Stop / Emergency Stop / Emergency Off

The control functions Stop, Emergency Stop, and Emergency Off are defined by IEC 60204. Notes for safety aspects of these functions can be found in ISO 13849 and IEC 62061.

The parameter DRV.DISMODE must be set to 2 to implement the different stop categories.

No functional safety! Serious injury could result when the load is not properly blocked. With vertical load the load could fall. Functional safety, e.g. with hanging load (vertical axes), requires an additional mechanical brake which must be safely operated, for example by a safety control. Set parameter MOTOR.BRAKEIMM to 1 with vertical axes, to apply the motor holding brake immediately after faults or Hardware Disable.

Stop

The stop function shuts down the machine in normal operation. The stop function is defined by IEC 60204.

The Stop Category must be determined by a risk evaluation of the machine.

Stop function must have priority over assigned start functions. The following stop categories are defined:

Stop Category 0

Shut-down by immediate switching-off the energy supply to the drive machinery (this is an uncontrolled shut-down). With the approved safety function STO the drive can be stopped using its internal electronics (IEC 62061 SIL2).

Stop Category 1

A controlled shut-down, whereby the energy supply to the drive machinery is maintained to perform the shut-down, and the energy supply is only interrupted when the shut-down has been completed.

Stop Category 2

A controlled shut-down, whereby the energy supply to the drive machinery is maintained.

Stop Category 0 and Stop Category 1 stops must be operable independently of the operating mode, whereby a Category 0 stop must have priority.

If necessary, provision must be made for the connection of protective devices and lock-outs. If applicable, the stop function must signal its status to the control logic. A reset of the stop function must not create a hazardous situation.

Emergency Stop

The Emergency Stop function is used for the fastest possible shutdown of the machine in a dangerous situation. The Emergency Stop function is defined by IEC 60204. Principles of emergency stop devices and functional aspects are defined in ISO 13850.

The Emergency Stop function will be triggered by the manual actions of a single person. It must be fully functional and available at all times. The user must understand instantly how to operate this mechanism (without consulting references or instructions).

The Stop Category for the Emergency Stop must be determined by a risk evaluation of the machine.

In addition to the requirements for stop, the Emergency Stop must fulfil the following requirements:

• Emergency Stop must have priority over all other functions and controls in all operating modes.
• The energy supply to any drive machinery that could cause dangerous situations must be switched off as fast as possible, without causing any further hazards ( Stop Category 0) or must be controlled in such a way, that any movement that causes danger, is stopped as fast as possible (Stop Category 1).
• The reset must not initiate a restart.

Emergency Off

The Emergency Off function is used to switch-off the electrical power supply of the machine. This is done to prevent users from any risk from electrical energy (for example electrical impact). Functional aspects for Emergency Off are defined in IEC 60364-5-53.

The Emergency Off function will be triggered by the manual actions of a single person.

The result of a risk evaluation of the machine determines the necessity for an Emergency Off function.

Emergency Off is done by switching off the supply energy by electro-mechanical switching devices. This results in a category 0 stop. If this stop category is not possible in the application, then the Emergency Off function must be replaced by other measures (for example by protection against direct touching).