Catalogo Beckhoff
Catalogo Beckhoff
Safety and non-safety are converging are gaining access to a uniform tool base and unnecessary costs for overdimensioned safety Your winning edge through complete
As a specialist for PC-based control, Beckhoff hardware platform. System integration can be solutions are avoided. Machine builders and users integration:
Beckhoff implements open automation systems on the basis
enables especially simple implementation of realised in all application areas with TwinSAFE, will benefit from the extensive and long-standing consistency: everything from one source
of PC-based control technology – including safety.
all required safety standards through direct effectively ending the historically strict separation safety expertise provided by Beckhoff. The full connectivity: all information is available
integration into the Beckhoff control system. This of “safety” and “non-safety”. At the same time, wealth of safety know-how is available in-house in one integrated system
is based on a comprehensive, highly scalable and TwinSAFE impresses through ultimate flexibility with Beckhoff and is drawn on for customers in adaptability: modularity and scalability
modular automation portfolio, extending to all and scalability. All safety features can be integrat- every individual TwinSAFE solution. The focus is on allow simple adaptation to current and
components from IPC to I/O, motion and software. ed in any conceivable machine architecture – from the principle of openness, as is typical of Beckhoff future requirements
All functionalities can be integrated into the stand-alone control to compact control and the technology. On the one hand, the safe communi-
overall control system with this portfolio – from “traditional” solution through to distributed cation protocol Safety over EtherCAT (FSoE, Fail
HMI to measurement technology, IoT, vision, control and software-based control, which allows Safe over EtherCAT) is internationally certified
Industrial PC I/O Motion Automation PLC and motion through to safety. Safety can even the most complex requirements to be ful- and on the other hand there are no restrictions
therefore be integrated seamlessly with consid- filled. End users can therefore obtain a complete regarding transmission media.
erably reduced effort, because machine builders safety package tailored to their needs, while
2 We reserve the right to make technical changes. We reserve the right to make technical changes. 3
Complete: the right solution
in all application areas
TwinSAFE – the cross-sectional solution the right solution in all application areas. A broad In the area of drive technology, too, solutions manual makes the engineering process even Flexible implementation of safety
Non-safety related automation technology from range of components equipped with TwinSAFE are scarcely conceivable any more without safety more straightforward from conceptual design solutions with TwinSAFE:
Beckhoff can essentially be divided into four Logic means full freedom in terms of choosing an functionality. Beckhoff has therefore integrat- through to realisation. comprehensive software support
categories, that is, IPC (control), I/O (input and architecture for the safety application at hand. In ed safety functionalities in its drive solutions high-performance safety controllers
output), motion (drive technology) and automa- terms of I/O components, the TwinSAFE system early on, both into standard and compact drive in various form factors
tion (software). These components can be used offers an appropriate choice of safe input, output technology. safety components for different
to realise the most comprehensive range of au- and mixed components, allowing the solution to environmental conditions
tomation tasks. As the complexity of non-safety be easily adapted to the specific requirements. In the area of engineering, the safety and safety components in the most diverse
related control functions continues to grow, the The broad range of TwinSAFE components for non-safety tools from Beckhoff have already granularities for optimum adaptability
requirements with respect to safety technology all requirements includes the EtherCAT Terminals merged, enabling a universal configuration and
are increasing in the same way. Modern safety for control cabinet installation, the EtherCAT programming of all applications. With a graphical
technology therefore covers a very broad range Box modules for use directly in the field and editor, the TwinCAT Safety Editor simplifies the
of tasks, with appropriate safety solutions re- the EtherCAT plug-in modules for use in series implementation of safety applications by means
quired in all areas of automation. TwinSAFE offers machines. of certified function blocks. A certified application
4 We reserve the right to make technical changes. We reserve the right to make technical changes. 5
Safety-over-EtherCAT:
Open for all
Safe
EtherCAT
Standardised Ethernet
Fieldbus-neutral
WLAN
The Safety-over-EtherCAT (FSoE, Fail Safe over and guarantees high-performance transmission Benefits of the highly flexible
EtherCAT) protocol defines open, secure data of control and safety information via the same communication system:
transmission. The technology certified by TÜV communication system. flexibility through transmission
is internationally standardised according to via any media
IEC 61784-3 and fulfils the safety requirements flexibility through the large number
specified by IEC 61508 up to the SIL 3 safety of component vendors
level. The transport medium is considered as a
“black channel” in Safety-over-EtherCAT commu-
nication, meaning that the FSoE protocol can be
transmitted using any communication technol-
ogies – over EtherCAT or Ethernet, but also via
standard fieldbus systems such as CAN and also
over wireless networks. FSoE is an ideal com-
plementation of the open EtherCAT technology
6 We reserve the right to make technical changes. We reserve the right to make technical changes. 7
TwinSAFE:
Logic in all components
With the introduction of the new Logic genera- validated separately. If a central safety controller Application scenarios of the
tion (from EL6910 on), Beckhoff has triggered a – central from a safety technology perspective – integrated Logic:
revolution in safety technology. The functionality exists, it therefore only has to process the resulting specific preprocessing of signals directy
of the TwinSAFE Logic is integrated in all new sensor data. Special knowledge for ensuring proper by input components
TwinSAFE components, thus considerably extending preprocessing is then no longer needed, reducing fast local responses through localised
the range of potential deployment and application the complexity of the centralised safety application safety applications
scenarios. TwinSAFE is becoming significantly and in turn simplifying validation and verification efficient and flexible modularisation
more flexible in terms of adaption to individual of the centralised safety application. In addition to without additional costs
safety requirements of a machine. For example, this “simple” application for preprocessing data,
the integrated TwinSAFE Logic functionality in a the safety option can also be used, for example,
digital input component (e.g. EL1918) can be used within a multi-axis AX8000 servo system to control
to selectively preprocess sensor data directly on a complete axis group from a safety technology
the component. This preprocessing function can perspective, while a central safety controller is used
be developed separately and likewise verified and to control the overall axis group.
8 We reserve the right to make technical changes. We reserve the right to make technical changes. 9
Individually scalable:
the TwinSAFE architectures
TwinSAFE gives machine builders the possibility to
realise the most diverse safety architectures with com-
ponents in different form factors – from stand-alone
control to distributed control, including preprocessing
of data directly by I/O terminals, through to system-in-
tegrated software-based control for highly complex
safety applications. Customers have the benefit of
attractively priced, flexible and optimally scalable
solutions – and the certainty of being able to meet all
safety requirements as needed at all times and in the
future, too.
Software-based
control
The software control architecture uses the
Distributed control TwinCAT Safety PLC, a software-based safety
controller, as a central component. This archi-
TA distributed control architecture allows tecture is mainly intended for highly complex
any desired form of modularisation to be safety applications beyond the functional
Centralised control implemented in a safety application. The
safety project can be freely distributed across
scope of the hardware-based TwinSAFE Logic
components, which can only be programmed
a number of logic-capable components as using function block diagram language.
Centralised control solutions correspond to
required. The safety projects assigned to the
the traditional safety architecture. A dedicated
single components can then be developed,
Compact control safety controller, which is centralised from
validated and verified independently of each
a safety technology perspective, communi-
other. Communication between the compo-
cates with 1...n communication participants.
In the introduction of the new Logic gen- nents complies with user-specified interfaces.
All safety-related data is processed by this
eration, Beckhoff is supplying every new
central safety controller.
Stand-alone TwinSAFE component with Logic function-
ality, just as with the EL6910 before. Single
control components can be used to realise compact
safety applications. Apart from implementing
Beckhoff supplies components for the TwinSAFE fully functional safety applications, these
applications, which can be operated in stand- components can also be used for input data
alone mode or, in other words, without being preprocessing directly by the input compo-
connected to an EtherCAT master. A limited local nent, for example.
safety application can be realised very easily in
= Safety Logic this way.
EK1960
Standard
control system
and I/Os
12 We reserve the right to make technical changes. We reserve the right to make technical changes. 13
Locally integrated:
TwinSAFE compact controllers AX8108-0100
EJ1957
EP1957-0022
EK1960
EL1957 EL2911
14 We reserve the right to make technical changes. We reserve the right to make technical changes. 15
For traditional architectures:
centralised safety controllers
EL6910 EL6900 EL6930
EJ6910
TwinSAFE as a central
EL6910 safety controller
TwinSAFE Logic TwinSAFE provides dedicated safety controllers,
which can be used for centralised control from
a safety technology perspective. These devices
themselves do not have local inputs and out-
puts. Instead, communication relationships are
established with 1...n safety-related compo-
nents, and the safe input and output signals are
processed in accordance with the user-defined
safety application. The architecture in this case
corresponds to the traditional architecture of
safety applications. In addition to the dedicated
safety controllers represented here, all Logic-ca-
Standard pable components can of course also be used in
control system context with a conventional architecture.
and I/Os
16 We reserve the right to make technical changes. We reserve the right to make technical changes. 17
Stay flexible: freely distributed
safety applications
AX8108-0100
EJ1918, EJ2918,
EJ1957
EP1957-0022
EJ6910, EJ1914,
EJ2914
18 We reserve the right to make technical changes. We reserve the right to make technical changes. 19
For highly complex safety applications:
more performance with IPC
C6920
CX5120
20 We reserve the right to make technical changes. We reserve the right to make technical changes. 21
For analog safety solutions:
TwinSAFE SC
Sample application from the application manual
The example shows how temperature measurement can be performed using TwinSAFE SC technology. Two measurement points are fitted with
diverse temperature sensors. One of the signals is transmitted via TwinSAFE SC to the safety controller for plausibility checking with the aid of
the second signal.
TwinSAFE SC technology (TwinSAFE Single TwinSAFE SC technology allows communication Benefits of TwinSAFE SC:
Channel) allows the use of standard signals for via a TwinSAFE protocol. These connections can be economic use of standard signals
safety-relevanttasks in any networks or field- distinguished from the usual safe communication in safety applications
bus systems. EtherCAT I/Os with functions such over Safety-over-EtherCAT. simple expansion of existing systems
as analog inputs, angle/path measurement or by safe analog value processing
communication (4…20 mA, incremental encoder, The data of the TwinSAFE SC components is rout-
IO-Link, etc.) are extended for this purpose by ed via a TwinSAFE protocol to the TwinSAFE logic
the TwinSAFE SC function, with the typical signal and can be used there in the context of safety-re-
properties and standard functionalities of the lated applications. Detailed examples concerning
I/O components being preserved. TwinSAFE SC the correct use of the TwinSAFE SC components
I/Os differ visually from standard I/Os by a yellow and the relevant normative classification, which
stripe on the front of the housing. have been calculated and confirmed by German
authorities TÜV SÜD, can be referenced in the
TwinSAFE application manual.
22 We reserve the right to make technical changes. We reserve the right to make technical changes. 23
Safety engineering: … and also for
simple, intuitive … complex applications
With Safety C
The programming of highly complex safety applications is
possible with Safety C. Safety C is a derivative of Standard C
and allows free programming of the desired safety application
in the TwinCAT 3 environment.
Programming with function blocks Programming with Safety C Flexible programming options:
All hardware components with integrated Highly complex safety applications with the selection of programming language
TwinSAFE Logic can be programmed based on software-based TwinCAT Safety PLC can be depending on requirements
certified function blocks. The certified safety programmed with Safety C. Safety C represents a intuitive programming for safety-related
function blocks of the TwinSAFE Logic compo- derivative of Standard C. In oder to increase safety, basic functionalities
nents allow simple, fault-free and cost-effective restrictions can be made, for example, in terms of free programming in high-level
realisation of all safety tasks – from simple safety strict type identification, implicit type casting and language for highly complex safety
door monitoring to complex muting functions others. Otherwise, all control constructs familiar applications
based on digital signals through to safe control of from Standard C, for example, can be used to
highly complex processes based on analog signals. realise a safety application. Auxiliary libraries are
available that further simplify the engineering
process.
24 We reserve the right to make technical changes. We reserve the right to make technical changes. 25
Simple adaptation, high-performance tools:
the engineering highlights
CAD
The Beckhoff engineering provides tools that allow the
TwinSAFE functionality to be configured directly within
a CAD tool. The AML interchange format can be used to
convert this basic implementation of the safety applica-
tion into a functional TwinCAT 3 project.
Customizing
Safety technology subgroups can be configured within
a safety application, which can then be permanently or
temporarily deactivated or switched to passive mode
during runtime, thus allowing a machine to be adapted
with ultimate flexibility to the prevailing requirements in
each case.
TwinSAFE Loader/User
With TwinSAFE Loader, the Beckhoff engineering provides
a command line tool, which allows downloading and cus-
tomizing of safety projects at runtime. Explicit use of the
TwinCAT 3 development environment for this application
is therefore no longer necessary with this tool.
Customizing These settings along with the corresponding The Beckhoff engineering provides two different TwinSAFE Loader perform renewed validation and verification of Flexibility in application and tooling:
The customizing functionality is one of the most configuration of replacement values for the inter- options for this, with the modules being adapted The TwinSAFE Loader is a command line tool the entire safety application. highly flexible modularisation during
significant innovations in the new generation of faces between the different modules allow highly to the current machine requirements either via that allows a safety project to be customized runtime through customizing
safety controllers. Safety projects can still be mod- complex modular and scalable architectures to be the TwinCAT 3 development environment or else without TwinCAT 3. For example, modules can preconfiguration of safety applications
ularly designed, and apart from that the customiz- implemented. A single safety project can thus be using the TwinSAFE Loader tool. be activated and deactivated directly via a within CAD tool
ing function allows the following operating modes used for a whole series of machines, for example. custom HMI. On one hand, this means that the TwinSAFE Loader and TwinSAFE User
to be configured for each of these modules: When it comes to smaller variants of a machine, TwinSAFE system can be optimally adapted to are user-friendly tools for series
temporary deactivation the modules not needed in each case can be customer-specific processes. On the other hand, production
permanent deactivation simply deactivated, which of course is enormously common use cases, such as the commissioning TwinSAFE Loader enables modularisa-
passivation beneficial in terms of development costs as only process, can be simplified considerably. With tion during runtime without the use of
one safety project has to be developed, validat- customizing, individual modules of the safety TwinCAT 3
ed and verified in compliance with normative application can be temporarily deactivated
requirements. Switching between the various for commissioning machine parts and then
operating modes is possible during runtime. subsequently reactivated without having to
26 We reserve the right to make technical changes. We reserve the right to make technical changes. 27
At a glance: the TwinSAFE
software workflow
Development Deployment
Risk Assessment TwinCAT 3 Safety Editor TwinCAT 3 Safety Editor
Severity of
injury
Frequency and/or
exposure of hazard
Possibility of avoiding PL – Required
hazard or limiting harm performance
- Deploy from
S1: Slight
S2: Serious
F1: Seldom short
F2: Frequent long
P1: Possible
P2: Scarcely possible
level
- TwinCAT 3 TwinCAT 3
Integration Engineering
Low risk
P1
F1 a
- Function Block
P2
S1
P1 b
F2
Start
P2
P1
c
Diagrams
S2
F1
P2 - Safety C
d
P1
F2
High risk
P2
e
Specification CAD Tool TC3 XCAD Interface Safety Project TwinSAFE Loader/User Safety SPS
Codesys Codesys
TwinCAT 3 and TwinCAT 2 a fully functional safety project in TwinCAT 3 to components during series production with- component during series production, without Flexible workflow support:
In the Beckhoff world, a safety application can undergo final configuration. out the use of a development environment. using a development environment. comprehensive support during
be implemented either with TwinCAT 2 or 3. Furthermore, TwinSAFE Loader enables an the engineering process
Whereas TwinCAT 2 can be used exclusively for Codesys existing system to be customized at runtime. free choice of development tool
the TwinSAFE Logic components EL6900, EL6930 As an option, the Beckhoff TwinSAFE Logic com- When using TwinSAFE Loader in the context of various deployment possibilities
and KL6904, all Logic components with the ponents can be configured using Codesys Safety. customer-specific processes, the FMEDA method for different requirements
exception of the KL6904 can be configured with for risk analysis given in the user manual must
TwinCAT 3. TwinSAFE Loader always be observed.
The TwinSAFE Loader tool offers a possibility
TC3 XCAD Interface to download a safety project entirely without TwinSAFE User
Beckhoff provides the possibility to create a the TwinCAT engineering environment. It is The TwinSAFE User tool can be used to handle
safety application directly within a CAD tool. a command line tool that can be integrated the user administration for a TwinSAFE Logic
With the help of the TC3 XCAD Interface, the into customer-specific processes. It enables, component. It enables, e.g., to configure the user
application can subsequently be converted into for example, the loading of TwinSAFE Logic administration for accessing a TwinSAFE Logic
28 We reserve the right to make technical changes. We reserve the right to make technical changes. 29
Simplified implementation:
the application manual
The block circuit diagram and the output The calculation of safety parameters is explained Detailed description for determining the correct
parameters used are listed for every transparently and in detail for every safety function to safety category.
safety function. enable easy adjustment to any modified usage of the
safety function.
Application manual confirmed by the TÜV SÜD authority is executed Comprehensive support in conceptual
To simplify the design of safety functions, for each sample, so that the samples can either design and implementation:
Beckhoff has made the TwinSAFE application be adopted 1:1 or adapted very simply to specific continuously expanded collection
manual available for download via the company application requirements. of relevant application examples
website. The user-friendly manual contains a best-possible support to enable correct
compilation of sample applications for TwinSAFE implementation of safety applications
with a collection of widely used safety functions. simple adaptation to modified applica-
Each sample shows the interconnection of the tions through detailed documentation
hardware components and the corresponding of the safety acceptance
mapping inside the safety application itself, i.e.
the implementation with the help of pre-certified
function blocks and the parameterisation of input
and output components. For further support
the verification of the respective safety level as
30 We reserve the right to make technical changes. We reserve the right to make technical changes. 31
Highly modular:
the TwinSAFE product portfolio
Input, Logic and Output
EL1918 EtherCAT Terminal, 8-channel digital input, 24 V DC EL2912 EtherCAT Terminal, 2-channel digital output, 24 V DC, Imax = 2.3 A
EP1918 EtherCAT Box, 8-channel digital input, 24 V DC EJ2914 EtherCAT plug-in module, 4-channel digital output, 24 V DC, Imax = 0.5 A
EJ1914 EtherCAT plug-in module, 4-channel digital input, 24 V DC EJ2918 EtherCAT plug-in module, 8-channel digital output, 24 V DC, Imax = 0.5 A
EJ1918 EtherCAT plug-in module, 4-channel digital input, 24 V DC KL6904 Bus Terminal, 4-channel digital output, 24 V DC, Imax = 0.5 A
EL1904 EtherCAT Terminal, 4-channel digital input, 24 V DC EL6910 EtherCAT Terminal, TwinSAFE Logic EL2904 EtherCAT Terminal, 4-channel digital output, 24 V DC, Imax = 0.5 A
EK1914 EtherCAT Coupler with integrated digital standard and safety I/Os: EL6900 EtherCAT Terminal, TwinSAFE Logic EK1914 EtherCAT Coupler with integrated digital standard and safety I/Os:
2 safe inputs, 2 safe outputs, 4 standard inputs, 4 standard outputs, Imax = 0.5 A 2 safe inputs, 2 safe outputs, 4 standard inputs, 4 standard outputs, Imax = 0.5 A
EL6930 EtherCAT Terminal, TwinSAFE Logic, with PROFIsafe gateway
EP1908-0002 EtherCAT Box, 8-channel digital input, 24 V DC KL2904 Bus Terminal, 4-channel digital output, 24 V DC, Imax = 0.5 A
EJ6910 EtherCAT plug-in module, TwinSAFE Logic
KL1904 Bus Terminal, 4-channel digital input, 24 V DC Motion
Engineering with Safety C
TwinSAFE SC (selection) AX5000 Digital Compact Servo Drives
TwinCAT Safety PLC software-based
EL3124-0090 EtherCAT Terminal, 4-channel analog input, 4…20 mA, differential input, 16 bit safety controller AX5801-0200 TwinSAFE drive option card, up to 40 A, STO, SS1
EL3314-0090 EtherCAT Terminal, 4-channel input, thermocouple with wire breakage detection AX5805-0000 TwinSAFE drive option card, up tos 40 A, STO, SS1, SS2, SOS, SLS, SDI
EL5021-0090 EtherCAT Terminal, 1-channel SinCos encoder interface, 1 VPP AX5806-0000 TwinSAFE drive option card, up to 60 A, STO, SS1, SS2, SOS, SLS, SDI
32 We reserve the right to make technical changes. We reserve the right to make technical changes. 33
Globally available: Beckhoff safety expertise
Million €
1550
1515
1500
1450
1400
1350
EUROPE
1300
1250
1200
1150
1100
1050
1000
950
900
850
800
750
700
650
600
550
500
450
400
350
300
250
200
150
100
50
1981
1991
2001
1980
1982
1983
1984
1985
1986
1987
1988
1989
1990
1992
1993
1994
1995
1996
1997
1998
1999
2000
2002
2003
2004
2005
2006
2007
2008
2009
2010
2011
2012
2013
2014
2015
2016
2017
2018
2019
2020
2021
2022
Sales from 1980 through 2022.
Status: March 2023
Beckhoff – New Automation Technology The Beckhoff “New Automation Technology” Worldwide presence on all continents Beckhoff Automation at a glance
Beckhoff implements open automation systems philosophy represents innovative control and The worldwide presence of Beckhoff in 2022 global sales: €1.515 billion (+28 %)
based on PC Control technology for more than automation solutions that are used worldwide 75 countries ensures fast service and support Headquarters: Verl, Germany
35 years. The product range covers Industrial PCs, in a wide variety of different applications for globally operating customers in their local Managing owner: Hans Beckhoff
I/O and Fieldbus Components, Drive Technology and industries, ranging from CNC-controlled language. Moreover, geographical proximity helps Employees worldwide: 5,680
and automation software. For all areas of machine tools and wind turbines to intelligent us develop an in-depth understanding of the Engineers: 2,200
application, product series are available that can building automation. technical challenges our customers are faced with Subsidiaries/representative offices
be used as separate components or integrated around the world. worldwide: 40
Headquarters Headquarters distributor into a complete and seamless control system. Sales offices in Germany: 24
Subsidiary Representatives worldwide: > 75
O www.beckhoff.com
34 We reserve the right to make technical changes. We reserve the right to make technical changes. 35
DK3822-0323
Integrate your winning edge
in safety with PC-based control:
www.beckhoff.com/twinsafe
Beckhoff®, TwinCAT®, EtherCAT®, EtherCAT G®, EtherCAT G10®, EtherCAT P®, Safety over EtherCAT®, TwinSAFE®, XFC®, XTS® und XPlanar®
are registered trademarks of and licensed by Beckhoff Automation GmbH. Other designations used in this publication may be trademarks
whose use by third parties for their own purposes could violate the rights of the owners.
The information provided in this brochure contains merely general descriptions or characteristics of performance which in case of
actual application do not always apply as described or which may change as a result of further development of the products.
An obligation to provide the respective characteristics shall only exist if expressively agreed in the terms of contract.