EN ISO 13849-1 Machinery Safety Control System Standard Explained
EN ISO 13849-1 — Safety-Related Parts of Control Systems for Machinery is a key technical specification in the crane industry. As the core standard governing safety-related parts of control systems in machinery safety, it introduces the concept of Performance Level (PL). The standard applies to electrical, hydraulic, and pneumatic safety control systems on cranes and aligns with the SIL framework of IEC 61508.
It provides a unified technical basis for design personnel, inspection bodies, and end users. Kelude strictly implements the technical requirements of this standard throughout product development and manufacturing to ensure compliance and reliability.
Scope and Application of the Standard
EN ISO 13849-1 defines the technical requirements and safety indicators for safety-related control systems on lifting appliances, covering all cranes with a Rated Lifting Capacity above 0.5 t. The standard applies not only to the design and manufacturing of new equipment but also provides clear technical guidance for the inspection, maintenance, and modification of cranes already in service. As a key component of the crane standard system, it works in coordination with the EN 13001 Crane Safety Standard series and ISO 4309 Wire Rope Inspection Standard to form a complete framework of technical specifications. The clearly defined technical parameters and safety factors give design personnel a solid design basis, while also providing third-party inspection bodies with quantifiable acceptance criteria for type tests and factory inspections.
Core Technical Parameter Framework
Under EN ISO 13849-1, the design and manufacturing of machinery safety control systems must satisfy a stringent set of technical parameter requirements. These parameters are established on the basis of extensive test data and safety engineering theory, covering everything from material selection to structural design. The safety factor ranges specified in the standard fully account for fatigue life and limit load conditions under severe crane operating environments. In practical engineering applications, design personnel must select appropriate parameter combinations based on the equipment's Work Duty classification, load spectrum, and operating environment. The parameter cards below summarize the standard's core technical indicators:
Comparative Analysis of Key Parameters
The comparison table below systematically contrasts the core parameters specified in EN ISO 13849-1 with general engineering practice. All values shown are either mandatory or recommended provisions of the standard and should be strictly implemented during design and selection as well as factory acceptance testing.
| Item | technical requirements | Description |
|---|---|---|
| PLGrade | PLd(crane Safety-related) | PLr=a(Low)~e(High), d Corresponding SIL2 |
| MTTFd(Component) | Low3~10Year/Medium10~30Year/High≥30Year | PLd Requirement: Medium or High Grade |
| diagnostic coverage DC | DCNone=0%/Low=60%/Medium=90%/High=99% | PLd Requirement DC≥Medium(90%) |
| Category CAT | CAT B/1/2/3/4 | PLd Requirement CAT3(Single-fault Safe) |
| redundancy Architecture | 1oo2dual channel | No Loss of Function on Any Single Faultsafety function |
| CCFPreventive Action | ≥65Points(65Allocation Score Table) | With Isolation/Diversity/Protection/Environment |
Inspection Requirements and Periodic Inspection Intervals
EN ISO 13849-1 sets out clear requirements for the Factory Acceptance Test, Type Test, and periodic inspection of machinery safety control systems. The Factory Acceptance Test must be carried out on every unit at the manufacturer's facility by the quality inspection department, and each unit that passes must be accompanied by a detailed inspection report and a Certificate of Conformity. For equipment already in service, the periodic inspection interval is determined by the Work Duty / Classification and the operating environment, and in general should not exceed 12 months.
| Item | technical requirements | Description |
|---|---|---|
| PLVerification | MTTFd+DC+CAT+CCFComprehensive | Annual+Calculation Verification PL≥PLr |
| redundancy Testing | Channel-by-Channel Single-Fault Simulation | Monthly+Verificationsafety function Maintain |
| CCFInspection | 65Item-by-Item Review of Allocation Score Table | Annual+≥65Points |
| emergency stop Circuit | positive opening+dual channel | Monthly+Testing Continuity |
Safe Operation and Management Requirements
Under EN ISO 13849-1, safe operation and routine management play a critical role in ensuring machinery safety. The standard places strong emphasis on operator qualification and training, requiring that all operators complete specialized training and obtain the necessary certifications before operating equipment. User units must establish a robust equipment file management system that documents the entire lifecycle of installation, use, maintenance and inspection. Any safety hazards identified must be addressed through the rectification procedure specified in the standard, keeping equipment safe and controllable at all times. The standard also imposes restrictions on equipment use under extreme operating conditions.
FAQ
Q: How do the PL ratings in EN ISO 13849-1 correspond to the SIL ratings in IEC 61508?
A: PLr=a corresponds to SIL1 (none), PLr=b to SIL1 (low), PLr=c to SIL1 (high), PLr=d to SIL2, and PLr=e to SIL3. For crane safety control systems, the required performance level is PLr=d (equivalent to SIL2). In practice, EN ISO 13849-1 offers a more intuitive PL selection method, while IEC 61508 provides a more detailed technical development process.
Q: What are the specific MTTFd and DC requirements for PLd?
A: PLd requires: mean time to dangerous failure per channel MTTFd ≥ 10 years (medium), with ≥ 30 years (high) recommended; diagnostic coverage DC ≥ 90% (medium); category not lower than CAT3 (single-fault redundancy); and common cause failure prevention measures CCF ≥ 65 points. All four parameters are mandatory, and the final PL is verified through system block diagram calculations.
Q: What is the architectural characteristic of CAT3 (Category 3)?
A: CAT3 requires that the control system remains capable of performing its safety function after a single fault, and that the fault must be detected. The typical architecture is a dual-channel (1oo2) configuration, where each channel independently monitors the safety state, and the system transitions to a safe state whenever the output signals of the two channels disagree. The comparator between the two channels must provide sufficient diagnostic coverage. CAT4 additionally requires that fault accumulation does not lead to loss of the safety function.
Q: What measures are used to prevent common cause failures?
A: CCF prevention measures are assessed against a 65-point scoring table: physical separation 15 points, diversity in design 20 points, protection (overvoltage/overtemperature/EMC) 10 points, environmental assessment 15 points, and component selection and data 5 points. A total score of ≥ 65 points is required to meet PLd. Typical measures include using sensors of different brands or operating principles for the two channels, electrical isolation between channels, independent power supplies, and segregated layout within the control cabinet.
Kelude — specializing in crane design and manufacturing, with products strictly compliant with the EN ISO 13849-1 standard system, offering lifecycle service from solution design and manufacturing and installation to after-sales maintenance. For details on how this standard is applied in our products, contact our technical team for comprehensive technical documentation.
