Glossary
For the calculation of the PL for systems of category 2, 3 or 4, it is also necessary to evaluate possible common cause failures or CCF, which may compromise the redundancy of the system. The evaluation is performed using a checklist (Annex F of EN ISO 13849-1); on the basis of the measures taken against common cause failures, points from 0 to 100 are assigned. The minimum permissible value for categories 2, 3 and 4 is 65 points.
This parameter provides information on the effectiveness of a system’s ability to self-detect any possible failures within the system. Using the percentage of the detectable dangerous failures, one obtains a diagnostic coverage of better or worse quality. The numerical DC parameter is a percentage value which is calculated using values taken from a table (EN ISO 13849-1 Annex E). Depending on the measures for failure detection taken by the manufacturer, example values are provided there.
Because multiple measures are normally taken to rectify different anomalies in the same circuit, an average value or a DCavg is calculated and can be assigned four levels:
- High DCavg ≥99%
- Medium 90% ≤DCavg <99%
- Low 60% ≤DCavg <90%
- None DCavg <60%
A diagnostic coverage of none is only permissible for systems of category B or 1.
Contact element opening or closing the circuit’s conducting path at two points in series.
The EAC certificate of conformity is a certificate issued by a Customs Union certification body formed by Russia, Belarus and Kazakhstan, with which the conformity of a product is certified with the essential safety requirements laid down by one or more Technical Regulations (Directives) of the Customs Union.
ECOLAB is one of the world's leading providers of technologies and services for hygiene in food processing. ECOLAB certifies the compatibility of tested electrical devices in its own laboratories, using disinfectants and cleaning agents used in the area of food processing worldwide.
Number of on-load operating cycles, under the conditions defined by the corresponding product standard, which can be carried out without repair or replacement.
Contact elements of the same control switch which are well isolated from each other and therefore can be connected to electric circuits with different voltages.
Control switch whose actuator is actuated by exerting force with a foot on the pedal.
International Electrotechnical Commission
The IMQ (Italian Institute of the Quality Mark) is an association in Italy (independent third body) whose task is to check and certify the compliance of materials and equipment with safety standards (CEI standards in the electric and electronic sector). This voluntary conformity certification is a guarantee of quality, safety and technical value.
Contact element closing a circuit’s conducting path when the control switch is actuated.
Number of no-load operating cycles (i.e. without current on the main contacts), under the conditions defined by the corresponding product standard, which can be carried out without repair or replacement of mechanical parts.
Minimum force to be applied to the actuator that will cause all contacts to reach their switched position.
MTTFD (“Mean Time To Dangerous Failure”)
This parameter is used to determine the functional system quality over the mean lifetime in years before a dangerous failure occurs (other failures are not considered). The calculation of the MTTFD is based on numerical values supplied by the manufacturers of the individual components of the system. In the absence of this data, the values can be taken from the tables with guide values included in the standard (EN ISO 13849-1 Annex C).
The evaluation results in a numerical value, divided into three categories: High, Medium or Low.

For components that are susceptible to high wear (typical for mechanical and hydraulic devices), the manufacturer supplies the value B10D for the component, i.e., the number of component operations within which 10% of the samples failed dangerously, instead of the MTTFD of the component.
The B10D value of the component must be converted to MTTFD by the machine manufacturer using the following formula:

Where nop= means number of annual operations for the component.
By assuming the daily operating frequency and the daily operating hours for the machine, nop can be calculated as follows:

Where
dop= work days per year
hop= operating hours per day
tcycle= cycle time (s)
For components that are susceptible to wear, note that parameter MTTFD is dependent not only on the component itself but also on the application.
An electromechanical device with low frequency of use, e.g. a remote switch that is only used for emergency stops, has a high MTTFD; if the same device is used for normal processes in the operating cycle, the MTTFD of the same remote switch could drop dramatically.
All elements of the circuit contribute to the calculation of the MTTFD depending on their structure.
In control systems with single-channel architecture (as is the case in categories B, 1 and 2), the contribution of each component is linear and the MTTFD of the channel is calculated as follows:

To avoid overly optimistic designs, the maximum value of the MTTFD of each channel is limited to 100 years (for categories B, 1, 2 and 3) or 2500 years (category 4).
Channels with an MTTFD of less than 3 years are not allowed.
For two-channel systems (categories 3 and 4), the MTTFD of the circuit is calculated by averaging the MTTFD of the two channels using the following formula:

Sequence of two operations, one for opening and one for closing.
Given these data, the EN ISO 13849-1 standard provides the PL of the system through a correlation table (Annex K, EN ISO 13849-1) or, alternatively, using a simplified graphic (section 4.5 of EN ISO 13849-1), through the following figure:

Considering the figure more closely, it is seen that the following possibilities exist for a system with PL equal to “c”:

- Category 3 system with less reliable components (MTTFD=low) and medium DC.
- Category 3 system with reliable components (MTTFD=medium) and low DC.
- Category 2 system with reliable components (MTTFD=medium) and medium DC.
- Category 2 system with reliable components (MTTFD=medium) and low DC.
- Category 1 system with very reliable components (MTTFD=high).

Considering a given circuit structure, in this figure one can also identify the maximum PL that can be reached depending on the average diagnostic coverage and the MTTFD, the manufacturer can exclude a number of circuit structures in advance, as they do not meet the required PLr.FD of the components.
Thus, the manufacturer can exclude a number of circuit structures in advance, as they do not meet the required PLr.
Control switch whose controller is actuated by a moving part of the machine, when this part arrives to a set position.
The maximum travel of the actuator which does not cause any travel of the contact elements.
This current depends on the rated operating voltage, the rated frequency, the utilization category and the type of protective enclosure, if present.
The highest peak value of an impulse voltage, of a prescribed shape and polarity, which does not cause destructive discharge under the specified test conditions.
Reference voltage for the dielectric test voltage and the creepage distances along surfaces.
Voltage which, combined with the rated operational current Ie, determinates the application of the equipment and the referred utilization categories.
Contact element opening or closing the circuit’s conducting path at one point only.
Maximum current for heating tests on equipment without enclosure, in free air.
Its value shall be least to equal to the maximum value of the rated operational current Ie of the equipment without enclosure, in eight-hour duty.
TÜV SÜD is an international authority claiming long-standing experience in the certification of operating safety for electrical, electromechanical and electronic products. In the course of type approval, TÜV SÜD closely inspects the quality throughout all the stages concerning product development, from software design and completion, to production and to the tests conducted according to ISO/IEC standards. The operating safety certification is obtained voluntarily and has a high technical value, since it not only certifies the electrical safety of the product, but also its specific operating suitability for use in safety applications according to the IEC 61508 standard.
Following the withdrawal of the United Kingdom from the European Union, the UKCA mark (UKCA Conformity Assessment) takes the place of the CE marking for the British market (England, Scotland and Wales).
The UKCA mark indicates that the product satisfies the British regulations. As in the European Union, conformity can be achieved through the application of harmonised standards, the so-called "designated standards". The evaluation of the conformity can be performed through self-certification or through a certification process by an "approved body".
Underwriter’s Laboratories (USA)
UL (Underwriters Laboratories Inc.) is an independent non-profit body that tests materials, devices, products, equipment, constructions, methods and systems with regard to their risk for human life and goods according to the standard in force in the United States and Canada.
Decisions made by UL are often recognized by many governing authorities concerning the compliance with local safety regulations.
Ente Nazionale Italiano di Unificazione (IT)
Combination of specified requirements related to the conditions in which the switching device fulfils its purpose.
Verband Deutscher Elektrotechniker (DE)
Machinery Directive
RoHS Directive
Directive on electromagnetic compatibility
ATEX Directive
Directive on low-voltage switchgear and controlgear
Radio Equipment Directive






























