Fieldbus & Industrial Networking

The safety over OPC UA concept

June 2019 Fieldbus & Industrial Networking

The use of functionally safe devices has increased sharply in recent years. In 2017 alone, the number of PROFIsafe nodes brought to market grew by nearly two million. Today, well over 10 million nodes are integrated in production plants. There is hardly a machine or system today that does not make use of safety functions. Another trend is the distribution of demanding automation tasks over multiple controllers that communicate with one another using OPC UA. There are, for example, industries in which there is traditionally a heterogeneous automation landscape, in which controllers from different vendors are often used. However, there is no cross-manufacturer standard for the functionally safe transfer between controllers – and, thus, between machines represented by these controllers.

Another problem with existing safety protocols is the lack of a concept for dynamically establishing and terminating connections. The current state of technology requires that early during the project planning phase, the ‘who communicates with whom’ be defined and those corresponding safe addresses be permanently encoded. Should the communication patterns change or expand, the safety function of all participants must be changed, which usually requires costly recertification.

In the context of Industry 4.0, this is no longer in keeping with the times. It should be possible to rearrange modular machines, e.g., consisting of processing machines, loading and unloading systems as well as other incoming and outgoing transport units, during running operation if necessary, without interrupting production for an unnecessarily long time. If there are safety functions that span over multiple modules, they must be available immediately after rearranging the modules, and, if necessary, generate automatic self-test and user acknowledgements. Cumbersome manual testing of the safety function, or even re-approval by an external agency, is not ideal in these scenarios. There are even more extreme requirements in autonomous mobile vehicles, crane trolleys or robots that move autonomously from machine to machine. Reconfiguration of the safety function must be possible here without any human interaction.

To facilitate such scenarios, a safety protocol between controllers from various manufacturers is necessary that allows connections to be established and terminated dynamically and yet simultaneously supports all concepts that correspond to the current state of technology.

Proven technology for safe concepts

One solution to the problem is offered by the Safety over OPC UA specification, which is currently in review. Since OPC UA is becoming increasingly important for connections between controllers from different manufacturers, it makes sense to extend it to functionally safe communication, as well. For this purpose, the joint working group between PI and the OPC Foundation was started in November 2017. The experts defined the key points for functional safety and the boundary conditions: The safety concept is available to all members of the OPC Foundation and PI. It is compliant with IEC61784-3 and uses existing PROFIsafe mechanisms.

Thus, the following still applies: a single cable for standard as well as safety-related communication. And it will again be based on the proven black-channel principle. This can also be applied to controller-controller communication, whereby the OPC UA communication stack then performs the role of the black-channel. The proven protocol safety mechanisms – CRC, codenames, monitoring numbers, watchdog monitoring and the SIL monitor – will also be adopted.

The OPC UA stack and the network components, such as gateways or routers, do not need to be taken into consideration during a certification and can also be subsequently adapted or expanded at any time. Relevant to certification is only the correctness of the implementation of the PROFIsafe protocol on a functionally safe platform.

More flexibility

In the review version, the fundamental concept and detailed development of the specifications were defined. The new specification first addresses the client/server communication models of OPC UA. A connection to Pub/Sub, including Pub/Sub via TSN, is already provided for, thereby allowing even very short cycle times to be realised in the communication. Unidirectional, bidirectional and multicast connections are possible, as are arbitrary network topologies e.g. line, tree, star and ring. With up to 1500 bytes, there are also sufficient reserves with respect to the data quantities.

Adjustments were necessary in the state machines, the protocol datagrams and the initialisation, since controllers with equal rights now communicate with each other, rather than a controller communicating with subordinate devices. Clarified in the definition of the state machine of the PROFIsafe protocol are, for example, how a connection is established, when process values or safe substitute values are to be output or how a restart is to be acknowledged. Another aspect is the definition of the data types and data structures that are to be transferred as well as the safe testing to determine whether both communication partners even have the same understanding of how the transferred data are to be interpreted.

Also new are the simplified diagnostics. Particularly with complex safety functions in which multiple controllers from various manufacturers are involved, it is important to quickly identify and localise errors and determine the cause. The specification therefore also defines the diagnostic data that are to be displayed to ensure that the same error text is displayed for each error type (e.g., CRC error or time-out) for all controllers. Diagnostics are possible via the already existing mechanisms of the individual manufacturers as well as via OPC UA, which speeds up the localisation and identification of possible error sources.

Changing communication partners

With Safety over OPC UA, connections can also be established or terminated at runtime. A given interface can be used in turn by different partners, thereby allowing a connection to be established dynamically. Benefiting from this equally are modular machines, autonomous guided vehicles (AGVs), autonomous moving robots (AMRs), and tool changers.

In contrast to today’s functional safety communication protocols, nodes no longer have to know all of the others initially at the project planning stage. This makes it possible, for example, to add a new mobile robot to a system without having to reconfigure all of the existing machines.

Advantages of the PROFIsafe solution

By retaining the proven PROFIsafe principle, it will be significantly easier in the future for the manufacturers to establish a functionally safe connection between controllers. Due to the many proven uses of PROFIsafe, this also ensures high acceptance by manufacturers and end users, as well as notified bodies such as certification authorities. Also nice about this is the fact that no specific requirements are necessary for non-safety components. An unlimited number of network nodes is thereby possible, and the communication speed is not limited.

That this concept is functional was shown by an initial trial implementation as a proof of concept at the PI joint stand at SPS/IPC/Drives 2018. The specification, which is currently under review, will be completed in time for Hanover Fair 2019. Test specifications in which test procedures are defined are being prepared concurrently.

The result of the collaboration between PI and the OPC Foundation is a practice-oriented as well as sustainable solution in the area of functional safety that is supported by the majority of manufacturers and users.

For more information contact Dee Botha, +27 061 340 0681,

Share this article:
Share via emailShare via LinkedInPrint this page

Further reading:

ETG officially supports EtherCAT G
December 2019 , Fieldbus & Industrial Networking
The Technical Committee of the EtherCAT Technology Group (ETG) has accepted EtherCAT G as an addition to the EtherCAT standard. Moving forward, EtherCAT G, which extends EtherCAT technology to 1 and 10 ...

Interference-free Ethernet media converter
October 2019, Phoenix Contact , Fieldbus & Industrial Networking
The new FL MC EF 660 SCRJ media converter from Phoenix Contact enables the connection of cost-effective polymer and HCS/PCF fibre technology. The optical transmission of data via fibre optics is free ...

I/O solutions with Profinet redundancy
October 2019, Turck Banner , Fieldbus & Industrial Networking
Turck’s Simple IO-Link Device Integration, SIDI for short, simplifies the handling of IO-Link. As its first fieldbus module with Profinet S2 system redundancy, the company has introduced the TBEN-L5-8IOL. ...

Tektronix simplifies automotive Ethernet testing with new software
October 2019, Comtest , Fieldbus & Industrial Networking
Tektronix has released two new software packages that greatly simplify Automotive Ethernet testing, debug and protocol decode, for use with its 5 and 6 series mixed-signal oscilloscopes (MSO). Using the ...

How fieldbus systems are really selected
September 2019 , Fieldbus & Industrial Networking
The majority of users do not actively select their fieldbus at all – they select the control system vendor and whatever bus system this vendor provides will ‘do the job.

Fibre optic distributor for network expansion on demand
September 2019, Jasco Trading t/a Webb Industries , Fieldbus & Industrial Networking
Jasco’s Webb Industries has introduced Telegärtner’s new, modular rail-mount fibre optic distributor, which can be extended according to actual needs. The stackable modules allow quick and easy additions ...

Integrate IO-Link devices in Profinet
September 2019, Turck Banner , Fieldbus & Industrial Networking
Turck’s simple IO-Link device integration (SIDI) simplifies the handling of IO-Link devices in Profinet engineering systems. As the devices are already integrated in the GSDML file of the master, users ...

AS-i signal transmission via fibre optic
August 2019, ifm - South Africa , Fieldbus & Industrial Networking
The new AS-i fibre optic repeater from ifm electronic enables AS-interface signal transmission via an optical medium and vice versa. This allows for considerable cable length extension in the AS-i network. ...

Next-generation IIoT gateway solutions are transforming manufacturing
Technews Industry Guide: Industrial Internet of Things & Industry 4.0, RJ Connect , Fieldbus & Industrial Networking
Smart manufacturing and digital transformation, coupled with edge intelligence, are enabling manufacturers to increase productivity, reduce downtime, and increase product quality.

Cisco IIoT solutions meet the needs of industrial organisations
Technews Industry Guide: Industrial Internet of Things & Industry 4.0, Axiz , Fieldbus & Industrial Networking
Technology is constantly evolving, and so are the network infrastructures that support industrial entities.