Functional Safety Certification for Goods-to-Person Robots: IEC 61784-3 Explained

Date
2027-05-21
Location
Online
Host
Zach L

About this event

A Tabletop Exercise for Embedded Systems Engineers pursuing functional safety certification. A live 30-minute tabletop exercise on IEC 61784-3 (Functional Safety Fieldbuses) for goods-to-person robots, built for embedded systems engineers pursuing functional safety certification. What We'll Cover: What IEC 61784-3 (Functional Safety Fieldbuses) requires and how its scope applies to goods-to-person robots Mapping IEC 61784-3 clauses to the certification evidence assessors expect System-specific hazards and safety functions typical of goods-to-person robots Common findings that delay certification, and how to avoid them A practical readiness roadmap for embedded systems engineers preparing for assessment Related topics: IEC 61784-3 · Goods-to-Person Robots · functional safety certification ·

Topics

Registration

View event page

About IEC 61784-3 (Functional Safety Fieldbuses)

This event covers the compliance, engineering, and verification requirements defined by IEC 61784-3.

IEC 61784-3 defines functional safety communication profiles — the 'black channel' approach whereby safety data travels over standard networks with an added safety layer detecting the communication errors that matter (corruption, loss, delay, repetition, insertion, masquerade).

What it regulates

Safety communication layers of profiles such as PROFIsafe, CIP Safety, FSoE, openSAFETY: error-detection measures, residual error rate calculation, and constraints (watchdog times, addressing) integrators must respect.

Who must comply

Device vendors implementing safety protocols, machine integrators configuring safe networks, assessors checking residual-error contribution in SIL/PL budgets.

Key requirements of IEC 61784-3

  • Communication error model and threat table
  • Measures: sequence numbers, timeouts, codenames/connection IDs, CRCs separate from transport
  • Residual error rate budget allocation to the safety function's PFH
  • Profile-specific parts for each fieldbus family

Key concepts: IEC 61784-3

Black channel
Treating the underlying network as untrusted; all safety guarantees come from the endpoint safety layer.
Masquerade
A non-safety message imitating a safety message — countered by connection authentication codes.
Safety watchdog time
Maximum tolerated data age before the function trips to safe state, bounding reaction time.
Residual error rate
The quantified probability of undetected communication error, kept to a small fraction of the function's failure budget.

Frequently asked questions: IEC 61784-3

Can safety and standard traffic share the same cable?

Yes — that is the point of the black-channel design: safety integrity does not rely on the transport, so mixed traffic, switches and wireless segments are permissible within the profile's timing constraints.

Does using PROFIsafe make my function SIL 3?

No — the profile bounds the communication contribution (suitable up to SIL 3), but the function's SIL/PL still depends on the sensors, logic and actuators; communication is one subsystem in the chain.

Standard information based on the published text of IEC 61784-3 (Functional Safety Fieldbuses). Event content is provided by the host. For authoritative guidance, consult the official standard body.