundancy 24, 26
dual input signal 25
relay 27
dual output signals 26
S
E
safe input 13
EPS Configuration Wizard 34
safe output 13
F safety bus 30
FlexPendant 54 safety calibration file 43
safety configuration 50
G safety controller 11, 13, 23, 48
General Stop 28, 60 safety relay 27
ground potential 29 safety user 33
service routine 57
I
© Copyright 2006-2010 ABB. All rights reserved.

servo lag 20, 21, 41

I/O connector 23, 27 signals 23, 25, 27, 61
I/O signals 25 antivalent 13
independent axes 35 equivalent 13
inductive load 26 single input signal 25
input signal 23, 25 SMB 31
invert function 38 soft servo 21, 41
i-start 51 software installation 32
Software Sync Check
L
configuring 42
LED 62 description 19
limitations guidelines 57
safety controller 12 SoftwareSync service routine 57
M status LED 62
sync check 42
mechanical unit 35, 48 sync position 18, 42, 55, 57
Monitor Axis Range sync switch 25, 27
configuring 38 synchronization
description 15 description 18, 19
monitoring 13 guidelines for Cyclic Sync Check 55
motor calibration file 43 guidelines for Software Sync Check 57
motor calibration offset 37

3HAC027709-001 Revision: E 75
Index

T
test pulses 26
tolerance 41
tool 55
V
virtual signal 61
voltage data 24
W
warm start 51

© Copyright 2006-2010 ABB. All rights reserved.

76 3HAC027709-001 Revision: E
 3HAC027709-001, Revision E, en

ABB Robotics
S-721 68 VÄSTERÅS
SWEDEN
Telephone: +46 (0) 21 344000