Developer's Workshop: Session C
CIP Safety™ Conformance Testing 2017
David Crane
ODVAFebruary 22, 2017

Session Overview••••••

Functional Safety
CIP Safety ProtocolConformance Testing Process
CIP Safety Conformance Test
Test Guidance
Available CIP Safety CCTs and TSP locations

Marketing & Training Track© 2017 ODVA, Inc.

2017 Industry Conference & 18th Annual Meeting
All rights reserved.

www.odva.org

2

Functional Safety•IEC1 defines “safety” as– Freedom from unacceptable risk of physical injury or of damage to the health ofpeople, either directly, or indirectly as a result of damage to property or to theenvironment.

•IEC further defines “functional safety” as– The part of the overall safety that depends on a system or equipment operatingcorrectly in response to its inputs.

•IEC 61508– Functional safety of E/E/PE safety-related systems– Probability of dangerous failure (PFDAV, PFH)
– SIL – Safety integrity level – e.g., SIL 3  10-8 ≤ PFH < 10-7
1International Electrotechnical Commission; http://www.iec.ch/functionalsafety/

Marketing & Training Track© 2017 ODVA, Inc.

2017 Industry Conference & 18th Annual Meeting
All rights reserved.

www.odva.org

3

Functional Safety•

IEC 61508 is the basis for many other international standards that target
application and product sectors; for example:– IEC 62061 Safety-Related Electrical Control System (SRECS)– IEC 61511 Safety Instrumented Systems (SIS)– ISO 13849 Safety of machinery (SRP/CS)• PLe vs. SIL 3•

IEC 61784-3 “Functional safety fieldbuses”– Defines Functional Safety Communication Profiles (FSCP)– Uses the “black channel” approach (61508-2 subclause 7.4.11.2)– CIP Safety is defined as FSCP 2/1 (61784-3-2)

Marketing & Training Track© 2017 ODVA, Inc.

2017 Industry Conference & 18th Annual Meeting
All rights reserved.

www.odva.org

4

CIP Safety Protocol•

Provides a stated probability of failure forthe network layer– PFH is average frequency of dangerous
failures per hour
– Network PFH (1%) part of overall PFH– 10-10 < PFH < 10-9 required for a SIL 3 data
communications channel•••

CIP Transport Class 0 Messaging
Real time format (Vol 1 3-6, 7-3.6.10)
Certified by TÜV RheinlandMarketing & Training Track© 2017 ODVA, Inc.

2017 Industry Conference & 18th Annual MeetingAll rights reserved.

www.odva.org

5

Conformance Testing Overview•Purpose of Conformance Testing– Satisfy ODVA Terms of Usage (TOU)– Obtain ODVA Declaration of Conformity (DOC)•Prerequisites to CT– Current specification and software subscriptions••••

Prepare for the lab test by running CT during development
Procure test by placing an order on the ODVA website
Provide required info and materials
Participate by attending the lab test
– Highly recommended for first-time and originator DUTs•

Pass the test to receive final test report and DOC– CIP Safety requires additional coordination between Vendor and ODVAMarketing & Training Track© 2017 ODVA, Inc.

2017 Industry Conference & 18th Annual Meeting
All rights reserved.

www.odva.org

6

CIP Safety Conformance Testing Process
1 – Vendor works with Functional
Safety Partner

TUV
Rheinland

ODVA TSP
3 – Vendor orders CIP
Safety conformance test

2 –Functional Safety Partner
requires ODVA certification

5 –Vendor provides ODVA
test report

4 – ODVA provides test
reportVendor
6 – Safety Partner provides Functional Safety
certificate

7 – Vendor provides
Functional Safetycertificate8 – ODVA issues Declaration ofConformity

End User9 – Vendor ships product toend users

Marketing & Training Track© 2017 ODVA, Inc.

2017 Industry Conference & 18th Annual Meeting
All rights reserved.

www.odva.org

7

CIP Safety Conformance Test•

Includes all relevant sections of Standard Conformance Test
– A standard test order is not needed for safety products– A standard test order IS needed for non-safety product variants•

Establishes conformance to the Safety Test Plan
– Does not establish functional safety of the device•Software installation provides CIP Safety test guidance– Readme– Sample Test Report– User’s Guide – Appendix EMarketing & Training Track© 2017 ODVA, Inc.

2017 Industry Conference & 18th Annual Meeting
All rights reserved.

www.odva.org

8

CIP Safety Conformance Test•

Implements automated safety protocol tests– Vol 5 Appendix F-3•

Includes CIP object test adaptations for safety– Vol 5 chapters 5 & 6– Safety-specific profiles and objects– Changes to standard objects (e.g., SNN attribute)•Accommodation required for manual tests– QoS, ACD, DLR, TimeSync•

Dynamic Interoperability Test
– Required for originators– Run if time permits for targets

Marketing & Training Track© 2017 ODVA, Inc.

2017 Industry Conference & 18th Annual Meeting
All rights reserved.

www.odva.org

9CIP Safety Test Plan•

Volume 5 – Appendix F– Links to traceable requirements (FRSxxx, SRSxxx)– Includes “Black Box” and “White Box” tests– Black Box – tests that can be externally verified• Volume 5 Appendix F-3• Automated test scripts• e.g., TST101 SafetyClose Processing by Targets– White Box - tests that require visibility into the implementation• Verified by the product developer– e.g., code inspection, design review, etc.
• Volume 5 Appendix F-4• e.g., TST93 – Safety Device Hardware Validation Tests

Marketing & Training Track© 2017 ODVA, Inc.

2017 Industry Conference & 18th Annual Meeting
All rights reserved.

www.odva.org

10Test Guidance – CIP Safety Protocol Test Software“Standard” Protocol Test
• CIP Network specific tests• CIP Object tests––––•

Safety-specific profiles and objects
Impact to existing objects
CIP object extensions for safety(Vol 5 chapters 5 & 6, Pub 170)

CIP Safety object tests– e.g., Safety Supervisor

Safety Protocol Test
– “Black Box” tests are automated– “White Box” tests must be performed by Vendor
Marketing & Training Track© 2017 ODVA, Inc.

2017 Industry Conference & 18th Annual Meeting
All rights reserved.

www.odva.org

11

Test Guidance – CIP Safety Test Selection

Marketing & Training Track© 2017 ODVA, Inc.

2017 Industry Conference & 18th Annual Meeting
All rights reserved.

www.odva.org

12

Test Guidance – Safety STC••

Two changes to the STC for safety
Safety results directory– This should be constant thru all test runs– Vary file name to manage multiple STCs•

Safety Characteristics– Device configurations and– Connection endpoints and sizes

Marketing & Training Track© 2017 ODVA, Inc.

2017 Industry Conference & 18th Annual Meeting
All rights reserved.

www.odva.org

13

Test Guidance – Safety STC•

Device Behavior– Input/Output– Controller•

Connection Info–––––••••

Target/Originator
Consumer/Producer
Single/Multi-castConnection Endpoints
Provide one STC per required
test configuration (small &large connection sizes)

SafetyOpen Types
TUNID/NodeID/SNN(optional) Config file
Originator target config fileMarketing & Training Track© 2017 ODVA, Inc.

2017 Industry Conference & 18th Annual Meeting
All rights reserved.

www.odva.org

14

Test Guidance – Safety Configurations••

Clarification of the meaning of Produce/Consume
Input/Output– TSCP = Target Single-cast Producer (i.e., INPUT)– TSCC = Target Single-cast Consumer (i.e., OUTPUT)– TMCP = Target Multicast Producer•

Meaning “reversed” for Originator DUTs
– OSCP is a CIP consuming connection (i.e., OUTPUT)– OSCC is a CIP producing connection (i.e., INPUT)

Marketing & Training Track© 2017 ODVA, Inc.

2017 Industry Conference & 18th Annual Meeting
All rights reserved.

www.odva.org

15

Test Guidance – Safety Log Files•

Standard Log

Test script console output
SPTE Rollup html
Marketing & Training Track© 2017 ODVA, Inc.

2017 Industry Conference & 18th Annual Meeting
All rights reserved.

www.odva.org

16

Test Guidance – Pass/FailMarketing & Training Track© 2017 ODVA, Inc.

2017 Industry Conference & 18th Annual Meeting
All rights reserved.

www.odva.org

17

Test Guidance – Installed Documentation

Marketing & Training Track© 2017 ODVA, Inc.

2017 Industry Conference & 18th Annual Meeting
All rights reserved.

www.odva.org

18

Test Guidance – Installed Documentation

Marketing & Training Track© 2017 ODVA, Inc.

2017 Industry Conference & 18th Annual Meeting
All rights reserved.

www.odva.org

19

Test Guidance – Installed Documentation

Marketing & Training Track© 2017 ODVA, Inc.

2017 Industry Conference & 18th Annual Meeting
All rights reserved.

www.odva.org

20

Test Guidance – Safety Results Audit Tool••Analyzes all safety logs
Multiple test passes required– Target Configurations• I/O size <= 2bytes• I/O size >= 3 bytes– Originator Configurations• Connection size variation• Single/Multi-Cast– Vendor-specific configuration

Marketing & Training Track© 2017 ODVA, Inc.

2017 Industry Conference & 18th Annual Meeting
All rights reserved.

www.odva.org

21

Test Guidance – Safety Results Audit Tool

Marketing & Training Track© 2017 ODVA, Inc.

2017 Industry Conference & 18th Annual Meeting
All rights reserved.

www.odva.org

22

Test Guidance – Safety Results Audit Tool
STATUSTEST FORMATCONFIG SPEEDFound
TST101 BaseFormat
TSCPFoundTST13 BaseFormat
TSCP
Found
TST14 BaseFormat
TSCP
Found
TST16 BaseFormat
TSCP
Found
TST17 BaseFormat
TSCP
Found
TST20 BaseFormat
TSCP
Found
TST21 BaseFormat
TSCP
Found
TST22 BaseFormat
TSCP
Found
TST2 BaseFormat
TSCP
Found
TST31 BaseFormat
TSCP
Found
TST3 BaseFormat
TSCP
Found
TST4 BaseFormat
TSCP
Found
TST58 BaseFormat
TSCP
Found
TST5 BaseFormat
TSCP
Found
TST6 BaseFormat
TSCP
Found
TST101 ExtendedFormat TSCP
Found
TST109 ExtendedFormat TSCP
Found
TST113 ExtendedFormat TSCP
Found
TST116 ExtendedFormat TSCP
Found
TST121 ExtendedFormat TSCP
Found
TST13 ExtendedFormat TSCP
Found
TST16 ExtendedFormat TSCP
Found
TST3 ExtendedFormat TSCP
Found
TST4 ExtendedFormat TSCP
Found
TST58 ExtendedFormat TSCP
Found
TST5 ExtendedFormat TSCP
Found
TST6 ExtendedFormat TSCP
Skipped
TST6 ExtendedFormat TSCP
Found
TST6 ExtendedFormat TSCP
Found
TST101 BaseFormat
TSCPL
Found
TST13 BaseFormat
TSCPL
Found
TST15 BaseFormat
TSCPL
Found
TST16 BaseFormat
TSCPL
2017 Industry Conference & 18th Annual Meetingwww.odva.org
Found
TST17 BaseFormat
TSCPL
All rights reserved.
Found
TST20 BaseFormat
TSCPL•Sample_SafetyResults.csv•Sample_SafetyResults.xml

Marketing & Training Track© 2017 ODVA, Inc.

23

Available CIP Safety CCTs•

DeviceNet– CT7 DS (CT26 DN)•EtherNet/IP– CT8 ES (CT12 EN)•Sercos III– CT1 SS•

Planned updates in 2017 – Release candidates available– CT8 DS (CT28 DN)– CT9 ES (CT14 EN)– CT2 SS

Marketing & Training Track© 2017 ODVA, Inc.

2017 Industry Conference & 18th Annual Meeting
All rights reserved.

www.odva.org

24

Planned updates in 2017•

Release of new safety software subscriptions in first half of 2017
– Improvements related to Originator testing– Improved support for non-SNCT devices– Fixes for unexpected stack behaviors•

Next software subscription– Improve safety results audit to cover all tests and eliminate manual checking– Add coverage for Safety Motion objects– Support ongoing specification changes

Marketing & Training Track© 2017 ODVA, Inc.

2017 Industry Conference & 18th Annual Meeting
All rights reserved.

www.odva.org

25

Available CIP Safety TSPs•

Ann Arbor (ODVA Technology and Training Center)– CIP Safety on EtherNet/IP, DeviceNet, Sercos III– Target and Originator•

Magdeburg TSP (University of Magdeburg)– CIP Safety on EtherNet/IP– Target•

Stuttgart TSP (University of Stuttgart ISW)
– CIP Safety on Sercos III– Target•

Yokohama TSP and Shanghai TSP (TRJ, TRS)
– No CIP Safety testing at the present time

Marketing & Training Track© 2017 ODVA, Inc.

2017 Industry Conference & 18th Annual Meeting
All rights reserved.

www.odva.org

26

Opportunities For Additional Training••

ODVA Quickstart Seminars
CIP Safety One Day Training– in conjunction with TÜV Rheinland HW/SW FS Engineer Training and Exam

Marketing & Training Track© 2017 ODVA, Inc.

2017 Industry Conference & 18th Annual Meeting
All rights reserved.

www.odva.org

27

THANK YOU

THANK YOU