Safety Area Scanner: An Engineering Guide to Standards, Specification, and Field Deployment

A Safety Area Scanner is a Type 3 certified safety device perched at the intersection of three things a product datasheet never shows you: a risk-graph calculation, a minimum-distance formula, and a dozen small installation decisions that determine whether the device actually stops a machine to protect personnel before a human reaches the hazard. This guide walks through the standards, the mathematics, and the field-commissioning mistakes that separate a scanner shipping with a certificate from one that performs on the shop floor.

What a Safety Area Scanner Actually Does (Beyond the Datasheet)

A safety zone scanner diver sends short infrared laser pulses through a rotating mirror that searches the beam through a 270 to 275 arc in front of the device. For each pulse, the scanner measures the time delay between emission and reflection from whatever surface the beam hits – human, pallet, wall, or the floor at the perimeter of the detection range. That time-of-flight measurement translates directly into a distance measurement, and several thousand such measurements per scanner cycle construct a twodimensional polar map of the scannerner’s environment. When any measurement enters a preconfigured protection zone, the scanner de-energizes its OSSD safety outputs, and the downstream controller stops the hazardous motion. This is how the device is capable of detect objects – human or otherwise – that cross a configurable zone boundary and hand that event to the safety control system as a certified signal.

Mechanism matters because it determines what a safety zone scanner diver can and cannot do. Unlike a light curtain, which detects interruption of a beam across a single plane, a scanner provides an area-based safety solution. The warning zone and protection zone can be arbitrary shapes plotted on configuration software, switched between banks without hardware modifications, and traversed between zones in under one scanner cycle. This is why a scanner substitutes hard guarding and safety mats wherever layout changes are forecasted – no wire fatigue, no mat replacement after dropped tools, no fence rewiring when the cell relocates. Across today’s automation, that adaptability is what allows a single safety zone scanner to achieve zone flexibility that older contact-based guarding cannot.

A laser beam emitted in a fan shape also means detection resolution worsens with distance. At 3 m from the scanner, a 30 mm object is detectable; at 8 m, the minimum detectable object is generally 70 mm. This geometric detail informs both the mounting-height selection and the minimum-distance calculation presented subsequently in this guide.

The Safety Standards Stack — IEC 61496, IEC 61508, and ISO 13849

Three standards specify what a certified safety area scanner must deliver. They stack one upon the other — each addresses one question, and all must be answered for the scanner to be certified.

What is the ISO 13849 PLd, Category 3 standard?

ISO 13849-1 refers to “PL” as a Performance Level – a classificisation of the probability of safe related parts of a control system to perform their safety function under foreseeable conditions. “PLd” refers to a scanner architecture that falls within the 10 to 10 PFH range, that is about 0.00001% to 0.0001% chance of dangerous failure per hour of operation. Category 3, added in addition to the PL value, describes the structural requirement that the total safety functionality must survive a single fault, at any point in the safety chain. These two attributes are grouped together because a PL without Category tells you how reliable, Category without PL tells you how fault tolerant – you will need both.

In practice a Type 3 scanner will also have to meet environmental conditions – detectable minimum target reflectance, minimum ambient light resistance, dirt and residue protection, operating temperature and humidity range, vibration and shock, electromagnetical compatibility. Type 4 exists as a more demanding option and is used mainly for safety light curtains based on image sensing. For maximum detection range from reflection, Type 3 is the limit set by the physical principles and that is the label that you will find on any certified area scanner.

Risk Assessment to Performance Level — The 4-Step Specification Workflow

One common mistake in scanner specification is to begin with selection model. The correct starting point is the hazard itself. ISO 12100 defines the hazard rating method. ISO 13849-1 Annex A then turns that risk assessment into a numerical Required Performance Level (PLr). Only once PLr has been arrived at does the scanner become a specification choice.

Our 4-Step Specification Workflow formalizes this ordering, and it is the keystone of any safeguard device selection that will pass an auditor.

• ✔
  Step 1 — Hazard identification (ISO 12100). Walk the equipment. Catalog every point where motion, energy, or material movement can injure an operator. This is not a scanner decision yet.
• ✔
  Step 2 — Risk graph (ISO 13849-1 Annex A). For each hazard, pick three parameters: S (severity — S1 reversible vs S2 normally irreversible injury), F (frequency — F1 below every 15 minutes and below 1/20 of operating time, F2 above), and P (avoidance — P1 possible under specific conditions, P2 scarcely possible). Trace the graph to the required PL (PLr), somewhere from a to e.
• ✔
  Step 3 — Scanner specification. Select a device whose achieved PL (from the manufacturer’s certificate) meets or exceeds PLr. Most industrial machinery with a zone-control safety function lands on PLd, Category 3 — and that is where Type 3 scanners sit.
• ✔
  Step 4 — Safety distance and zone design. Calculate the ISO 13855 minimum distance and design the protection zone geometry around it. This is where Step 3 feeds back: a slow-responding scanner demands a larger zone, which may rule out a compact cell.

Case Study: a fenceless co-operative robot cell where an operator can touch a moving arm. Severity is S2 as the arm can deliver a crush injury. Frequency is F2 because operator interaction occurs every few minutes. Avoidance is P2 because the arm moves faster than a step-back reflex. The graph arrives at PLr=e. A Type 3 scanner rated PLd will not satisfy this alone – a PLe solution normally needs redundant safety channels or a more highly rated device. This is the kind of outcome work on hazard graph can produce, and it is the only sure method of knowing if one scanner will do the trick.

Calculating Safety Distance — The ISO 13855 Minimum Distance Formula

The most important calculation in safeguard design is the minimum separation distance between protection zone edge and hazard. Too short and the operator reaches the hazard before the machine is stopped. Too long and the operating workspace is needlessly constrained. The EN ISO 13855:2024 edition formalizes this calculation.

The distance-before-device rule: calculate S before choosing the scanner. The formula reveals which factor is actually negotiable. T is the big switch—that is, a PLC with a 20 ms safety cycle, plus a scanner at 80 ms response, plus a drive that takes 300 ms to reach zero torque, gives T = 0.4 s. At K = 1600 mm/s, that T alone adds 640 mm of distances needed. Halve T to 200 ms by means of a faster PLC reduces that contribution to 320 mm. Steering the scanner model rarely pushes the needle as much as changing stop-time elsewhere in the chain.

For the DDS (detection-capability supplement) term, the pre-2024 convention used C = 8 (d 14 mm) for object resolutions below 40 mm, where d is the scanner’s minimal detectable object. A scanner with 30 mm resolution would give C = 128 mm. For resolutions between 40 and 70 mm – typical at greater scanner distances – the convention defaults C to 850 mm. These values persist into the 2024 DDS system because they describe the same physical circumstance: a rougher scanner needs a longer run-up distance prior to detection accomplishment.

Full stop-time T is rarely what a PLC report states. Field-testing often reveals T to be 10 to 20 % higher than the controller states because mechanical drives decelerate in a non-linear fashion and the drive report stops at the command signal, not at physical rest. A stopwatch-calibrated bench testing session with a calibrated test rod in hand is the only real-world validation that qualifies.

Installation and Commissioning Without the Foot-Gun Mistakes

Scanner certification establishes capability; proper installation ensures operation. Several simple missteps appear time and again in facility-wide machine-safety audits and in the field reports which come from equipment manufacturers. The list below shows the common missteps which have gotten machines expensively recertified, or in the worst cases caused injuries.

• ✔Mount height versus resolution. A scanner mounted 300 mm off the floor with a 70 mm resolution represents the most common operational failure—a human can crawl underneath. Reduce the mounting height below 300 mm; reduce resolution to 50 mm. Field reports from equipment manufacturers identify this as the single most common setup error.
• ✔Multiple-sampling delay. Scanners take multiple readings — 2x, 4x, or 8x — before setting off the trigger to filter out noise. The default 2x works well in a silent, stationary setup; 4x is typical for mobile equipment, 8x is the standard for dusty, particulate environments. Increasing the sampling delay proportionally increases the off-delay, which is fed directly back into T and ultimately creates a larger safety zone.
• ✔Reflective-background allowance. A highly reflective surface within 1.5 m of the protection zone boundary adds 200 mm to the required safety distance. Chrome-plated fixtures, mirror finishes, stainless walls, and polished rollers are typical offenders.
• ✔Direct sunlight on the optical window. Infrared saturation causes false trips, not safety failures — the scanner remains safe, but availability drops. Orient the window away from sun-exposure angles that occur during shift hours.
• ✔Restart interlock per ISO 10218-2. For industrial robot cells, the safety function must not auto-restart when the zone clears; a manual reset is required. Wire this into the safety controller, not a standard PLC input.
• ✔Field-set switching via a safety channel. Zone-bank selection controlled by a non-safety PLC output downgrades the entire safety function from PLd/SIL 2 to PLc or PLa. Use safety-rated signals for bank switching, or move bank logic into the safety controller.
• ✔Bench-measured total stop time. Never trust the PLC’s reported T. Use a calibrated test rod and a stopwatch to measure from zone penetration to physical motion cessation. The measured value is the T you feed into the ISO 13855 calculation.
• ✔Blind-spot coverage for corners. A single 275° scanner mounted on a corner leaves a wedge-shaped dead zone behind the mounting bracket. Two scanners at adjacent corners, with protection zones that overlap in the corner region, are the typical solution for AGVs and large cells.

Hardware selection that delivers the previously-described PLd/SIL 2/Type 3 stack is covered by the QJKH QAS range of Type 3 certified safety scanners, covering the three typical distance ranges for stationary, AGV, and fenceless-cell approaches.

Zone Design for AGV, Robot Cell, and Muted Conveyor Applications

Zones is where the scanner power meets application needs. Software tool can draw just about any shape as a protection or warning zone, but does not recommend which zone shape is best for a particular installation. A rule of thumb is simple: protective zones should be as big as necessary but as small as practicable. Too-large zones will trigger nuisance stops, too-small zones violate the ISO 13855 calculation.

Multipoles installs increasingly use CIP Safety over EtherNet/IP, or PROFIsafe over PROFINET. Both pass configurable scanner-zone states in an existing safety network, cutting-out the additional safety I/O cabling traditional installs require. Both are sufficiently standardized that a Siemens TIA Portal safety automation program or an Allen-Bradley GuardLogix program can directly read zone state, without proprietary coding. The cost is ease of commissioning – a networked scanner is more difficult to commission than one wired directly, but the wiring savings of a multi-scanner installation generally more than offsets this.

Real-World Failure Modes — Reflective Surfaces, Ambient Light, Dust, and Alignment Drift

Every scanner installation eventually confronts the physical world. Our Scanner Failure-Mode Taxonomy catalogs the field problems that show up after a few weeks of operation. A Type 3 scanner will not trip when nothing moves through the protection zones – but it may still trip during no-motion, or trip too frequently to be comfortable, causing operators to disable safety altogether.

Dedicated outdoor scanner versions with multi-echo filtering push usability into rain and snow in the hour or two surrounding the peak sunlight window. At the washdown end of the indoor spectrum, an IP65 enclosures handles short-term misting but not long-term industrial single-hose/high-flow rinse – validate the IP code against the washdown routine before including a scanner on a food or pharma product line. The remote-monitoring firmware the scanner supplies, when the scanner supplies it, allows maintenance engineers to monitor intensity and zone-state logs over a network and detect drift before it results in a downtime event.

Frequently Asked Engineering Questions

See QAS Series Type 3 Scanner Specifications →