🚧 Under construction — VoTechWorks is being built. A free tech program — complimentary, as our commitment to get America working.
voTechWorksGrade 13 · a vocational technology learning center, by urbanicity
newSchoolWorks.com › VoTechWorks › Manufacturing & Marine › Robotics / Mechatronics › Industrial Robots › Lesson 8
MFG-MECH15-06 · Lesson 8 · 10 clock hours · demo

Robot Safety Systems: Safeguarding Devices and Collaborative Operation

Objective. Students test and document the correct function of at least four safeguarding devices in the robot cell and explain the ANSI/RIA R15.06 requirements for collaborative robot operation including speed-and-separation monitoring.

⚠ Pending professional review

This lesson, its worked examples and its practice questions has not yet been verified by a licensed engineer or certified journey-level tradesperson or by a certification or approval body. It is a study draft and may contain errors. Do not use it as instructions for work on a job site or on live equipment. Always follow your instructor, your supervising professional, and current official references and regulations.

VoTechWorks program approval and accreditation are still in progress. Credentials are issued only by the certifying bodies named in each program, after their own exams.

Robot Safety Systems: Safeguarding Devices and Collaborative Operation

Industrial robots are powerful, fast, and unpredictable to anyone who does not understand their programming. Effective safeguarding keeps workers safe by separating people from hazardous motion or, in collaborative applications, by controlling how the robot moves when a person is nearby. The governing standard in the United States is ANSI/RIA R15.06 (aligned with ISO 10218), which sets minimum requirements for the design, installation, and use of industrial robot systems.

Why Safeguarding Matters

A robot executing a looping program does not know a technician has stepped into its work envelope. Without safeguarding, a collision can cause crushing, striking, or entanglement injuries. OSHA 1910.212 requires machine guarding for all machinery, and ANSI/RIA R15.06 applies that requirement specifically to robot cells. Before any safeguarding work, hazardous energy must be controlled under OSHA 29 CFR 1910.147 (lockout/tagout). Electrical work near live circuits requires compliance with NFPA 70E, including verification that voltage is absent before contact. Industrial machinery wiring must meet NFPA 79.

Types of Safeguarding Devices

Hard guarding (perimeter fencing) creates a physical barrier. Fences must be tall enough and close-meshed enough that a person cannot reach over, under, or through them into the hazard zone. R15.06 provides guidance on fence height and opening size relative to the distance from the hazard.

Safety gate interlocks control access points in the fence. When a gate opens, an interlock switch signals the robot controller to stop. Interlocks are typically dual-channel (two separate circuits) so that a single wiring fault does not defeat the safety function. The gate must not be bypassable without a tool.

Light curtains project an infrared beam array across an opening. Breaking any beam triggers an immediate stop command. The curtain must be mounted far enough from the hazard that the robot stops before a hand can reach the danger zone — this distance is called the minimum safety distance.

Emergency stops (E-stops) are manual, non-automatic devices that, when activated, remove power or initiate a controlled stop. On a FANUC system, E-stops appear on the teach pendant, the controller front panel, and optionally on external operator stations. R15.06 requires E-stops to be readily accessible, colored red on a yellow background, and self-latching so they cannot restart automatically.

Safety mats and bumpers detect presence on the floor or contact on the robot body and initiate a stop. These are common in collaborative zones.

Stop Categories

IEC 60204-1 (referenced by NFPA 79 and ANSI/RIA R15.06) defines three stop categories:

Light curtains and safety gates most often trigger Category 0 or Category 1 stops depending on system configuration. Knowing which category a device triggers — and verifying it matches the design spec — is part of the functional test you will perform today.

Collaborative Robot Operation: Four Modes

ANSI/RIA R15.06 and ISO 10218-2 define four modes that allow a robot to operate in the same space as a person under specific conditions. Traditional safeguarding (full stop on entry) is still valid; these modes are alternatives when the task requires human presence.

1. Safety-Rated Monitored Stop (SRMS): The robot holds position, with drives still energized, while a person is in the collaborative workspace. The robot may resume only after the person has left. This is the most conservative collaborative mode.

2. Hand Guiding: An operator physically guides the robot by hand using a device mounted near the end-effector. The device includes an enabling switch and force sensor. Speed is limited, and the operator must hold the enabling switch to allow motion.

3. Speed and Separation Monitoring (SSM): The robot monitors the distance between itself and a detected person (using a safety laser scanner, vision system, or similar sensor). As the person approaches, the robot slows; if the person enters a defined protective zone, the robot stops. When the person moves away, the robot can resume without a manual reset. This is one of the most common collaborative modes in flexible manufacturing.

4. Power and Force Limiting (PFL): The robot limits the mechanical power and force it can deliver so that a collision causes no injury exceeding thresholds defined in ISO/TS 15066. Collaborative robots (cobots) designed under this mode use compliant joints, torque sensing, or current monitoring to detect contact and stop instantly.

Minimum Safety Distance Concept

For light curtains and similar presence-sensing devices, R15.06 references the formula from OSHA and ANSI B11 standards:

Ds = K × (Ts + Tc + Tr + Tbm)

Where:

The result tells you how far the light curtain must be from the hazard so the machine stops before a hand can travel from the curtain to the danger point.

Safe Work Practices During This Lesson

Before triggering any safeguarding device, confirm with your instructor that the robot is in its approved looping idle program and that no one else is inside the cell. Wear safety glasses at all times in the lab. Never defeat or bypass a safety device — even for testing — without written authorization and a documented safe state. Log every test result immediately; do not reconstruct the log from memory after the session.

Key terms10

ANSI/RIA R15.06The primary US standard for industrial robot safety, covering safeguarding requirements, risk assessment, and collaborative operation modes; aligned with ISO 10218.
Stop Category (0, 1, 2)IEC 60204-1 classifications describing how a machine stops: Category 0 removes power immediately; Category 1 decelerates then removes power; Category 2 decelerates and holds position with power maintained.
Light curtainA presence-sensing safeguarding device that projects an infrared beam array across an opening; breaking any beam triggers a stop signal to the machine controller.
Safety gate interlockA dual-channel switch on a perimeter fence gate that signals the robot controller to stop when the gate is opened, preventing access while the robot is in automatic motion.
Speed and Separation Monitoring (SSM)A collaborative robot operating mode in which the robot continuously monitors its distance from a detected person and reduces speed or stops as that distance decreases.
Power and Force Limiting (PFL)A collaborative operating mode in which the robot limits the mechanical power and contact force it can exert so that an unintended collision does not cause injury beyond defined thresholds.
Minimum safety distance (Ds)The required distance between a safeguarding device and the hazard zone, calculated so the machine stops completely before a hand can travel from the device to the danger point.
Emergency stop (E-stop)A manually actuated, self-latching device that initiates an immediate stop of hazardous motion; must be red on a yellow background and readily accessible per R15.06 and IEC 60204-1.
Safety-Rated Monitored Stop (SRMS)A collaborative robot mode in which the robot stops and holds position with drives energized while a person is present; it may resume only after the person leaves the collaborative workspace.
Hand guidingA collaborative robot mode in which an operator physically steers the robot by hand through a guiding device that includes an enabling switch and speed limiting; used for tasks requiring close human direction.

Worked examples3

1. A light curtain is being positioned on a FANUC robot cell. The robot stopping time (Ts) is 0.15 s, the control system response time (Tc) is 0.02 s, the light curtain response time (Tr) is 0.02 s, and no brake monitor delay is used (Tbm = 0). Using K = 63 in/s, calculate the minimum safety distance Ds.
  1. Write the formula: Ds = K × (Ts + Tc + Tr + Tbm)
  2. Add the time values: 0.15 + 0.02 + 0.02 + 0 = 0.19 s
  3. Multiply by K: Ds = 63 in/s × 0.19 s = 11.97 in
Answer: The light curtain must be mounted at least 11.97 inches (approximately 12 inches) from the hazard zone.
2. A robot cell adds a brake monitor that introduces an additional delay of Tbm = 0.030 s. All other values from the previous example remain the same (K = 63 in/s, Ts = 0.15 s, Tc = 0.02 s, Tr = 0.02 s). What is the new minimum safety distance?
  1. Write the formula: Ds = K × (Ts + Tc + Tr + Tbm)
  2. Add all time values: 0.15 + 0.02 + 0.02 + 0.030 = 0.22 s
  3. Multiply by K: Ds = 63 in/s × 0.22 s = 13.86 in
Answer: The updated minimum safety distance is 13.86 inches (approximately 14 inches), showing that adding the brake monitor requires moving the curtain farther from the hazard.
3. During the functional test log, a student triggers the safety gate interlock and observes that the robot decelerates smoothly to a stop over about 0.8 seconds, then servo power drops. The student also measures that after acknowledging the gate-closed signal, the system requires a manual reset button press before the robot restarts. Which stop category does this behavior match, and what does the required manual reset indicate about the safety system design?
  1. Review stop category definitions: Category 0 = immediate power removal (coast stop); Category 1 = controlled deceleration then power removed; Category 2 = controlled deceleration with power maintained.
  2. The robot decelerated under control and then power was removed — this matches Category 1.
  3. The requirement for a manual reset (rather than an automatic restart when the gate closes) is a deliberate safety design: it prevents the robot from restarting unexpectedly while someone may still be inside the cell, consistent with R15.06 requirements.
Answer: The gate interlock triggered a Category 1 stop. The manual reset requirement is correct safety design — it ensures a deliberate human action is needed before restart, preventing unexpected motion after re-guarding.
In class: Safeguarding device functional test: with the robot running a looping idle program, students individually trigger the light curtain, safety gate interlock, E-stop mushroom on the pendant, and E-stop on the controller, recording in a test log whether the robot stopped in controlled stop (Category 1 or 2) or power-off stop (Category 0) and how long reset took. · ANSI/RIA R15.06 collaborative operation modes lecture and discussion: instructor presents the four collaborative modes (hand guiding, speed and separation monitoring, power and force limiting, safety-rated monitored stop) using diagrams; students answer scenario questions identifying which mode applies to a given task and why. · Safeguarding design scenario: in pairs, students are given a new cell layout drawing and must specify safeguarding (fence height, gate interlock type, light-curtain minimum safety distance calculation concept) citing R15.06; pairs present their design to the class for critique.
Materials: FANUC robot cell with light curtain, safety gate, and E-stops installed, ANSI/RIA R15.06 summary handout, safeguarding-test log form, cell layout drawings for scenario exercise, whiteboard
Check: Safeguarding test log completed with correct stop-category identification for all four devices (instructor verified). Scenario design presentation evaluated on correct R15.06 citations and safety distance logic. Pass = all four devices logged correctly plus acceptable design rationale.

Practice check8

Answer each question, then check it. Nothing is recorded; this is your own practice.

FANUC CERT / Robot Safety
1. A technician opens the safety gate on a robot cell and the robot immediately loses drive power and coasts to rest without any controlled deceleration. Which stop category has occurred?
PMMI Mechatronics / Robot Safety
2. Which ANSI/RIA R15.06 collaborative operation mode allows a robot to continue moving while a person is present but automatically slows and stops as the person gets closer to the robot?
FANUC CERT / Robot Safety
3. An engineer is designing a cobot station where the robot must occasionally make light contact with a worker's hand during an assembly assist task. Which collaborative mode is most appropriate?
PMMI Mechatronics / Safety Systems
4. A light curtain is installed with a minimum safety distance of 14 inches. A new project reduces the robot's stopping time, shortening the total response time sum from 0.22 s to 0.18 s (K = 63 in/s). What is the newly calculated minimum safety distance?
FANUC CERT / Siemens SMSCP / Workplace Safety
5. OSHA 29 CFR 1910.147 applies to robot cell work when a technician needs to enter the cell for maintenance. What is the primary requirement of this standard?
FANUC CERT / Robot Safety
6. During the safeguarding functional test, a student presses the E-stop on the teach pendant and notes that the robot stopped but the controller display still shows servo power active and the robot is holding its position. Which stop category does this indicate?
Siemens SMSCP / PMMI Mechatronics
7. A safety gate interlock uses two separate wiring channels (dual-channel design). What is the primary reason for dual-channel design in a safety interlock?
Siemens SMSCP / PMMI Mechatronics / Electrical Safety
8. Which standard specifically addresses electrical safety in the workplace, including arc-flash and shock boundaries, PPE selection, and energized-work permits for work on industrial robot control panels?
Record this lesson on my transcript. Sign in with your key and enrollment email to record lessons (enroll free if you have no key). This page stays open to read and practise.