Scanner de área de segurança: um guia de engenharia para padrões, especificações e implantação de campo

A Scanner da Área de Segurança is a Type 3 certified safety device perched at the intersection of three things a product datasheet never shows you: a risk-graph calculation, a minimum-distance formula, and a dozen small installation decisions that determine whether the device actually stops a machine to protect personnel before a human reaches the hazard. This guide walks through the standards, the mathematics, and the field-commissioning mistakes that separate a scanner shipping with a certificate from one that performs on the shop floor.

What a Safety Area Scanner Actually Does (Beyond the Datasheet)

A safety zone scanner diver sends short infrared laser pulses through a rotating mirror that searches the beam through a 270 to 275 arc in front of the device. For each pulse, the scanner measures the time delay between emission and reflection from whatever surface the beam hits – human, pallet, wall, or the floor at the perimeter of the detection range. That time-of-flight measurement translates directly into a distance measurement, and several thousand such measurements per scanner cycle construct a twodimensional polar map of the scannerner’s environment. When any measurement enters a preconfigured protection zone, the scanner de-energizes its OSSD safety outputs, and the downstream controller stops the hazardous motion. This is how the device is capable of detect objects – human or otherwise – that cross a configurable zone boundary and hand that event to the safety control system as a certified signal.

Mechanism matters because it determines what a safety zone scanner diver can and cannot do. Unlike a light curtain, which detects interruption of a beam across a single plane, a scanner provides an area-based safety solution. The warning zone and protection zone can be arbitrary shapes plotted on configuration software, switched between banks without hardware modifications, and traversed between zones in under one scanner cycle. This is why a scanner substitutes hard guarding and safety mats wherever layout changes are forecasted – no wire fatigue, no mat replacement after dropped tools, no fence rewiring when the cell relocates. Across today’s automation, that adaptability is what allows a single safety zone scanner to achieve zone flexibility that older contact-based guarding cannot.

A laser beam emitted in a fan shape also means detection resolution worsens with distance. At 3 m from the scanner, a 30 mm object is detectable; at 8 m, the minimum detectable object is generally 70 mm. This geometric detail informs both the mounting-height selection and the minimum-distance calculation presented subsequently in this guide.

The Safety Standards Stack — IEC 61496, IEC 61508, and ISO 13849

Three standards specify what a certified safety area scanner must deliver. They stack one upon the other — each addresses one question, and all must be answered for the scanner to be certified.

What is the ISO 13849 PLd, Category 3 standard?

ISO 13849-1 refers to “PL” as a Performance Level – a classificisation of the probability of safe related parts of a control system to perform their safety function under foreseeable conditions. “PLd” refers to a scanner architecture that falls within the 10 to 10 PFH range, that is about 0.00001% to 0.0001% chance of dangerous failure per hour of operation. Category 3, added in addition to the PL value, describes the structural requirement that the total safety functionality must survive a single fault, at any point in the safety chain. These two attributes are grouped together because a PL without Category tells you how reliable, Category without PL tells you how fault tolerant – you will need both.

In practice a Type 3 scanner will also have to meet environmental conditions – detectable minimum target reflectance, minimum ambient light resistance, dirt and residue protection, operating temperature and humidity range, vibration and shock, electromagnetical compatibility. Type 4 exists as a more demanding option and is used mainly for safety light curtains based on image sensing. For maximum detection range from reflection, Type 3 is the limit set by the physical principles and that is the label that you will find on any certified area scanner.

Risk Assessment to Performance Level — The 4-Step Specification Workflow

One common mistake in scanner specification is to begin with selection model. The correct starting point is the hazard itself. ISO 12100 defines the hazard rating method. ISO 13849-1 Annex A then turns that risk assessment into a numerical Required Performance Level (PLr). Only once PLr has been arrived at does the scanner become a specification choice.

Our 4-Step Specification Workflow formalizes this ordering, and it is the keystone of any safeguard device selection that will pass an auditor.

• ✔
  Step 1 — Hazard identification (ISO 12100). Walk the equipment. Catalog every point where motion, energy, or material movement can injure an operator. This is not a scanner decision yet.
• ✔
  Step 2 — Risk graph (ISO 13849-1 Annex A). For each hazard, pick three parameters: S (severity — S1 reversible vs S2 normally irreversible injury), F (frequency — F1 below every 15 minutes and below 1/20 of operating time, F2 above), and P (avoidance — P1 possible under specific conditions, P2 scarcely possible). Trace the graph to the required PL (PLr), somewhere from a to e.
• ✔
  Step 3 — Scanner specification. Select a device whose achieved PL (from the manufacturer’s certificate) meets or exceeds PLr. Most industrial machinery with a zone-control safety function lands on PLd, Category 3 — and that is where Type 3 scanners sit.
• ✔
  Step 4 — Safety distance and zone design. Calculate the ISO 13855 minimum distance and design the protection zone geometry around it. This is where Step 3 feeds back: a slow-responding scanner demands a larger zone, which may rule out a compact cell.

Case Study: a fenceless co-operative robot cell where an operator can touch a moving arm. Severity is S2 as the arm can deliver a crush injury. Frequency is F2 because operator interaction occurs every few minutes. Avoidance is P2 because the arm moves faster than a step-back reflex. The graph arrives at PLr=e. A Type 3 scanner rated PLd will not satisfy this alone – a PLe solution normally needs redundant safety channels or a more highly rated device. This is the kind of outcome work on hazard graph can produce, and it is the only sure method of knowing if one scanner will do the trick.

Calculating Safety Distance — The ISO 13855 Minimum Distance Formula

The most important calculation in safeguard design is the minimum separation distance between protection zone edge and hazard. Too short and the operator reaches the hazard before the machine is stopped. Too long and the operating workspace is needlessly constrained. The EN ISO 13855:2024 edition formalizes this calculation.

The distance-before-device rule: calculate S before choosing the scanner. The formula reveals which factor is actually negotiable. T is the big switch—that is, a PLC with a 20 ms safety cycle, plus a scanner at 80 ms response, plus a drive that takes 300 ms to reach zero torque, gives T = 0.4 s. At K = 1600 mm/s, that T alone adds 640 mm of distances needed. Halve T to 200 ms by means of a faster PLC reduces that contribution to 320 mm. Steering the scanner model rarely pushes the needle as much as changing stop-time elsewhere in the chain.

For the DDS (detection-capability supplement) term, the pre-2024 convention used C = 8 (d 14 mm) for object resolutions below 40 mm, where d is the scanner’s minimal detectable object. A scanner with 30 mm resolution would give C = 128 mm. For resolutions between 40 and 70 mm – typical at greater scanner distances – the convention defaults C to 850 mm. These values persist into the 2024 DDS system because they describe the same physical circumstance: a rougher scanner needs a longer run-up distance prior to detection accomplishment.

Full stop-time T is rarely what a PLC report states. Field-testing often reveals T to be 10 to 20 % higher than the controller states because mechanical drives decelerate in a non-linear fashion and the drive report stops at the command signal, not at physical rest. A stopwatch-calibrated bench testing session with a calibrated test rod in hand is the only real-world validation that qualifies.

Installation and Commissioning Without the Foot-Gun Mistakes

Scanner certification establishes capability; proper installation ensures operation. Several simple missteps appear time and again in facility-wide machine-safety audits and in the field reports which come from equipment manufacturers. The list below shows the common missteps which have gotten machines expensively recertified, or in the worst cases caused injuries.

• ✔Mount height versus resolution. A scanner mounted 300 mm off the floor with a 70 mm resolution represents the most common operational failure—a human can crawl underneath. Reduce the mounting height below 300 mm; reduce resolution to 50 mm. Field reports from equipment manufacturers identify this as the single most common setup error.
• ✔Multiple-sampling delay. Scanners take multiple readings — 2x, 4x, or 8x — before setting off the trigger to filter out noise. The default 2x works well in a silent, stationary setup; 4x is typical for mobile equipment, 8x is the standard for dusty, particulate environments. Increasing the sampling delay proportionally increases the off-delay, which is fed directly back into T and ultimately creates a larger safety zone.
• ✔Reflective-background allowance. A highly reflective surface within 1.5 m of the protection zone boundary adds 200 mm to the required safety distance. Chrome-plated fixtures, mirror finishes, stainless walls, and polished rollers are typical offenders.
• ✔Direct sunlight on the optical window. Infrared saturation causes false trips, not safety failures — the scanner remains safe, but availability drops. Orient the window away from sun-exposure angles that occur during shift hours.
• ✔Restart interlock per ISO 10218-2. For industrial robot cells, the safety function must not auto-restart when the zone clears; a manual reset is required. Wire this into the safety controller, not a standard PLC input.
• ✔Field-set switching via a safety channel. Zone-bank selection controlled by a non-safety PLC output downgrades the entire safety function from PLd/SIL 2 to PLc or PLa. Use safety-rated signals for bank switching, or move bank logic into the safety controller.
• ✔Bench-measured total stop time. Never trust the PLC’s reported T. Use a calibrated test rod and a stopwatch to measure from zone penetration to physical motion cessation. The measured value is the T you feed into the ISO 13855 calculation.
• ✔Blind-spot coverage for corners. A single 275° scanner mounted on a corner leaves a wedge-shaped dead zone behind the mounting bracket. Two scanners at adjacent corners, with protection zones that overlap in the corner region, are the typical solution for AGVs and large cells.

Hardware selection that delivers the previously-described PLd/SIL 2/Type 3 stack is covered by the QJKH QAS range of Type 3 certified safety scanners, covering the three typical distance ranges for stationary, AGV, and fenceless-cell approaches.

Zone Design for AGV, Robot Cell, and Muted Conveyor Applications

Zones is where the scanner power meets application needs. Software tool can draw just about any shape as a protection or warning zone, but does not recommend which zone shape is best for a particular installation. A rule of thumb is simple: protective zones should be as big as necessary but as small as practicable. Too-large zones will trigger nuisance stops, too-small zones violate the ISO 13855 calculation.

As instalações multipoles usam cada vez mais o CIP Safety sobre EtherNet/IP, ou PROFIsafe sobre PROFINET Ambos passam estados configuráveis de zona de scanner em uma rede de segurança existente, cortando o cabeamento de E/S de segurança adicional que as instalações tradicionais exigem Ambos são suficientemente padronizados para que um programa de automação de segurança Siemens TIA Portal ou um programa Allen-Bradley GuardLogix possa ler diretamente o estado da zona, sem codificação proprietária O custo do comissionamento é um scanner em rede mais difícil de comissionar do que um conectado diretamente, mas a economia de fiação de uma instalação de vários scanners geralmente é maior do que compensa isso.

Real-World Failure Modes — Reflective Surfaces, Ambient Light, Dust, and Alignment Drift

Cada instalação do scanner eventualmente confronta o mundo físico Nosso Taxonomia do modo de falha do scanner cataloga os problemas de campo que aparecem após algumas semanas de operação. Um scanner Tipo 3 não dispara quando nada se move pelas zonas de proteção, mas ainda pode disparar sem movimento ou disparar com muita frequência para se sentir confortável, fazendo com que os operadores desativem completamente a segurança.

Versões dedicadas de scanner externo com filtragem multi-eco empurram a usabilidade para a chuva e a neve na ou duas horas ao redor da janela de pico de luz solar Na extremidade de lavagem do espectro interno, um gabinete IP65 lida com nebulização de curto prazo, mas não com enxágue industrial de mangueira única/alto fluxo de longo prazo (linhagem).Validar o código IP em relação à rotina de lavagem antes de incluir um scanner em uma linha de produtos alimentícios ou farmacêuticos. O firmware de monitoramento remoto que o scanner fornece, quando o scanner o fornece, permite que os engenheiros de manutenção monitorem a intensidade e os registros de estado de zona em uma rede e detectem desvios antes que isso resulte em um evento de inatividade.

Frequently Asked Engineering Questions

Consulte as especificações do scanner tipo 3 da série QAS →