The Difference Between Control Reliable and Safety Rated
Why standard PLCs and relays cannot be used to protect human life in machine guarding.
1. Introduction & Context
When designing automated systems, a dangerous misconception frequently arises: “This PLC is incredibly reliable; it hasn’t crashed in ten years. Therefore, I can wire the emergency stop button directly into it.” This fundamental misunderstanding of Functional Safety has led to tragic outcomes. There is a massive, legally defined difference between equipment that is “highly reliable for production” and equipment that is “safety-rated to protect human life.”
2. The Core Issue
Standard automation equipment (PLCs, standard relays, standard VFDs) are designed to maximize uptime. When they fail, they often fail unpredictably.
- Standard PLCs Fail Dangerously: If a standard PLC output card suffers a short circuit on its triac or transistor, the output can fail in the “ON” state. If that output controls a robotic arm, the arm will continue moving even if the PLC program is commanding it to stop.
- Safety-Rated Systems Fail Safely: Safety Relays and Safety PLCs (e.g., Allen-Bradley GuardLogix, Siemens SIMATIC Safety) are fundamentally different hardware. They use redundant processors, cross-checking diagnostics, and forced-guided relays. If an internal component fails, the system detects its own failure and forcefully drops the outputs to a known safe state (de-energized).
- The Single Point of Failure: Wiring an E-Stop into a standard PLC creates a single point of failure. If the PLC processor locks up or the input card freezes, pressing the E-Stop does nothing. Safety standards (like ISO 13849 and IEC 62061) strictly prohibit relying on single-channel, non-safety-rated electronics for high-risk machine guarding.
3. Actionable Takeaways
- Separate Control from Safety: Never route E-Stops, light curtains, or safety gate interlocks through standard PLC I/O. They must be wired into dedicated safety relays or Safety PLCs that physically interrupt the motive power to the hazard.
- Look for the Rating: Ensure all components in a safety circuit (switches, relays, contactors) carry a recognized functional safety rating (SIL or PL). A standard relay is not a safety relay.
- Understand Forced-Guided Contacts: Use safety relays with positively guided (forced-guided) contacts. This mechanical design ensures that if a normally open contact welds shut, the normally closed contacts are physically prevented from closing, allowing the system to detect the failure and prevent a restart.