MFG-MECH15-06 · Lesson 8 · 10 clock hours · demo
Robot Safety Systems: Safeguarding Devices and Collaborative Operation
Objective. Students test and document the correct function of at least four safeguarding devices in the robot cell and explain the ANSI/RIA R15.06 requirements for collaborative robot operation including speed-and-separation monitoring.
⚠ Pending professional review
This lesson, its worked examples and its practice questions has not yet been verified by a licensed engineer or certified journey-level tradesperson or by a certification or approval body. It is a study draft and may contain errors. Do not use it as instructions for work on a job site or on live equipment. Always follow your instructor, your supervising professional, and current official references and regulations.
VoTechWorks program approval and accreditation are still in progress. Credentials are issued only by the certifying bodies named in each program, after their own exams.
Robot Safety Systems: Safeguarding Devices and Collaborative Operation
Industrial robots are powerful, fast, and unpredictable to anyone who does not understand their programming. Effective safeguarding keeps workers safe by separating people from hazardous motion or, in collaborative applications, by controlling how the robot moves when a person is nearby. The governing standard in the United States is ANSI/RIA R15.06 (aligned with ISO 10218), which sets minimum requirements for the design, installation, and use of industrial robot systems.
Why Safeguarding Matters
A robot executing a looping program does not know a technician has stepped into its work envelope. Without safeguarding, a collision can cause crushing, striking, or entanglement injuries. OSHA 1910.212 requires machine guarding for all machinery, and ANSI/RIA R15.06 applies that requirement specifically to robot cells. Before any safeguarding work, hazardous energy must be controlled under OSHA 29 CFR 1910.147 (lockout/tagout). Electrical work near live circuits requires compliance with NFPA 70E, including verification that voltage is absent before contact. Industrial machinery wiring must meet NFPA 79.
Types of Safeguarding Devices
Hard guarding (perimeter fencing) creates a physical barrier. Fences must be tall enough and close-meshed enough that a person cannot reach over, under, or through them into the hazard zone. R15.06 provides guidance on fence height and opening size relative to the distance from the hazard.
Safety gate interlocks control access points in the fence. When a gate opens, an interlock switch signals the robot controller to stop. Interlocks are typically dual-channel (two separate circuits) so that a single wiring fault does not defeat the safety function. The gate must not be bypassable without a tool.
Light curtains project an infrared beam array across an opening. Breaking any beam triggers an immediate stop command. The curtain must be mounted far enough from the hazard that the robot stops before a hand can reach the danger zone — this distance is called the minimum safety distance.
Emergency stops (E-stops) are manual, non-automatic devices that, when activated, remove power or initiate a controlled stop. On a FANUC system, E-stops appear on the teach pendant, the controller front panel, and optionally on external operator stations. R15.06 requires E-stops to be readily accessible, colored red on a yellow background, and self-latching so they cannot restart automatically.
Safety mats and bumpers detect presence on the floor or contact on the robot body and initiate a stop. These are common in collaborative zones.
Stop Categories
IEC 60204-1 (referenced by NFPA 79 and ANSI/RIA R15.06) defines three stop categories:
- Category 0 – Power is removed immediately. The robot coasts to a stop. This is the fastest removal of energy but the least controlled — the robot may drift from its path.
- Category 1 – The robot decelerates under power to a controlled stop, then power is removed.
- Category 2 – The robot decelerates under power to a controlled stop, and power remains applied to hold position.
Light curtains and safety gates most often trigger Category 0 or Category 1 stops depending on system configuration. Knowing which category a device triggers — and verifying it matches the design spec — is part of the functional test you will perform today.
Collaborative Robot Operation: Four Modes
ANSI/RIA R15.06 and ISO 10218-2 define four modes that allow a robot to operate in the same space as a person under specific conditions. Traditional safeguarding (full stop on entry) is still valid; these modes are alternatives when the task requires human presence.
1. Safety-Rated Monitored Stop (SRMS): The robot holds position, with drives still energized, while a person is in the collaborative workspace. The robot may resume only after the person has left. This is the most conservative collaborative mode.
2. Hand Guiding: An operator physically guides the robot by hand using a device mounted near the end-effector. The device includes an enabling switch and force sensor. Speed is limited, and the operator must hold the enabling switch to allow motion.
3. Speed and Separation Monitoring (SSM): The robot monitors the distance between itself and a detected person (using a safety laser scanner, vision system, or similar sensor). As the person approaches, the robot slows; if the person enters a defined protective zone, the robot stops. When the person moves away, the robot can resume without a manual reset. This is one of the most common collaborative modes in flexible manufacturing.
4. Power and Force Limiting (PFL): The robot limits the mechanical power and force it can deliver so that a collision causes no injury exceeding thresholds defined in ISO/TS 15066. Collaborative robots (cobots) designed under this mode use compliant joints, torque sensing, or current monitoring to detect contact and stop instantly.
Minimum Safety Distance Concept
For light curtains and similar presence-sensing devices, R15.06 references the formula from OSHA and ANSI B11 standards:
Ds = K × (Ts + Tc + Tr + Tbm)
Where:
- Ds = minimum safety distance (inches or mm)
- K = hand speed constant (typically 63 in/s per OSHA guidance)
- Ts = stopping time of the machine
- Tc = response time of the control system
- Tr = response time of the safeguarding device
- Tbm = additional time for brake monitor, if used
The result tells you how far the light curtain must be from the hazard so the machine stops before a hand can travel from the curtain to the danger point.
Safe Work Practices During This Lesson
Before triggering any safeguarding device, confirm with your instructor that the robot is in its approved looping idle program and that no one else is inside the cell. Wear safety glasses at all times in the lab. Never defeat or bypass a safety device — even for testing — without written authorization and a documented safe state. Log every test result immediately; do not reconstruct the log from memory after the session.
Key terms10
ANSI/RIA R15.06The primary US standard for industrial robot safety, covering safeguarding requirements, risk assessment, and collaborative operation modes; aligned with ISO 10218.
Stop Category (0, 1, 2)IEC 60204-1 classifications describing how a machine stops: Category 0 removes power immediately; Category 1 decelerates then removes power; Category 2 decelerates and holds position with power maintained.
Light curtainA presence-sensing safeguarding device that projects an infrared beam array across an opening; breaking any beam triggers a stop signal to the machine controller.
Safety gate interlockA dual-channel switch on a perimeter fence gate that signals the robot controller to stop when the gate is opened, preventing access while the robot is in automatic motion.
Speed and Separation Monitoring (SSM)A collaborative robot operating mode in which the robot continuously monitors its distance from a detected person and reduces speed or stops as that distance decreases.
Power and Force Limiting (PFL)A collaborative operating mode in which the robot limits the mechanical power and contact force it can exert so that an unintended collision does not cause injury beyond defined thresholds.
Minimum safety distance (Ds)The required distance between a safeguarding device and the hazard zone, calculated so the machine stops completely before a hand can travel from the device to the danger point.
Emergency stop (E-stop)A manually actuated, self-latching device that initiates an immediate stop of hazardous motion; must be red on a yellow background and readily accessible per R15.06 and IEC 60204-1.
Safety-Rated Monitored Stop (SRMS)A collaborative robot mode in which the robot stops and holds position with drives energized while a person is present; it may resume only after the person leaves the collaborative workspace.
Hand guidingA collaborative robot mode in which an operator physically steers the robot by hand through a guiding device that includes an enabling switch and speed limiting; used for tasks requiring close human direction.
Worked examples3
1. A light curtain is being positioned on a FANUC robot cell. The robot stopping time (Ts) is 0.15 s, the control system response time (Tc) is 0.02 s, the light curtain response time (Tr) is 0.02 s, and no brake monitor delay is used (Tbm = 0). Using K = 63 in/s, calculate the minimum safety distance Ds.
- Write the formula: Ds = K × (Ts + Tc + Tr + Tbm)
- Add the time values: 0.15 + 0.02 + 0.02 + 0 = 0.19 s
- Multiply by K: Ds = 63 in/s × 0.19 s = 11.97 in
Answer: The light curtain must be mounted at least 11.97 inches (approximately 12 inches) from the hazard zone.
2. A robot cell adds a brake monitor that introduces an additional delay of Tbm = 0.030 s. All other values from the previous example remain the same (K = 63 in/s, Ts = 0.15 s, Tc = 0.02 s, Tr = 0.02 s). What is the new minimum safety distance?
- Write the formula: Ds = K × (Ts + Tc + Tr + Tbm)
- Add all time values: 0.15 + 0.02 + 0.02 + 0.030 = 0.22 s
- Multiply by K: Ds = 63 in/s × 0.22 s = 13.86 in
Answer: The updated minimum safety distance is 13.86 inches (approximately 14 inches), showing that adding the brake monitor requires moving the curtain farther from the hazard.
3. During the functional test log, a student triggers the safety gate interlock and observes that the robot decelerates smoothly to a stop over about 0.8 seconds, then servo power drops. The student also measures that after acknowledging the gate-closed signal, the system requires a manual reset button press before the robot restarts. Which stop category does this behavior match, and what does the required manual reset indicate about the safety system design?
- Review stop category definitions: Category 0 = immediate power removal (coast stop); Category 1 = controlled deceleration then power removed; Category 2 = controlled deceleration with power maintained.
- The robot decelerated under control and then power was removed — this matches Category 1.
- The requirement for a manual reset (rather than an automatic restart when the gate closes) is a deliberate safety design: it prevents the robot from restarting unexpectedly while someone may still be inside the cell, consistent with R15.06 requirements.
Answer: The gate interlock triggered a Category 1 stop. The manual reset requirement is correct safety design — it ensures a deliberate human action is needed before restart, preventing unexpected motion after re-guarding.
In class: Safeguarding device functional test: with the robot running a looping idle program, students individually trigger the light curtain, safety gate interlock, E-stop mushroom on the pendant, and E-stop on the controller, recording in a test log whether the robot stopped in controlled stop (Category 1 or 2) or power-off stop (Category 0) and how long reset took. · ANSI/RIA R15.06 collaborative operation modes lecture and discussion: instructor presents the four collaborative modes (hand guiding, speed and separation monitoring, power and force limiting, safety-rated monitored stop) using diagrams; students answer scenario questions identifying which mode applies to a given task and why. · Safeguarding design scenario: in pairs, students are given a new cell layout drawing and must specify safeguarding (fence height, gate interlock type, light-curtain minimum safety distance calculation concept) citing R15.06; pairs present their design to the class for critique.
Materials: FANUC robot cell with light curtain, safety gate, and E-stops installed, ANSI/RIA R15.06 summary handout, safeguarding-test log form, cell layout drawings for scenario exercise, whiteboard
Check: Safeguarding test log completed with correct stop-category identification for all four devices (instructor verified). Scenario design presentation evaluated on correct R15.06 citations and safety distance logic. Pass = all four devices logged correctly plus acceptable design rationale.
Practice check8
Answer each question, then check it. Nothing is recorded; this is your own practice.
Record this lesson on my transcript. Sign in with your key and enrollment email to record lessons (enroll free if you have no key). This page stays open to read and practise.