Mitsubishi Electric CR800-R - Page 20

1 FUNCTIONS AND CONFIGURATION
1-8 Specifications
The following table shows the safety performance of the CR860-R controller.
Function
Item
Performance
Remarks
STO
Safety Level (Note 1)
SIL 3 (IEC 61508:2010)
Performance when:
• External emergency stop
input when the test pulse
diagnosis settings are
enabled (Note 2)
• Safety communication
function's safety input
Category 4, PL e
(EN ISO 13849-1:2015)
Mean time to dangerous
failure (MTTFd) (Note 1)
MTTFd ≥ 100 years
Diagnostic coverage (DC)
(Note 1)
DC = 99%
Probability of dangerous
failure per hour (PFH)
(Note 1)
PFH = 1.60 × 10
-8
[1/hour]
Hardware Fault Tolerance
1
Mission time
20 years
Diagnostic test interval
1000ms
Systematic capability
SC3
Safety Level (Note 1)
SIL 2 (IEC 61508:2010)
Performance when:
• External emergency stop
input when the test pulse
diagnosis settings are
disabled (factory settings)
• Door switch input
• Enabling device input
Category 3, PL d
(EN ISO 13849-1:2015)
Mean time to dangerous
failure (MTTFd) (Note 1)
MTTFd ≥ 100 years
Diagnostic coverage (DC)
(Note 1)
DC = 96%
Probability of dangerous
failure per hour (PFH)
(Note 1)
PFH = 2.24 × 10
-8
[1/hour]
Hardware Fault Tolerance
1
Mission time
20 years
Diagnostic test interval
1000ms
Systematic capability
SC2
SS1, SS2,
SOS, SLS,
SLP
Safety Level (Note 1)
SIL 2 (IEC 61508:2010)
-
Category 3, PL d
(EN ISO 13849-1:2015)
Mean time to dangerous
failure (MTTFd) (Note 1)
MTTFd ≥ 100 years
Diagnostic coverage (DC)
(Note 1)
DC = 95%
Probability of dangerous
failure per hour (PFH)
(Note 1)
PFH = 5.58 × 10
-7
[1/hour]
Hardware Fault Tolerance
1
Mission time
20 years
Diagnostic test interval
1000ms
Systematic capability
SC2
Note 1: The specifications of the robot controller. When constructing systems such as safety programmable
controller programs and settings, and safety I/O devices, adopt a safe design and evaluate the safety.
Note 2: To use this product at a performance level of SIL 3, Category 4, PL e, refer to “4.6.1 Test pulse diagnosis
(EMG)”.
* This table shows the specifications of robot controllers.
* Connect the robot controller's emergency stop input, door switch input, and enabling device input as described
in the Standard Specifications Manual.
* The safety communication function cannot be used together with the robot safety option (4F-SF003-05).
* For information on network specifications such as the maximum number of connectable devices per network,
refer to the following manuals.
□ MELSEC iQ-R CC-Link IE TSN User's Manual (Startup) (SH-082127ENG)
□ MELSEC iQ-R CC-Link IE TSN User's Manual (Application) (SH-082129ENG)
* For information on transmission delay times, safety response times, and safe stopping distances, refer to the
following sections.
4.7.4 Transmission delay time, 7. SAFETY RESPONSE TIME AND SAFE STOPPING DISTANCE