With a number of new KEB Functional Safety products on the horizon, this post is a primer on FSoE (Safety over EtherCAT) and why it is important to machine builders.
Safety over EtherCAT
If you haven’t seen FSoE yet (also called Safety over EtherCAT), you will start seeing it more and more. FSoE is a communication protocol that was developed by the EtherCAT Technology Group. The goal was to design an industrial communication bus that would be suited for use in safety applications – up to an IEC 61508 SIL3 level. To put this into perspective, this means the communication bus would need to operate in excess of 100,000 years without an undetected error.
Each FSoE node receives a unique address (16-bit) and the safe data with checksum are encapsulated in the EtherCAT telegram:
Overall, the Failsafe over EtherCAT protocol has a number of different features that help detect an error in the communication, including:
Each FSoE slave is handled with a state machine. Upon start-up the slave must go through the state machine in order to set any of the safe bits. In the event of an error, the state machine is reset and the master must re-validate the connection before changing any of the safe bits.
There is a lot more technical information – Members of the EtherCAT Technology Group can download a full copy of the specification at, https://www.ethercat.org.
Why Should Machine Builders Care? Here are 5 Reasons.
1. FSoE is certified to an IEC 61508 SIL3 level
FSoE was designed with a number of different features that enhance security and allow the detection of errors. For example, the protocol includes watchdog-timers – which are triggered each time the FSoE master frame is sent to the FSoE slave. These hardware timers work in conjunction with checksums to ensure an optimal safety connection and error-proof monitoring across each FSoE frame transmission.
Very importantly, the FSoE protocol was independently certified by TÜV Süd Rail GmbH to the IEC61508 SIL3 level. TÜV Süd Rail GmbH is an independent notified body specializing in defining and advancing compliance for safety, security, and sustainability solutions.
This is relevant because it proves that FSoE has been evaluated by a 3rd-party safety agency and carries the appropriate certification. When coupled with similarly certified safety hardware, the machine builder will have a much easier time having their overall machine certified for functional safety.
2. FSoE is an open protocol published by the EtherCAT Technology Group (ETG)
ETG hit a home run with EtherCAT. By making the technology open and accessible, it encouraged many vendors to develop EtherCAT products. Machine builders and engineers benefited because they have access to many different vendors and products. The end-user benefitted with high-performance technology and lower costs due to many competitive offerings. It has been a win-win for everyone.
Similarly, FSoE is open and published by the ETG. Increasingly, more automation companies will develop FSoE-based products and the ecosystem will continue to grow. Both machine builders and end-users will benefit from a wide selection of products and vendors.
This is not always the case with competing safety protocols on the market today. Some protocols out there are closed and proprietary. Any control solutions that are developed will tie a machine builder into that one vendor’s hardware and programming tools. This introduces risk – as you are tied to one vendor.
In short, because Safety over EtherCAT is open, it gives machine builders an increasing number of product options from a number of different vendors.
3. FSoE can be implemented with other networks
FSoE works with standard Ethernet hardware and network cables so it can be used with other PLC vendors and with other industrial protocols. For example, it would be possible to have a machine controlled with an Allen-Bradley or Siemens PLC but the safety functionality and safety IO is handled by a FSoE system. The FSoE safety network could even be used with a mix of different control types – like on a large packaging line, for example.
This unique feature gives a machine builder greater flexibility. Perhaps customers in one geography specify a PLC type from Vendor A. Another geography specifies Vendor B. Two machine variants can be offered – but the FSoE safety control can be used across both designs. This is a big advantage considering the huge time and cost required to certify the functional safety of the machine. In this respect, FSoE grants the machine builder a new depth of control and efficiency when building and configuring solutions across networks.
4. Safety over EtherCAT saves wiring costs and time
Another really big advantage of FSoE is that much of the discrete safety wiring can be replaced with a network cable. Manufacturers of rental and mobile machinery will benefit greatly from this. The design of the safety system is largely done in the software and by using certified FSoE hardware.
There are a number of advantages to replacing conventional discrete wiring with network cabling, including the following:
- Reduction in wiring time
Replacing safety wiring in favor of a network cable allows machine builders to arrange and distribute electrical wiring more quickly – supporting faster and more efficient production overall.
- Reduction in wiring errors
FSoE network cables are a safe and simple alternative to discrete wiring. These solutions remove many of the complications (and potential for wiring errors) across machine construction.
- Cleaner panel layout:
Thanks to their efficient design, network cables support cleaner panel layout and wiring – allowing machine builders to produce logically arranged and easy-to-maintain control panels.
- Better noise immunity:
FSoE network cabling drastically improves the ability for a machine to operate in the presence of noise disturbance – and maintain fast, error-free connections over continued use.
5. FSoE allows for Functional Safety in the Drive (Safety Drive Profile)
KEB has a deep EtherCAT drive portfolio. FSoE drives are one of our differentiators. By design, the FSoE control word allows for advanced Safe Motion functions (according to IEC 61800-5-2). This means it is possible that a FSoE slave like an inverter can handle advanced safety functionality like Safe Limited Speed or Safe Limited Positioning.
By default, the below functions are configured in the drive’s safety control word. Additional Safe Functions are possible with manufacturer-specific bits.
The safety function in the FSoE drive can be triggered locally with inputs or it can be enabled via the FSoE bus. Finally, the status can be communicated back to the FSoE master with the drives Safe status word.
KEB EtherCAT Drives and Functional Safety Solutions
All KEB 6th-generation drives offer FSoE as an optional feature, enabling all of the advantages discussed above. Our EtherCAT drives allow machine builders to cost-effectively support safe functions while enabling peerless motor control for almost any motion control application. KEB drives are compatible with a variety of motor types, ranging from induction and AC servo motors to linear and synchronous reluctance motors.
To talk to a KEB engineer and learn more about the advantages and disadvantages of Failsafe over EtherCAT for machine builders, contact us today! Our team can help you find the right functional safety products for your unique project. Also, feel free to reach out with any thoughts or questions you have regarding FSoE or safety communication buses. We look forward to hearing from you.
Let's Work Together
Connect with us today to learn more about our industrial automation solutions—and how to commission them for your application.