Some standard content:
ICS13.110
National Standard of the People's Republic of China
GB/T19670—2005
Safety of machinery-Prevention of unexpected start-up (ISO14118:2000, MOD)
2005-02-21 Issued
General Administration of Quality Supervision, Inspection and Quarantine of the People's Republic of China Standardization Administration of China
Scatter code prevention
2005-07-01 Implementation
People's Republic of China
National Standard
Machinery safety against unexpected start-up
GB/T19670—2005
Published and distributed by China Standards Press
No. 16, Sanlihebei Street, Fuxingmenwai, Beijing
Postal Code: 100045
Website: bzcbs.com
Tel: 68 52394668517548
Printed by China Standards Press Qinhuangdao Printing Factory Distributed by Xinhua Bookstores in various regions
6 sheets 0.75 Word count 14,000 words
Format 880×12301/16
First printing in June 2005
First edition in June 2005
Book number: 155066·1-22505 Price 10.00 yuan Replaced by the publishing center of this company
If there is any printing error
Copyright infringement will be investigated
Report telephone: (010)68533533
This standard is modified to adopt ISO14118:2000 "Safety of Machinery against Unexpected Start-up" (English version). This standard is redrafted based on ISO14118:2000. This standard is different from ISO14118:2000 in the following aspects: GB/T19670—2005
1. The introduction of the referenced standard is modified according to GB/T1.1-2000, and the referenced international and foreign standards are changed to the corresponding national standards.
2. The introduction is deleted. The original introduction describes the past understanding of the concepts of "operating the machine" and "stopping" and the contents involved in the standard, which is not very useful for understanding this standard, so it is cancelled. 3. The references (informative appendix) are deleted. The references list some references to European standards or draft standards, which are not very useful for understanding this standard, so they are deleted. For ease of use, this standard has also made the following editorial changes: a) "The term this international standard is changed to 'this standard'"; b) The foreword of the international standard is deleted.
Appendix A and Appendix B of this standard are informative appendices. This standard is proposed and managed by the National Technical Committee for Mechanical Safety Standardization. The responsible drafting unit of this standard: Mechanical Science Research Institute. The drafting unit of this standard is China Institute of Standardization and Information Classification and Coding. The main drafters of this standard are Nie Beigang, Shi Junwei, Li Qin, Ma Xianzhi, Zhang Mingxu, Xiao Xiong and Huang Wei. 1 Scope
Machinery safety to prevent accidental start
GB/T19670—2005
This standard specifies various built-in safety measures to prevent accidental start of machines so that personnel can safely enter the danger zone (see Appendix A).
This standard applies to accidental start caused by various energy sources. These energy sources are: power sources, such as electrical, hydraulic, and pneumatic power sources; stored energy, such as gravity, stored energy caused by compression springs, and external factors, such as wind.
2 Normative references
The clauses in the following documents become clauses of this standard through reference in this standard. For any dated referenced document, all subsequent amendments (excluding errata) or revisions are not applicable to this standard. However, parties to an agreement based on this standard are encouraged to investigate whether the latest versions of these documents can be used. For any undated referenced document, the latest version applies to this standard. GB5226.1—2002 Safety of machinery - Electrical equipment of machinery - Part 1: General technical requirements (IEC60204-1:2000, IDT) GB/T15706.1—1995 Basic concepts and general design principles for machinery safety - Part 1: Basic terminology and methodology (GB/T15706.1--1995egvISO/TR12100-1:1992) GB/T15706.2—1995 Basic concepts and general design principles for machinery safety General design rules Part 2: Technical principles and specifications (GB/T15706.21995egvISO/TR12100-2:1992) GB/T16856-1997 Principles of risk assessment for machinery safety (GB/T16856-1997egYprEN1050:1994)) 3 Terms and definitions
In addition to the terms and definitions given in GB/T15706.1, this standard also uses the following terms and definitions. 3.1
Start-up, machine start-up, machine start-up The change from rest to motion of a machine or its parts. Note: This definition focuses on function rather than motion, such as the turning on of a laser. 3.2
Unexpected (or unintended) start-up Start-up caused by the following reasons:
Start-up command caused by internal failure of the control system or the influence of external factors on the control system; Start-up command caused by inappropriate action of the start controller or other components of the machine (such as sensors or power control elements);
Start-up caused by the restoration of the power source after interruption; Start-up caused by the internal or external influence of the parts of the machine (gravity, wind, automatic ignition of internal combustion engines, etc.). Note: During normal operation, the start of an automatic machine is not an unexpected start, but it can be regarded as an unexpected start as far as the operator is concerned. In this case, safety protection measures should be used to prevent accidents (see Chapter 4 of GB/T15706.2). 3.3bzxZ.net
Isolation and energy dissipation The isolation and energy dissipation procedure includes the following four steps: GB/T19670--2005
a) Disconnect the machine (or designated parts of the machine) from all energy sources; lock (or fix) in the "disconnected" position, and if necessary (such as in large machines or facilities), lock all disconnect devices in the "disconnected" position: b)
open: c) Release or limit any accumulated energy that can cause danger; Note: Energy may be stored in:
In mechanical parts that continue to operate due to inertia; In mechanical parts that are prone to movement due to gravity; In capacitors and accumulators;
In variable pressure fluids;
In springs.
d) Verify the effectiveness of the safe work procedure measures adopted in a), b), and c) above. 4 General requirements
4.1 Disconnection and energy release
The machine should have a device for disconnection and energy release (see Chapter 5), especially when the machine is overhauled, live work and dismantled, it is necessary to have a disconnection and energy release device (see 6.2.2 of GB/T15706.2-1995). 4.2 Other measures to prevent accidental (unintended) start-up In situations where disconnection and energy release are not suitable (such as short-term involvement in the danger zone), the designer should provide other measures to prevent accidental start-up based on the risk assessment results (see GB/T16856). Additional measures such as signals and/or warnings are appropriate, see Appendix B.
Note 1: Appendix A gives an example of work that requires personnel to perform in the danger zone. Note 2: According to 5.7.1 of GB/T15706.1-1995, the designer should determine the different operating modes of the machine and the needs of personnel in the danger zone as completely as possible for the operator and provide appropriate safety measures. These measures should prevent the operator from adopting dangerous operating modes and dangerous intervention techniques due to technical difficulties in the use of the machine (see 3.12 of GB/T15706.1-1995). 5 Disconnection and energy release device
5.1 Device for disconnecting the power source
5.1.1 The disconnection device should:
- Ensure reliable disconnection (disconnection, separation); There should be a reliable mechanical connection between the manual operator and the disconnection element;- The state of the disconnection device corresponding to each position of the manual operator should be clearly identified. Note 1: For electrical equipment, it shall comply with 5.The power source disconnect device of paragraph 3 meets this requirement. Note 2: The power plug and socket system, or its equivalent pneumatic, hydraulic or mechanical device, are examples of disconnect devices. The use of such devices in the power circuit can achieve visible and reliable disconnection. For the power plug and socket combination, see d in 5.3.2 of GB5226.1-2002). Note 3: For hydraulic and pneumatic equipment, the power source disconnect device should be easy to cut off the supply of hydraulic or pneumatic sources and release the loaded pressure. 5.1.2 The location and number of disconnect devices depend on the construction of the machine, the requirements for whether personnel enter the danger zone and the results of risk assessment. Each disconnect device that controls the disconnection of the machine or a part of the machine and the object controlled by each disconnect device must be clearly marked. (Permanent marking is used when necessary).
Note: For electrical equipment of machinery, see 5.4 of GB5226.1-2002. 5.1.3 When some circuits must remain normally connected to the power source during the disconnection of the machine power source in order to clamp the workpiece, save information or provide local lighting, special measures should be taken to ensure the safety of the operator. Note: Special measures can be covers, warning signs and/or alarm lights that can only be opened with a key or special tools. 5.2 Locking (fixing) device
The disconnection device should be able to be locked or otherwise fixed in the disconnected position. 2
Note, when a plug/socket combination is used and the person in the danger zone can directly control the plug, the locking device may not be required. The locking device includes:
a device consisting of one or more padlocks;
GB/T19670-2005
trapdoor key interlocking device, one of which is matched with the manual control (brake) of the locking device. Lockable box or cover.
When the disconnection device can be reconnected without causing danger to people, the locking device is not required. 5.3 Energy release or limitation device
5.3.1 General requirements
5.3.1.1 Where the stored energy may cause danger, the machine shall be equipped with energy release or limitation device. Note: These devices include brakes that absorb the kinetic energy of moving parts, resistors and corresponding circuits that release charged capacitors, valves or similar devices that reduce the pressure of fluid accumulators (see Note 3 of 5.1.1).
5.3.1.2 When the stored energy released will cause the capacity of the machine used to be excessively reduced, additional measures shall be taken to ensure the remaining stored energy. 5.3.1.3 Energy release or limitation devices shall be reasonably selected and arranged so that: after the machine (or a part thereof) is disconnected, the stored energy is released or limited; and the energy release process does not produce dangerous working conditions. 5.3.1.4 The operating procedures for energy release or limitation shall be stated in the machine manual or indicated on the warning plate on the machine. 5.3.2 Mechanical parts
When a machine part creates a hazardous condition due to its mass and position (e.g. imbalance, elevated position or movement under gravity) or due to elastic loads (regardless of how they are generated), a manual operator or specially designed device should be used to keep the machine part in a state of minimum energy.
When a machine part cannot reach an inherently safe state, it should be mechanically fixed by a brake or mechanical restraint device (see 2.23.6 of GB/T15706.1-1995). 5.3.3 Locking or fixing facilities for limiting devices Energy limiting devices should have locking or other fixing functions at all times. 5.4 Verification
5.4.1 General requirements
The design, selection and placement of the machine and its disconnection and energy release or limiting devices should ensure that the disconnection and energy release or limiting effects can be reliably verified.
The verification of the effectiveness of disconnection and energy release should not impair their effectiveness. 5.4.2 Measures for verifying disconnection
The disconnection of any power source shall be visible (visible interruption of the power source circuit) or indicated by the obvious position of the manual control (operator) of the disconnect device.
Note: See also 5.1.1 for the mechanical connection between the disconnect element and the manual control. 5.4.3 Measures for verifying energy release or limitation 5.4.3.1 In order to verify that some parts of the machine intended to release energy do not store energy, fixed (built-in) indicating devices (such as pressure gauges) or test points shall be provided.
5.4.3.2 The instructions shall provide clear guidance on the safety verification procedures (see 5.5 of GB/T15706.2-1995). 5.4.3.3 Permanent warning signs indicating the presence of hazardous stored energy (such as compressed springs) shall be fixed on movable or removable assembly components. 6 Other measures to prevent accidental start-up
6.1 Design countermeasures
If neither disconnection nor energy release measures are suitable for preventing accidental start-up, the designer shall adopt the following measures based on the results of the risk assessment: - measures to prevent accidental start commands from being issued by any part of the machinery due to internal and external influences (relevant measures in the design, selection and positioning of components and parts) (see 6.2); measures to prevent accidental start-up due to accidental start commands, which depend on the structure of the system (see 6.3); - measures to prevent accidental start-up caused by accidental start commands before the machine parts that cause accidental start-up cause hazardous conditions; Methods for stopping the machine automatically before it is started (see 6.4). The selected measures should not be used as a substitute for the disconnection and energy release measures specified in Chapter 5. Note: The measures selected to prevent accidental start-up are, in most cases, a combination of the different measures listed in this chapter. 6.2 Measures to prevent accidental triggering of start commands 6.2.1 Measures to prevent accidental triggering of manual starting manipulators should be implemented through reasonable design, positioning, protection and marking of the starting manipulators to prevent accidental triggering and unexpected consequences after triggering (such as starting another machine or causing movement in the wrong direction). The function of the manual starting manipulator must be clearly expressed, such as by marking (see also the first paragraph of Appendix B). The lack of such marking information may cause personal injury. Note 1: GB/T15706.2-1995 Guidance is given in clause 3.7.8. Note 2: Other examples of measures to prevent accidental start-up are locking of manual start controls, passwords in programmable control systems, etc. 6.2.2 Design of safety-related components in data storage and data processing devices If the risk assessment (performed in accordance with GB/T16856) involves the occurrence of accidental start instructions, then: the safety-related components and components of the data storage and data processing devices (see Figure 1) should be reasonably designed and selected so that the probability of them generating accidental start instructions is sufficiently low.
Note 1: Guidance can be found in:
Clause 3.7 of GB/T15706.2-1995;
Chapter 9 and Chapter 12 of GB5226.1-2002. See also GB/T16855. 1.
Note 2: Where programmable electronic systems are used to control machinery, it is currently difficult to determine the reliability of single-channel programmable electronic systems in correctly controlling machinery. In addition, improper operation of such systems may lead to dangerous uncertainties. Therefore, it is not advisable to rely solely on the correct operation of such single-channel systems to control machinery (see the note to 12.3.5 of GB5226.1).
6.2.3 Selection, use and configuration of power control elements Power control elements (such as contactors, valves, see Figure 1) should be reasonably selected and/or used so that they do not change their state (such as from disconnected to connected) under external influences (such as fluctuations of the highest expected values such as vibration and shock under predetermined conditions of use) or when the power source is disturbed (such as fluctuations of pressure or voltage values within specified tolerances). If necessary (especially when they are manually operated), power control elements should be fixed in a housing to prevent unintended triggering.
6.3 Measures to prevent accidental start-up caused by accidental start-up instructions 6.3.1 Principle
Maintaining stop instructions are transmitted to the machine separately or jointly from different "levels" (see Figure 1). These stop instructions can be generated by the stop control device (see 6.3.2) or by the safety (protection) device (see 6.3.3). The maintenance stop instruction can be replaced or added by mechanical disconnection (see 6.3.4) or locking of moving parts (see 6.3.5). If the maintenance stop instruction has been issued, the machine parts located before the instruction issuance level (A, B or C) should not generate the machine accidental start instruction. If the mechanical connection has been disconnected (level D) or the moving parts have been locked (level E), the machine accidental start instruction should not be generated (see Figure 1).
6.3.2 The input of the hold stop command generated by the stop control device at level A, B or C (see Figure 1) is to prevent accidental start caused by accidental start commands (including those caused by the control system itself). If the control system is designed in accordance with GB/T15706.2-1997 to ensure that the stop command always takes precedence over the start command, the manual stop operator (or stop control device) can be kept in the "off/stop" state. Maintaining the "off/stop" state can be achieved by the following means: - Use a door lock or key-operated stop control device that maintains the stop command (until it is manually reset). - Use a lockable selector switch with a reliable and obvious position indicator to maintain the stop command until the switch is manually reset.
Manual controller
Control device
Data storage and logic circuit or analog data processing output
Safety device
Power control element
(Contactor gate
Speed controller, etc.)
Protective device
Machine actuating mechanism
(Engine cylinder)
Disconnection measures
(Clutch brake)
Power transmission element
Working part
Power source of machine actuating mechanism
Mechanical connection
Maintain stop command||tt| |Maintain the input level of the stop command
GB/T19670—2005
Examples of technical measures implemented at each level
Interlock control (such as at the
input level of
programmable controller)
Interlock control (such as at the
control level of
contactor)
Power interlock
Machine wool is not connected
Fixation of moving parts
Figure 1 is the application of measures to prevent accidental start caused by accidental start command. A lockable enclosure is used, which forces the manual stop operator to enter the "off/stop" state when locked. If this enclosure can also prevent access to the manual start operator, accidental operation of the start operator can be avoided. A movable guard is used, and once it is opened, the manual stop operator is forced to enter the "off/stop" state. If the movable guard can also prevent access to the manual starter, the accidental operation of the starter can be avoided. The design and selection of appropriate fixing devices are based on: unambiguity, that is, a clear and obvious indication when the device is in the "off/stop" state; reliability, that is, the device has the ability to remain in the "off/stop" state. In order to keep the stop control device in the "off/stop" state, for the stop control device provided with a fastening device, the fastening device itself should not generate a restart command when the fastening device is removed. 6.3.3 Input of the hold stop command generated by the safety (protection) device at level A, B or C (see Figure 1) When personnel are in the danger zone, in order to prevent the machine from running (regardless of the reason, including accidental start), a safety (protection) device or a combination of several safety (protection) devices should be selected. According to the risk assessment results (see GB/T16856-1997), the unchangeable stop command generated by these safety (protection) devices should be input to the corresponding level (see Figure 1). Note: Guiding principles can be found in 4.1\Selection of protective devices and safety devices\ of GB/T15706.2-1995. 6.3.4 Mechanical disconnection (Class D, see Figure 1)
GB/T19670-2005
Mechanical disconnection devices (such as clutches) should be properly designed, selected and used, and monitored where necessary to ensure that the moving parts of the machine are separated from the machine's actuating mechanism.
6.3.5 Securing of moving parts (Class E, see Figure 1) When moving parts are secured by means of mechanical restraints (such as wedges, spindles, supports, brake rods, etc. that are integral parts of the machine), the mechanical strength of such mechanical restraints should be able to withstand the forces generated when the machine is started. If the above requirements are not feasible and mechanical restraints are also required to prevent movement of machine parts, such as under the influence of gravity, or if actuation of the machine actuators after securing the moving parts may damage the machine or cause danger to personnel, interlocks operating in Class B and Class C (see Figure 1) shall be able to prevent the machine from starting as soon as the mechanical restraints secure the moving parts. 6.4 Automatic monitoring of class 2 stop states
When the machine is stationary in a class 2 stop state (see 9.2.2 of GB5226.1-2002), any unexpected start command will result in an unintended start.
If other measures to prevent unintended start are not feasible, monitoring of the stop state may be used, and if an unintended start (or its initiation) is detected, a class 0 stop state is triggered. Inspection
Corrective activities (obstruction removal, etc.)
Setting, adjustment
-Manual loading/unloading
Replacement of station
-Lubrication
-Cleaning
-Disassembly
Simple maintenance/repair
Diagnosis, testing
Live working
Appendix A
(Informative Appendix)
Examples of work requiring personnel in hazardous areasMajor repair (requiring extensive disassembly work ）
GB/T19670—2005
GB/T19670—2005
Appendix B
(Informative Appendix)
Signals and Warnings
The indicative signal device configured on the machine gives different states of the machine (such as "power on", "waiting for startup", "program running", "failure", "waiting for feeding"), various possible control and operation modes, making the functions and effects of the manual manipulator easier to predict and understand. If the operator cannot see all the danger zones at the operating position and it cannot be absolutely ruled out that someone will appear in the danger zone, an audible alarm signal should be triggered before the machine starts, so that those in the danger zone have enough time to leave the danger zone or prevent the machine from starting, such as activating the emergency stop device.
Copyright exclusive infringement must be investigated
Book number: 1550661-22505
GB/T19670-20052-1995 4.1\Selection of guards and safety devices\. 6.3.4 Mechanical disconnection (Class D, see Figure 1)
GB/T19670-2005
Mechanical disconnection devices (such as clutches) should be properly designed, selected and used, and monitored where necessary, to ensure that the moving parts of the machine are separated from the machine's actuating mechanism.
6.3.5 Securing of moving parts (Class E, see Figure 1) When moving parts are secured by means of mechanical restraints (such as wedges, spindles, supports, brake bars, etc. that are integral to the machine), the mechanical strength of such mechanical restraints should be able to withstand the forces generated when the machine is started. If the above requirements are not feasible and mechanical restraints are also required to prevent movement of machine parts under the influence of gravity, for example, or when the actuating mechanism of the machine may damage the machine or cause danger to people after the moving parts are secured, the interlocking devices operating in Classes B and C (see Figure 1) should be able to prevent the machine from starting as soon as the mechanical restraints secure the moving parts. 6.4 Automatic monitoring of the 2-category stop state
When the machine is in a stationary state with a 2-category stop (see 9.2.2 of GB5226.1-2002), any unexpected start command will result in an unexpected start.
If other measures to prevent unexpected start are not feasible, monitoring of the stop state can be used to solve the problem, and once an unexpected start (or its beginning) is detected, a 0-category stop is triggered. Inspection
Corrective activities (obstruction removal, etc.)
Setting, adjustment
-Manual loading/unloading
Replacement of station
-Lubrication
-Cleaning
-Disassembly
Simple maintenance/repair
Diagnosis, testing
Live working
Appendix A
(Informative Appendix)
Examples of work requiring personnel in hazardous areasMajor repair (requiring extensive disassembly work ）
GB/T19670—2005
GB/T19670—2005
Appendix B
(Informative Appendix)
Signals and Warnings
The indicative signal device configured on the machine gives different states of the machine (such as "power on", "waiting for startup", "program running", "failure", "waiting for feeding"), various possible control and operation modes, making the functions and effects of the manual manipulator easier to predict and understand. If the operator cannot see all the danger zones at the operating position and it cannot be absolutely ruled out that someone will appear in the danger zone, an audible alarm signal should be triggered before the machine starts, so that those in the danger zone have enough time to leave the danger zone or prevent the machine from starting, such as activating the emergency stop device.
Copyright exclusive infringement must be investigated
Book number: 1550661-22505
GB/T19670-20052-1995 4.1\Selection of guards and safety devices\. 6.3.4 Mechanical disconnection (Class D, see Figure 1)
GB/T19670-2005
Mechanical disconnection devices (such as clutches) should be properly designed, selected and used, and monitored where necessary, to ensure that the moving parts of the machine are separated from the machine's actuating mechanism.
6.3.5 Securing of moving parts (Class E, see Figure 1) When moving parts are secured by means of mechanical restraints (such as wedges, spindles, supports, brake bars, etc. that are integral to the machine), the mechanical strength of such mechanical restraints should be able to withstand the forces generated when the machine is started. If the above requirements are not feasible and mechanical restraints are also required to prevent movement of machine parts under the influence of gravity, for example, or when the actuating mechanism of the machine may damage the machine or cause danger to people after the moving parts are secured, the interlocking devices operating in Classes B and C (see Figure 1) should be able to prevent the machine from starting as soon as the mechanical restraints secure the moving parts. 6.4 Automatic monitoring of the 2-category stop state
When the machine is in a stationary state with a 2-category stop (see 9.2.2 of GB5226.1-2002), any unexpected start command will result in an unexpected start.
If other measures to prevent unexpected start are not feasible, monitoring of the stop state can be used to solve the problem, and once an unexpected start (or its beginning) is detected, a 0-category stop is triggered. Inspection
Corrective activities (obstruction removal, etc.)
Setting, adjustment
-Manual loading/unloading
Replacement of station
-Lubrication
-Cleaning
-Disassembly
Simple maintenance/repair
Diagnosis, testing
Live working
Appendix A
(Informative Appendix)
Examples of work requiring personnel in hazardous areasMajor repair (requiring extensive disassembly work ）
GB/T19670—2005
GB/T19670—2005
Appendix B
(Informative Appendix)
Signals and Warnings
The indicative signal device configured on the machine gives different states of the machine (such as "power on", "waiting for startup", "program running", "failure", "waiting for feeding"), various possible control and operation modes, making the functions and effects of the manual manipulator easier to predict and understand. If the operator cannot see all the danger zones at the operating position and it cannot be absolutely ruled out that someone will appear in the danger zone, an audible alarm signal should be triggered before the machine starts, so that those in the danger zone have enough time to leave the danger zone or prevent the machine from starting, such as activating the emergency stop device.
Copyright exclusive infringement must be investigated
Book number: 1550661-22505
GB/T19670-2005
Tip: This standard content only shows part of the intercepted content of the complete standard. If you need the complete standard, please go to the top to download the complete standard document for free.