60 Minutes on CIP Safety™
David Crane & Artem Bobritsky
ODVA
October 10, 2018

Overview••••

ODVA Conformance Policy Updates
CIP Safety Conformance Test Software Update
Overview of Safety Week at ODVA TTC (Oct 22-26)
Wrap-up and Questions

Technical Track© 2018 ODVA, Inc.

2018 Industry Conference & 19th Annual Meeting
All rights reserved.

www.odva.org

2

ODVA Conformance
Policy Updates

ODVA CONFIDENTIAL© ODVA, Inc. 20183

ODVA Conformance Policy Updates•Test By Vendor (TBV) for CIP Safety on EtherNet/IP– PUB00008R4 ODVA Policy Regarding Compliant Products•

Requirement for SIL and SC3 per IEC-61508– PUB00261R2 Technology Management for Conformance Policy

Technical Track© 2018 ODVA, Inc.

2018 Industry Conference & 19th Annual Meeting
All rights reserved.

www.odva.org

4

ODVA Conformance Policy Updates•

ODVA PUB00008R6

Technical Track© 2018 ODVA, Inc.

2018 Industry Conference & 19th Annual Meeting
All rights reserved.

www.odva.org

5

ODVA Conformance Policy Updates•ODVA PUB00261R2

Technical Track© 2018 ODVA, Inc.

2018 Industry Conference & 19th Annual Meeting
All rights reserved.

www.odva.org

6

ODVA Conformance Policy Updates•Pub 8 Appendix A defines Test By Vendor “TbV” option

Technical Track© 2018 ODVA, Inc.

2018 Industry Conference & 19th Annual Meeting
All rights reserved.

www.odva.org

7

ODVA Conformance Policy Updates•

Pub 261 section 7.2 defines additional requirements related to DOCs for
implementations of CIP Safety

Technical Track© 2018 ODVA, Inc.

2018 Industry Conference & 19th Annual Meeting
All rights reserved.

www.odva.org

8

ODVA Conformance Policy Updates – CIP Safety TBV••ODVA PUB00008R2 (Sept 1, 2018)
Appendix A - Requirements for Test By Vendor (TBV) for CIP Safety– The implementation is on EtherNet/IP– The minimum version of CT recorded on the DOC shall be CT9.
– The Licensed Vendor shall provide to ODVA Conformance Authority anEvaluation of Modifications Report from an ODVA-authorized Third-Party
Competent Body assessing the impact of the modifications according to IEC
61508.
– The ODVA DOC for a CIP Safety product is contingent on a valid Certificate ofCompliance to IEC 61508 from an ODVA-authorized Third-Party CompetentBody.

•These are in additional to the requirements for standard TBVTechnical Track© 2018 ODVA, Inc.

2018 Industry Conference & 19th Annual Meeting
All rights reserved.

www.odva.org

9Test By Vendor Process

Technical Track© 2018 ODVA, Inc.

2018 Industry Conference & 19th Annual Meeting
All rights reserved.

www.odva.org

10

ODVA Conformance Policy Updates – SIL/SC•

PUB00261R2 (November 1, 2017)– Section 3.2 (CIP Devices – modular and non-modular)– Section 7.2 (Third-party certifications)••••

Previously SIL3 was required for all CIP Safety devices
As of Volume 5 Edition 2.16 and PUB00261R2, lower SILs allowed
Section 7.2 added requirements related to Systematic Capability
Either SIL3 or SC3 according to IEC 61508-3:2010 must be certified– SC3 is a requirement for SIL3
– If SIL less than SIL3, then SC3 must be assessed

Technical Track© 2018 ODVA, Inc.

2018 Industry Conference & 19th Annual Meeting
All rights reserved.

www.odva.org

11

ODVA Conformance Policy Updates – SIL/SC•The CIP Networks Library Volume 5 Edition 2.16 Section 2-2.1– “The assessment of the systematic capability, SIL level requirements, andappropriate non-interference measures is carried out by the safety certification
body.”– “All implementations of CIP Safety technology shall use a safety certifying
agency to ensure that the design and implementation of the CIP Safety protocol(safety-related communication software) provides a Systematic Capability of SC3
according to IEC 61508.”– “The CIP Safety protocol must be considered as part of a complete device, andthe integration of the CIP Safety protocol into the device must be done toachieve/maintain SC3.
• “For example, a Vendor cannot use a separately certified CIP Safety stack (one that
does provide SIL3 and SC3) in their product without regard to the need to provide SC3for the integration of the safety communication software in the integrated product.”Technical Track© 2018 ODVA, Inc.

2018 Industry Conference & 19th Annual Meeting
All rights reserved.

www.odva.org

12

Safety Architectures for CIP Safety

Technical Track© 2018 ODVA, Inc.

2018 Industry Conference & 19th Annual Meeting
All rights reserved.

www.odva.org

13

CIP Safety Conformance Process
1 – Vendor works with Functional
Safety Partner

TUVRheinland

ODVA TSP
3 – Vendor orders CIP
Safety conformance test

2 –Functional Safety Partner
requires ODVA certification

5 –Vendor provides ODVAtest report

4 – ODVA provides test
reportVendor
6 – Safety Partner provides Functional Safety
certificate

7 – Vendor provides
Functional Safety
certificate
8 – ODVA issues Declaration ofConformity

End User9 – Vendor ships product toend users

Marketing & Training Track© 2017 ODVA, Inc.

2017 Industry Conference & 18th Annual Meeting
All rights reserved.

www.odva.org

14

CIP Safety Conformance
Test Software Update

ODVA CONFIDENTIAL© ODVA, Inc. 201815

CIP Safety Conformance Test Software Update•Updates in CT9 CIP Safety on EtherNet/IP Release (March 2018)– Improvements related to Originator DUTs
– Expanded test coverage for non-SNCT devices– CT14 based•

Planned for upcoming CIP Safety on EtherNet/IP Release (November 2018)––––•

CT16 based
Added support for external configuration scripts
Large/small safety connections defined in one STC file
Increased number of tests with auditable milestone CRCs

Plans for next software subscription update (Fall 2019)– Address existing gaps and known defects•

E.g., Add coverage for Safety Motion objects– Support ongoing specification enhancements
Technical Track© 2018 ODVA, Inc.

2018 Industry Conference & 19th Annual Meeting
All rights reserved.

www.odva.org

16

Non-SNCT support and external configuration scripts

Technical Track© 2018 ODVA, Inc.

2018 Industry Conference & 19th Annual Meeting
All rights reserved.

www.odva.org

17

CIP Safety Conformance Test Software Update•

Updates in CT9 CIP Safety on EtherNet/IP Release (March 2018)– Improvements related to Originator DUTs
– Expanded test coverage for non-SNCT devices– CT14 based•

Planned for upcoming CIP Safety on EtherNet/IP Release (November 2018)––––•

CT16 basedAdded support for external configuration scripts
Large/small safety connections defined in one STC file
Increased number of tests with auditable milestone CRCsPlans for next software subscription update (Fall 2019)– Address existing gaps and known defects•

E.g., Add coverage for Safety Motion objects– Support ongoing specification enhancements
Technical Track© 2018 ODVA, Inc.

2018 Industry Conference & 19th Annual Meeting
All rights reserved.

www.odva.org

18

Large/Small connection definedTechnical Track© 2018 ODVA, Inc.

2018 Industry Conference & 19th Annual Meeting
All rights reserved.

www.odva.org

19

CIP Safety Conformance Test Software Update•

Updates in CT9 CIP Safety on EtherNet/IP Release (March 2018)– Improvements related to Originator DUTs
– Expanded test coverage for non-SNCT devices– CT14 based•

Planned for upcoming CIP Safety on EtherNet/IP Release (November 2018)––––•

CT16 based
Added support for external configuration scripts
Large/small safety connections defined in one STC file
Increased number of tests with auditable milestone CRCsPlans for next software subscription update (Fall 2019)– Address existing gaps and known defects•

E.g., Add coverage for Safety Motion objects– Support ongoing specification enhancements
Technical Track© 2018 ODVA, Inc.

2018 Industry Conference & 19th Annual Meeting
All rights reserved.

www.odva.org

20

Overview of Safety Week at
ODVA TTC (Oct 22-26)

ODVA CONFIDENTIAL© ODVA, Inc. 201821

Overview of Safety Week at ODVA TTC
Mon

TueWedThuFri• Intro to Safety• IEC 61508 Part 2 • IEC 61508 Part 3 • Exam (4 hrs)
Engineering
Requirements
Software• IEC 61508 Part 1 of E/E/PES• Bus Systemssystems(FSM)• CIP Safety
Training

Hardware/Software Design According to IEC61508• Conducted by TÜV Rheinland• Application of IEC 61508 Parts 1, 2 and 3• Qualified participants can sit for optional examination to obtain the
Functional Safety Engineer (TÜV Rheinland) certificate
Technical Track© 2018 ODVA, Inc.

2018 Industry Conference & 19th Annual Meeting
All rights reserved.

www.odva.org

22

Overview of Safety Week at ODVA TTC
CIP Safety Training Overview• Overview of Functional Safety and Safety Networks• CIP Network Architecture• CIP Safety Features• CIP Safety I/O Concepts• CIP Safety Objects• CIP Safety Configuration• Implementation Strategies• Conformance Testing• Specification Enhancement
Technical Track© 2018 ODVA, Inc.

2018 Industry Conference & 19th Annual Meeting
All rights reserved.

www.odva.org

23

Overview of Safety Week at ODVA TTC, cont’d
Application Layer - Network Independent
CIP Safety
Application Layer

DeviceNet
Transport Layer

EtherNet/IP
Transport Layer

DeviceNet
Communications
Stack

DeviceNet
Data Link Layer

EtherNet
Data Link Layer

DeviceNet
Physical Layer

EtherNet/IP
Communications
Stack

Ethernet
PhysicalSafety
Code

DeviceNet
HeaderSafetyCodeSafety
Data

DeviceNet
Data PacketDeviceNet
Trailer

EtherNet/IP
HeaderSafetyData

EtherNet/IP
Data Packet

EtherNet/IP
Trailer

CIP Safety Protocol Training: Slide No. 53(PUB00303R3) ©2015-2017 ODVA, Inc. All rights reserved.

Overview of Safety Week at ODVA TTC, cont’d•

CIP Safety Protocol Concepts
Safety Originator

Safety Message w/ Data, Time
Stamp (Correction)

Safety Validator Client

Safety Validator Server

TargetOriginator

Consuming
SafetyApplication

Safety Target

SafetyValidator
ClientData Link

Data Link

SafetyValidator
ServerSPPCSCSCCPSP

Producing
Safety Application

Time Coordination

CIP Safety Protocol Training: Slide No. 71(PUB00303R3) ©2015-2017 ODVA, Inc. All rights reserved.

Overview of Safety Week at ODVA TTC, cont’d•Errors and Measures

ErrorsMessage
Repetition
Message
LossMessage
Insertion
Incorrect
Sequence
Message
Corruption
Message
Delay
Coupling of safety &safety data
Coupling of safety &standard data
Increased age of datain bridge or router

Time expectation
via a timestamp

ID for send andreceive

X
X
X
X

Measures
Safety CRC

Redundancy

DiverseMeasures

X
X
X

X
X
X

X

X

X

X
X
X

X

X
CIP Safety Protocol Training: Slide No. 87(PUB00303R3) ©2015-2017 ODVA, Inc. All rights reserved.

Overview of Safety Week at ODVA TTC, cont’d
https://odva.org

Technical Track© 2018 ODVA, Inc.

2018 Industry Conference & 19th Annual Meeting
All rights reserved.

www.odva.org

27

Overview of Safety Week at ODVA TTC, cont’dTechnical Track© 2018 ODVA, Inc.

2018 Industry Conference & 19th Annual Meeting
All rights reserved.

www.odva.org

28

Wrap-up and Questions

ODVA CONFIDENTIAL© ODVA, Inc. 201829

Wrap-up and Questions

For more information• https://odva.org– KNOW-HOW HUB•

conformance@odva.org– Get answers to conformance-related questions via email– Monitored by members of the Conformance Authority

Technical Track© 2018 ODVA, Inc.

2018 Industry Conference & 19th Annual Meeting
All rights reserved.

www.odva.org

30

Wrap-up and Questions

Technical Track© 2018 ODVA, Inc.

2018 Industry Conference & 19th Annual Meeting
All rights reserved.

www.odva.org

31

THANK YOU