OPC 10000-15: UA Part 15: Safety


Released 1.05.02

2022-11-01

This document is subject to the license terms described here.

The general OPC Foundation specification license agreement also applies and can be found here.

This document is a copy of the original which can be found here.


1 Scope 2 General 2.1 Reference Documents 2.2 Relation to safety-, security- and OPC UA-standards 2.3 Intellectual properties 3 Terms, definitions and conventions 3.1 Overview 3.2 Terms 3.3 Abbreviations and symbols 3.4 Conventions 3.4.1 Conventions in this part 3.4.2 Conventions for Requirements Numbering 3.4.3 Conventions on CRC calculation 3.4.4 Conventions in state machines 4 Introduction to OPC UA Safety 4.1 What is OPC UA Safety? 4.2 Safety functional requirements 4.3 Communication structure 4.4 Implementation aspects 4.5 Features of OPC UA Safety 4.6 Security policy 4.7 Safety measures 5 Use cases (informative) 5.1 Use cases for different types of communication links 5.1.1 Unidirectional communication 5.1.2 Bidirectional communication 5.1.3 Safety Multicast 5.2 Cyclic and acyclic safety communication 5.3 Principle for “Application variables with qualifier” 6 Information Models 6.1 Object and ObjectType Definitions 6.1.1 SafetyACSet Object 6.1.2 Safety ObjectType definitions 6.1.3 Method ReadSafetyData 6.1.4 Method ReadSafetyDiagnostics 6.1.5 Object SafetyPDUs 6.1.6 Objects SafetyProviderParameters and SafetyConsumerParameters 6.2 Datatype Definition 6.2.1 InFlagsType 6.2.2 OutFlagsType 6.2.3 RequestSPDUDataType 6.2.4 ResponseSPDUDataType 6.2.5 NonSafetyDataPlaceholderDataType 6.3 SafetyProvider Version 6.4 DataTypes and length of SafetyData 6.5 Connection establishment 7 Safety communication layer services and management 7.1 Overview 7.2 OPC UA Platform interface (OPC UA PI) 7.3 SafetyProvider interfaces 7.3.1 SAPI of SafetyProvider 7.3.2 SPI of SafetyProvider 7.4 SafetyConsumer interfaces 7.4.1 SAPI of SafetyConsumer 7.4.2 Motivation for SAPI Operator Acknowledge (OperatorAckConsumer) 7.4.3 SPI of the SafetyConsumer 7.4.4 Motivation for SPI SafetyOperatorAckNecessary 8 Safety communication layer protocol 8.1 General 8.2 SafetyProvider and SafetyConsumer 8.2.1 SPDU formats 8.2.1.1 RequestSPDU: SafetyConsumerID 8.2.1.2 RequestSPDU: MonitoringNumber 8.2.1.3 RequestSPDU: Flags 8.2.1.4 ResponseSPDU: SafetyData 8.2.1.5 ResponseSPDU: Flags 8.2.1.6 ResponseSPDU: SPDU_ID 8.2.1.7 ResponseSPDU: SafetyConsumerID 8.2.1.8 ResponseSPDU: MonitoringNumber 8.2.1.9 ResponseSPDU: CRC 8.2.1.10 ResponseSPDU: NonSafetyData 8.2.2 OPC UA Safety behavior 8.2.2.1 General 8.2.2.2 SafetyProvider/-Consumer Sequence diagram 8.2.2.3 SafetyProvider state diagram 8.2.2.4 SafetyConsumer state diagram 8.2.2.5 SafetyConsumer sequence diagram for operator acknowledgement (informative) 8.2.3 Subroutines 8.2.3.1 Build ResponseSPDU 8.2.3.2 Calculation of the SPDU_ID_1, SPDU_ID_2, SPDU_ID_3 8.2.3.3 Coding of the SafetyProviderLevel_ID 8.2.3.4 Signature over the Safety Data Structure (SafetyStructureSignature) 8.2.3.5 Calculation of a CRC checksum 9 Diagnostics 9.1 Diagnostics messages of the SafetyConsumer 9.2 Method ReadSafetyDiagnostics of the SafetyProvider 10 Safety communication layer management 10.1 General 10.2 Safety function response time part of communication 11 System requirements (SafetyProvider & SafetyConsumer) 11.1 Constraints on the SPDU-Parameters 11.1.1 SafetyBaseID and SafetyProviderID 11.1.2 SafetyConsumerID 11.2 Initialization of the MNR in the SafetyConsumer 11.3 Constraints on the calculation of system characteristics 11.3.1 Probabilistic considerations (informative) 11.3.2 Safety related assumptions (informative) 11.4 PFH/PFD-values of a logical OPC UA Safety communication link 11.5 Safety manual 11.6 Indicators and displays 12 Assessment 12.1 Safety policy 12.2 Obligations 12.3 Automated layer test for OPC UA Safety (informative) 12.3.1 OPC UA Safety Compliance Test Tool (UASCTT) 12.3.2 Testing principle 12.3.3 Test configuration 13 Profiles and Conformance Units 13.1 Conformance units 13.2 Profiles 13.2.1 Profile list 13.2.2 Facets and Profiles 13.2.2.1 Safety Provider Facets 13.2.2.2 Safety Consumer Facets 14 Namespaces 14.1 Namespace Metadata 14.2 Handling of OPC UA Namespaces Annex A : Safety Namespace and mappings (normative) A.1 Namespace and identifiers for Safety Information Model Annex B : Additional information (informative) B.1 CRC-calculation using tables, for the polynomial 0xF4ACFB13 B.2 Use cases for Operator Acknowledgment B.2.1 Explanation B.2.2 Use case 1: unidirectional comm. and OA on the SafetyConsumer side B.2.3 Use case 2: bidirectional comm. and dual OA B.2.4 Use case 3: bidirectional comm. and single, one-sided OA B.2.5 Use case 4: bidirectional comm. and single, two-sided OA Annex C : Requirements (informative) C.1 Overview C.2 List of Requirements 15 Bibliography