SCHUNK EGP System Description

Imprint Copyright: This manual is protected by copyright. The author is SCHUNK GmbH & Co. KG. All rights re- served. Any reproduction, processing, distribution (making available to third parties), translation or other usage - even excerpts - of the manual is especially prohibited and re- quires our written approval. Technical changes: We reserve the right to make alterations for the purpose of technical improvement. Document number: 1381596 Version: 01.00 | 14/01/2019 | en © SCHUNK GmbH & Co. KG All rights reserved. Dear Customer, thank you for trusting our products and our family-owned company, the leading techno- logy supplier of robots and production machines. Our team is always available to answer any questions on this product and other solutions. Ask us questions and challenge us. We will find a solution! Best regards, Your SCHUNK team SCHUNK GmbH & Co. KG Spann- und Greiftechnik Bahnhofstr. 106 – 134 D-74348 Lauffen/Neckar Tel. +49-7133-103-0 Fax +49-7133-103-2399 [email protected] schunk.com

01.00 | Electric gripper EGP with safety functions | System description | en | 1381596 3 Table of contents 1 General....................................................................................................................  4 1.1 About this manual ................................................................................................ 4 1.2 Applicable documents.......................................................................................... 4 1.3 Components for the system setup ....................................................................... 5 2 Technical data..........................................................................................................  6 3 Design and description.............................................................................................  7 3.1 Example system setup Systemaufbau .................................................................. 7 3.2 Description ........................................................................................................... 8 4 Functional description .............................................................................................  9 4.1 Definition of the safe state of the gripper............................................................ 9 4.2 Block diagram..................................................................................................... 10 4.3 Superordinate control system............................................................................ 10 4.4 Safety control system......................................................................................... 11 4.5 Program sequence.............................................................................................. 12 5 Assembly and installation ....................................................................................... 13 5.1 Assembly ............................................................................................................ 13 5.2 Commissioning ................................................................................................... 14 5.3 Commissioning checklist..................................................................................... 15 6 Appendix ................................................................................................................ 17 Wiring diagram 1 (Pilz) ....................................................................................... 18 Wiring diagram 2 (LTI) ........................................................................................ 19

1 General 1.1 About this manual This manual contains the information for a system configuration of the EGP electric gripper with a safety control system for imple- menting the safety functions SOS (safe operating stop) and STO (safe torque shutdown). This system description does not constitute a complete document- ation. For each application, a risk assessment has to be prepared and applicable standards must be identified and applied. In addition to these instructions, the documents listed under Ap- plicable documents [} 4] are applicable. 1.2 Applicable documents • Assembly and operating manual for gripper EGP • Assembly and operating manual of the sensor - IN 40 * • DGVU Certificate, Certificate No. MF 15008 * • DGVU Certificate, Certificate No. MF 17022 * • Secure control documentation (installation and programming guide) ** The documents marked with an asterisk (*) can be downloaded on our homepage schunk.com SCHUNK assumes no responsibility for the currentness, correct- ness and completeness of the documents indicated with (**).

5 1.3 Components for the system setup NOTE For monitoring of redundant sensor signals, SCHUNK recommends inductive proximity switches IN 40. The following components are required for the system setup: • Electric gripper EGP • 4 x sensors –  e. g. inductive proximity switches IN 40/S-M8, SCHUNK Id-No. 0301474 • Sensor bracket (2x) – SCHUNK Id-No. 9700901 • Spacer sleeve for adjusting the sensor position – SCHUNK Id-No. 5509536 • Sensor distributor • Safety control system – e. g. PILZ PNOZmulti or LTI SMC1-Z10

2 Technical data Notes on the technical data are included in the respective document- ation of the individual components, Applicable documents [} 4].

01.00 | Electric gripper EGP with safety functions | System description | en | 1381596 7 3 Design and description 3.1 Example system setup Systemaufbau Example system setup with safety control system 1 Sensor IN 40 4 Gripper power supply cable 2 Sensor distributor 5 gripper 3 Safety control system (e.g. PILZ PNOZmulti) 6 Sensor bracket Superordinate control system Gripper Superordinate control system Gripper Monitoring level Setup, conventional (left) and with safety function (right)

8 01.00 | Electric gripper EGP with safety functions | System description | en | 1381596 3.2 Description During the system setup, a monitoring level is created with a safety control between the system's superordinate control and the gripper. As a result, the position of the gripper fingers can be monitored in- dependently of the superordinate control and, if necessary, the gripper can be disconnected from the supply voltage and thereby placed to a safe state. The monitoring level differentiates between two modes: • Monitored operation • Released operation In monitored operation mode, the functions of the monitoring level are active. In released operation mode, the functions are not active and haz- ards may arise. In released operation mode, the customer must ensure that the plausibility of the sensor signals is monitored and evaluated. The monitoring level comprises two safety functions and the eval- uation logic: • Safe Operating Stop (SOS) – Safe monitoring of the position of the gripper fingers Cross-attached sensors monitor the position of the gripper fingers. • Safe Torque Off (STO) – Safe deactivation path of the gripper The gripper is deactivated by switching off the power supply. • Evaluation logic – The monitored positions are evaluated by the safety control.  If necessary , the control makes the decision to place the gripper in safe state and maintains this state.

9 4 Functional description 4.1 Definition of the safe state of the gripper The safe state of the gripper is a state in which no danger to per- son or machine arises from the gripper. For the system setup, this means that there are the following two safe states depending on the position of the gripper fingers: • Safe state 1 – Position of the gripper fingers is defined The gripper maintains its position and gripping force to avoid losing a workpiece that it may be holding. • Safe state 2 – Position of the gripper fingers is not defined To avoid crushing, the power to the gripper is disconnected. The change from safe state 1 to safe state 2 is made as soon as the position of the gripper fingers is undefined. This is the case, for example, when a gripped workpiece is re- moved by force application from the gripper during monitored op- eration, no release or the logical release signal low or Emergency Stop. If a workpiece is removed, the gripper fingers move until a signal change is made to one of the sensors (overrun traverse). If the configured gripping force is very low, it is possible that the gripper fingers maintain the position without an overrun. The switch from safe state 2 to safe state  1 is is not allowed. It is possible to exit safe state  1 by reenabling or confirming. Exiting safe state  2 is only possible by solving and acknowledging the existing fault and then reenabling. This prevents unwanted or unexpected reactivation. Alternatively, agreeing and subsequent confirmation can ensure that the gripper is powered until the con- firmation button is released or cut off (panic function).

4.2 Block diagram Gripper open 2 Non-safe (superordinate) control system Power supply Ub = 24V DC ±10% Sensor logic Evaluation logic Relays Gripper open 1 Gripper closed 1 Gripper closed 2 Gripper closed 2 Gripper closed 1 Gripper open 2 Gripper open 1 Open Close Close Open Reset Confirmation button Enable Emergency Stop Interface system Safety sensors and evaluation logic Gripper voltage supply EGP S S S S Sensor distributor SCHUNK products Block diagram 4.3 Superordinate control system The superordinate control system can be run in safe on non-safe mode. There are no special requirements for the superordinate control system. It must be ensured that the connections are made for safety technology comply with the requirements of EN ISO 13849-1. When using a safe superordinate control system, the sensor and evaluation logic that must be executed safely can be implemented in the superordinate control system. In this case, no additional control system is needed. It must be ensured that the safety connections comply with the application-specific requirements of EN ISO 13849-1. If an external relay is used, it may be necessary to use additional signals for monitoring and safe state change. When using integ- rated safe relays, this may be adopted by the safety control sys- tem. NOTE In release mode, the superordinate control must check the plaus- ibility of the redundant sensor signals provided by the safety con- trol system. In release mode, the sensor signals are merely looped through the safety control system.

11 4.4 Safety control system The safety control system provides the power supply UB –  e.g. via a safety relay – for the gripper. The safety control system can de- activate the power supply safely and uses this function as a safe shutdown path. The safety control system receives the target values Open, Close, Reset, Enable, Emergency Stop and Confirm from the superordin- ate control system. The position of the gripper fingers is transmitted to the safety con- trol system via the inputs Gripper Opened 1, Gripper Opened 2, Gripper Closed 1 and Gripper Closed 2. The status of the gripper fingers is forwarded to the superordinate control system via the output signals Gripper Opened 1, Gripper Opened 2, Gripper Closed  1 and Gripper Closed  2. Processing of the sensor signals for further use in the customer- specific application must be performed by the superordinate con- trol system. In maintenance mode and in emergency stop, the safety control system carries out a plausibility check of the sensor signals. In release mode, the sensor signals must be checked for plausibil- ity by the superordinate control system. If this plausibility check is not carried out, an incorrectly set or defective sensor or a gripper that does not operate correctly cannot be detected in release mode. The four sensors signals are provided to the superordinate control system for further processing by the safety control system. Information on the operating mode is provided by the safety con- trol system via the two-channel safety inputs Enable, Emergency Stop and Confirm.

4.5 Program sequence The following diagram shows a model of the behavior of the ap- plication software as a state machine. This is divided into three levels. The levels are divided up based on the state behaviors. Start Enable low Confirm button low Enable high (Confirm button high Reset confirm button edge high) Release mode Emergency stop Maintenance mode Error Emergency stop high Undefined gripper sensor Undefined gripper sensor Reset edge high Emergency stop high Confirm button low Confirm button high Reset confirm button high (Emergency stop low, Enable edge high, Reset edge high) (Confirm button high, Reset confirm button edge high) Diagram of state machine Each state transition is represented by an arrow in the direction of the new state. If the transition condition is true, the state trans- ition occurs. The application software has three basic behaviors: • Release mode – Unchecked transmission of all signals from the gripper to the higher-level control and vice versa. – Only in release mode can the gripper be opened or closed. • Maintenance mode and emergency stop – Transfer the system to the safe state 1. The target values of the superordinate control system are frozen and the gripper position is maintained. • Error – Transfer the system to the safe state 2 by disconnecting power from the gripper. The target values of the superordin- ate control system are frozen. Setting the error output.

01.00 | Electric gripper EGP with safety functions | System description | en | 1381596 13 5 Assembly and installation 5.1 Assembly Information on installation and settings can be found in the re- spective documentation of the individual components, Applicable documents [} 4]. Notes • For the gripper, a total of four sensors must be mounted for the redundant monitoring of the sensor signals. • To avoid common errors, power the sensors only from a power source that ensures that the sensors are not operating outside their specifications. • The safety control system and the sensors must be connected via the same power supply. • The safety control system monitors its own power supply, U=24 V -20 % ... +25%. • If the voltage exceeds or falls below the upper or lower voltage limit, the power supply of the gripper is switched off and the safety control system must be restarted. • The sensors must be configured so that the overrun traverse of the gripper after a workpiece loss is short enough that there is no danger. However, the overrun traverse must be long enough for the safety control system to be able to detect the overrun via the sensor signals, Commissioning checklist [} 15]. Overview Ø Install and connect the gripper. Ø Install the sensor bracket on the gripper. Ø Install the sensor distributor between the sensor cable and the safety control system. Connect the sensor distributor to the safety control system. Ø Install, connect and configure the sensors on the gripper. Ø Install and connect safe control system.

14 01.00 | Electric gripper EGP with safety functions | System description | en | 1381596 5.2 Commissioning Information on the status displays and commissioning of the indi- vidual components can be found in the respective documentation of the individual components, Applicable documents [} 4]. NOTE The operator can use the following checklist to describe and take the commissioning settings into account. The checklist does not lead to full compliance with the legal requirements applicable to the end effector. The forms and processes required for customer- specific application must be observed. For any modification of the customer-specific application, e. g. when gripping different workpieces, the following points must be repeated: • Commissioning, including adjustment of the sensors • Risk assessment • Documentation of commissioning If existing settings can be adopted (e.g. if grip width and risk po- tential due to workpiece weight remain unchanged), this can be substantiated as non-critical by performing the risk assessment again. NOTE During operation, the overrun traverse must be checked at regu- lar intervals in case of component loss, Commissioning checklist [} 15].

01.00 | Electric gripper EGP with safety functions | System description | en | 1381596 15 5.3 Commissioning checklist NOTE: SCHUNK also recommends using this checklist for the forms and processes required by EN ISO13849 and the standards applicable to the customer-specific application. 1. Check correct electrical wiring All components must be connected as specified in the connection diagram. Connection of the cables and the wiring must be carried out according to the relevant standards. 2. Check the power supply to the sensors The sensors are powered from the same power supply as the safety control system or specification-compliant operation is ensured by another measure. Other measure: ____________________________________________ 3. Apply configuration to the safety control system (only if necessary) Insert the chip card with the configuration or insert the chip card and trans- fer configuration via the USB interface. 4. Identify the gripper I.D. gripping: __________________________________________________ O.D. gripping: __________________________________________________ Force-fit gripping or form-fit clamping: ____________________________________ Gripping force adjustment (%): _________________________________________ 5. Identify workpiece The workpiece to be gripped is uniquely identifiable. Name/Revision: ________________________________________________ Dimensions [mm]: ___________________________________________ Workpiece weight (kg): __________________________________________ Grip width of the workpiece (mm): _______________________________ Gripping height or spacing of the upper edge of gripper to the force applica- tion point (mm): ______________________________________________________________ Tolerances (mm):_____________________________________________ Residual stroke = Space between fingers in Gripper Open position – grip width workpiece, residual stroke [mm]: ______________________________________________________________ 6. Adjust the sensors Adjust the four sensors, see the Assembly and Operating Manual of the sensor. Position the sensors: ________________________________________

16 01.00 | Electric gripper EGP with safety functions | System description | en | 1381596 7. Measure the overrun traverse when the component is lost In monitored operation, measure the overrun traverse when the component is lost. To avoid crushing, remove the gripped workpiece using a suitable tool. The safety control system recognizes the movement and switches off the power supply to the gripper. Overrun traverse = gripping width of workpiece - Position of gripper fingers after pulling out the workpiece Position of the gripper fingers: ________________________________________ Evaluate overrun traverse in risk assessment and, if necessary, take suitable measures to reduce the risk potential. Appropriate measures:__________________________________________ ______________________________________________________________ 8. Identify ambient conditions: Clean/dry: ______________________________________________ Ambient temperature [°C] Cycles per minute: _____________________________________________ 9. Assess risk and minimize, if necessary Assess risk based on potential hazard, e. g. crushing during overrun. Evaluate hazard from overrunning and implement appropriate measures, if necessary. Appropriate measures:__________________________________________ ______________________________________________________________ ______________________________________________________________ ______________________________________________________________ ______________________________________________________________ Date of the check: Name of the checker: Signature: ________________ ___________ ___________

17 6 Appendix Further information 2 Wiring diagram 1 (Pilz) [} 18] 2 Wiring diagram 2 (LTI) [} 19]

|IIQHQ *UHLIHU VFKOLH‰HQ 312=P%2 ,G1U 6+' LP6FKDOWVFKUDQNDXIOHJHQ $ 9 $ 9 9 VFKOLH‰HQ [PPð :0  %1  %. 6+' |IIQHQ  :+  %8 9          

= Bahnhofstrasse 106-134 74348 - Komm. Nr.: Identnummer: Anschlussplan 0 1 2 3 4 5 6 7 8 9 Lauffen/Neckar Erstellt Datum 14:25:21 Gepr - Kundennummer: www.schunk.com 1 FCZU Felix Czubatynski M -MA1 1 +24V 2 open 3 GND 4 close SMC1-Z10 LTI MOTION KÖRBER SOLUTIONS +24VDC +24VDC GND GND DI13 DI14 Pulse1 Pulse2 NC NC DO0.1 DO0.2 DI1 DI2 DI3 DI4 DO1H DO1L DO2H DO2L K1.1 K1.2 K2.1 K2.2 DI5 DI6 DI7 DI8 DI9 DI10 DI11 DI12 Relay Semiconductor Switch Supply SMC-E10 LTI MOTION KÖRBER SOLUTIONS +24VDC +24VDC GND GND EA1 EA2 H1 H2 NC NC DO0.1 DO0.2 DI1 DI2 DI3 DI4 EA3 EA4 EA5 EA6 EA7 EA8 EA9 EA10 DI5 DI6 DI7 DI8 DI9 DI10 DI11 DI12 Supply Safe Cross Communication Elektrischer 2-Finger Parallelgreifer EGP-S Reset Greifer öffnen Greifer schließen gestrichelte Objekte von/an übergeordneter Steuerung Not-Halt 1 Freigabe 1 Not-Halt 2 Freigabe 2 Zustimmung 1 Zustimmung 2 -SPLC1 Safe PLC external X11:1 2 3 4 X12:1 2 3 4 X13:1 2 3 4 X14:1 2 3 4 4 3 2 X24:1 4 3 2 X23:1 4 3 2 X22:1 4 3 2 X21:1 X41:COM -SafeIOExt1 Safe I/O Extension external X11:1 2 3 4 X12:1 2 3 4 X13:1 2 3 4 X14:1 2 3 4 4 3 2 X24:1 4 3 2 X23:1 4 3 2 X22:1 4 3 2 X21:1 SCC:IN 4x0,25mm² -WD1 0,25 BN 0,25 BK 0,25 WH 0,25 BU SHD Greifer geöffnet 1 / Greifer geschlossen 1 / Greifer geschlossen 2 / Greifer geöffnet 2 / Signal Freigabe / Signal Fehler / Testtakt 1 Querschlusserkennung / 1.2 Testtakt 2 Querschlusserkennung / 1.2 Greifer geöffnet Sensor 1 (Eingang) / Greifer geöffnet Sensor 2 (Eingang) / Greifer geschlossen Sensor 1 (Eingang) / Greifer geschlossen Sensor 2 (Eingang) / K2.1 / Relaisausgang Greiferversorgung / 1.5 K1.2 / Relaisausgang Greiferversorgung / 1.2 +24V / 1.1 1.2 1.6 GND / 1.1 1.7 Testtakt1 Querschlusserkennung / 1.2 Testtakt2 Querschlusserkennung / 1.2 +24V / 1.0 GND / 1.0 +24V / 1.0 GND / 1.0 +24V / 1.0