The representative cell: one operator, one open side, two different hazards
This is a representative power-press cell — not a named customer or plant, just the layout we see again and again. An operator stands at a fixed station and runs the press from a Type IIIC two-hand control: two guarded buttons that must be pressed concurrently and synchronously to initiate the slide. That arrangement is genuinely effective for the operator: with both hands committed to the buttons, neither hand can be in the point of operation during the hazardous stroke.
The problem is the other side. The point of operation also faces an open loading and inspection plane where a second worker — a loader, a helper, a QC inspector — can approach and reach toward the dies. The two-hand control on the operator's station does nothing to stop a stroke the operator legitimately initiates while that second person's hand is in the die area. That open access plane is exactly what a vertical Type 4 light curtain is for: break the field and the press stops, before the hazard is reachable.
Why is two-hand control alone insufficient when others are nearby?
This is the load-bearing point of the whole case, and it comes straight from the standard. ISO 13851 explicitly states a two-hand control device only offers protection for the person using it. A two-hand control forces both of the operator's hands onto actuators away from the danger zone, so neither of their hands can be in the point of operation during the stroke. That is the entire scope of its protection. It has no way to know whether anyone else is near the dies.
So the classic, dangerous error is to treat “we have two-hand control” as “the press is safeguarded.” It protects the button-pusher and nobody else. The moment your risk assessment identifies that a loader, helper or inspector can reach the point of operation, a presence-sensing device is mandatory, not optional. The light curtain is what extends protection to the person the two-hand control structurally cannot see. (OSHA's machine-guarding guidance makes the same point from the other direction: where more than one operator is needed, each must have a separate two-hand control and all must be actuated concurrently — two-hand control is per-person by design.)
The standards, and what each one actually governs
It helps to keep the lanes straight, because each standard answers a different question:
- ISO 13851 (two-hand control devices) — defines the THCD types. Type IIIC is the highest: both hands (simultaneous), synchronous actuation within a ≤ 0.5 s simultaneity tolerance, self-monitoring, realized to Category 4 / PLe. And the clause that drives this case: it protects only the user.
- IEC 61496 (ESPE) — the light curtain's product standard. Type 4 uses redundancy with continuous self-monitoring, suitable up to SIL 3 / PLe; Type 2 is capped at about PLc and is not appropriate for a press point-of- operation hazard.
- ISO 13855 (positioning / safety distance) — where to put the curtain: S = K·T + C, including reach-over / reach- under height tables.
- ISO 13849-1 (SRP/CS) — the control-system integrity: Performance Levels a–e and Categories. A press stop is typically PLd or PLe, realized with Category 3 or 4 (dual-channel, single-fault tolerant, fault detected before the next demand).
- IEC 62046 (application of presence-sensing) — selection, positioning, configuration, commissioning, and the muting and blanking rules (2018 edition updated them).
- ISO 3691-4 (driverless trucks / AGVs) — relevant only if the cell is AGV-served, where a horizontal safety laser scanner becomes the appropriate device (with IEC 61496-3 for the scanner).
One honesty note that matters for your declaration: IEC 61496 is not treated as giving an automatic presumption of conformity, so a type examination from an independent body is expected — do not assume the standard alone carries you.
How do you calculate where the light curtain goes? S = K·T + C
ISO 13855 gives the minimum distance between the detection field and the hazard as:
- K = approach speed. 2000 mm/s for hand/arm detection; 1600 mm/s is permitted only in defined whole-body cases where S ≥ 500 mm. For a hand reaching in at a die, use 2000 mm/s — using 1600 here is a classic under-sizing mistake.
- T = total stopping time. This is press stopping time + curtain response time + relay response time added together — not just the curtain. A device mounted too close to the hazard leaves residual danger precisely because someone forgot the press's own run-down in T.
- C = intrusion distance from detection capability d. For a normal-approach vertical curtain, C = 8·(d − 14) mm (never below 0).
The biometric detection data behind d (per EN ISO 13855): finger = 14 mm, hand = 30 mm, leg up to 70 mm, body over 70 mm. So a 14 mm finger curtain gives C = 0 mm, while a 30 mm hand curtain adds C = 128 mm. Pick the resolution to match how the body part actually reaches in, then carry its real C into S.
We are deliberately not publishing a single computed S for this fictional press — T depends on the real machine's measured stopping time. Use the formula and your own measured numbers. For a full worked method, see our ISO 13855 safety-distance guide.
What does the resolution table look like? (the C term, side by side)
| Detection capability d | Body part (EN ISO 13855) | C = 8·(d − 14) mm | Typical use |
|---|---|---|---|
| 14 mm | Finger | 0 mm | Fine point-of-operation reach-in; mounts closest |
| 30 mm | Hand | 128 mm | Hand reach-in; must mount further back than a finger curtain |
| > 40 mm | Leg / body | Larger C; whole-body / access detection, not fine reach-in | Perimeter / whole-body access guarding |
Get the resolution wrong — choose a coarse curtain and under-count C — and the device ends up mounted closer than it is allowed to be. That is one of the most common findings on a press audit.
The other three ways a hand gets in: reach-over, reach-under, reach-around
A vertical curtain only guards the plane it covers. ISO 13855 height tables and good installation practice close the rest:
- Reach-over — if the top beam is too low, a person reaches over the field. Set the top beam high enough per the ISO 13855 height tables.
- Reach-under — if the bottom beam is too high off the floor, a person ducks or reaches under. Keep the bottom beam no more than about 300 mm (12 in) off the floor unless the gap is hard-guarded.
- Reach-around — side gaps let a person reach around the field. Close the remaining sides with hard guards.
Each of these defeats the curtain while it still reports “guarded.” They are installation failures, not device failures — and they are entirely on the integrator to get right.
The convergence point: a DA31 safety relay with EDM
Both protective paths — the Type IIIC two-hand control output and the curtain's OSSD pair — have to command the same press stop, through a control-reliable (Category 3/4) architecture. They converge on a safety relay whose two normally-open safety contacts are wired into the press stop/clutch-brake control. Per DAIDISIKE, the DA31 takes the curtain OSSD, switches the power/stop circuit through a pair of safety contacts, and performs the EDM feedback check.
Why EDM is non-negotiable: External Device Monitoring reads back the state of the final switching elements (the contactors) and refuses to allow the next stroke if one is welded or stuck. Wire a curtain or two-hand output to a relay without EDM and a welded contactor goes undetected — the next demand fails dangerously and your realized PL drops below the required level. The DA31 is the single place where the operator's path and the bystander curtain path are combined and where single-fault detection lives.

Where DAIDISIKE products fit this cell
Framed vendor-neutrally, by role — no invented specs:
- DQC series — the finger/hand-guard Type 4 line for the point-of-operation access plane. Use a finger- or hand-resolution model so the C term and approach assumptions match a person reaching in.
- DQS / DQSA / DQV — the perimeter-guarding / high-protective-height line. Use these for whole-body access guarding of the surrounding zone, not for fine point-of-operation reach-in.
- DA31 safety relay — the safety control core that takes the curtain OSSD, switches the stop circuit through a pair of safety contacts, and performs EDM feedback checking. The convergence point for both protective paths.
- DLD-series LiDAR scanner — only if the cell is AGV/AMR-served or needs horizontal floor-zone presence detection (approach to the press footprint). It is an obstacle-avoidance / navigation / perimeter sensor and is not a substitute for the vertical point-of-operation light curtain — that vertical reach-in plane stays the curtain's job.
The close-to-run sequence and the failure modes it tolerates
Functionally the system behaves like this:
- Operator presses both buttons concurrently and synchronously (≤ 0.5 s tolerance) → two-hand path permits a stroke.
- The curtain field over the open access plane must be clear → OSSD high. A broken field prevents a stroke regardless of the buttons.
- Both conditions reach the DA31; its dual safety contacts allow the press cycle.
- Anyone breaks the curtain → OSSD drops → relay drops the press stop within the total stop time S accounted for.
- EDM + a deliberate manual reset are required before the press can run again — clearing the field alone does not restart it.
The design must tolerate or detect: a welded output contactor (caught by EDM before the next stroke); a single channel fault on either path (Cat 3/4 redundancy detects it before the next demand); curtain optical fault or loss of alignment; short-circuit between OSSD lines (Type 4 cross-monitored wiring); blanking/muting misuse; and the human failure mode of a second person entering during a stroke the operator initiated — which is exactly the gap the curtain closes.
Common mistakes engineers make on this exact cell
- Assuming two-hand control = full safeguarding. It protects only the button-pusher; a presence-sensing device is mandatory once others can reach in.
- Mounting the curtain too close — forgetting that T in S = K·T + C includes the press's own stopping time, not just the curtain response.
- Wrong K or wrong C / wrong resolution — using 1600 mm/s when a hand reaches in (must be 2000), or a coarse curtain with an under-counted C.
- Reach-over / reach-under / reach-around defeats — top beam too low, bottom beam > 300 mm off the floor, or open sides.
- No EDM / no monitored final elements — a welded contactor goes undetected and drops the realized PL.
- Muting/blanking abuse — muting the curtain to feed material instead of designing it per IEC 62046 re-opens the bystander hazard.
- Using a Type 2 curtain, or a laser scanner where a vertical curtain is required — Type 2 caps at ~PLc; a horizontal LiDAR zone does not protect a vertical reach-in plane.
- Two independent stops with no common safe state — both paths must command the same Cat 3/4 press stop; a stroke must be impossible while the curtain field is broken.
How does this compare to other brands' kit?
The device classes here are standard across the industry: a Type 4 curtain like the SICK or Banner deTec / EZ-Screen families, two-hand control modules from Banner or IDEC, and safety relays such as the Pilz PNOZ or Allen-Bradley (Guardmaster) 440R/MSR families all do the same jobs to the same IEC 61496 / ISO 13851 / ISO 13849-1 device classes. DAIDISIKE's DQC (Type 4 curtain) and DA31 (PLe / SIL 3 safety relay with EDM) are built to the same standards, factory-direct, MOQ 1 set. If you are cross-shopping the relay, see our Pilz PNOZ alternatives and Allen-Bradley Guardmaster alternatives write-ups. Confirm holding/utilisation ratings, response times and PL against your risk assessment before swapping any brand — the standards govern, not the logo.

The takeaway
On a press where the operator runs the stroke from a Type IIIC two-hand control and a second worker can reach the dies, the two-hand control is doing its job and still leaving a person unprotected — because ISO 13851 protects only its user. Add a Type 4 light curtain on the open access plane, positioned with a real S = K·T + C using the machine's measured stop time and the correct resolution; close reach-over / reach-under / reach-around; and converge both protective paths on a DA31 safety relay with EDM and manual reset to a Cat 3/4 press stop. Two complementary devices, one common safe state — that is point-of-operation safeguarding done honestly.

