Two-Hand Control Station Product

Overview

Two-hand control stations are hardwired safety devices that force a machine operator to use both hands simultaneously to initiate hazardous motion. By occupying both hands, the operator cannot reach into a danger zone (e.g., under a press head or inside a clamping fixture) while the machine is moving. Two-hand control is mandated by OSHA and ISO 12100 for many metalworking operations: power presses, shears, hydraulic cylinders, and automated clamping devices.

This control station contains two yellow mushroom buttons mounted in a galvanized steel NEMA 4 console, wired to a Logic Relay dual-input AND relay. Both buttons must be pressed simultaneously (within a 500 ms window) to energize the relay and enable machine motion. If either button is released, the relay immediately de-energizes, halting the machine via a normally-open relay contact that interrupts the servo enable or hydraulic pilot solenoid signal.

The anti-tie-down feature prevents a worker from tying down one button (e.g., with a string or strap) and then single-handedly pressing the other. The relay mechanical design includes a latching detent that requires continuous pressure on BOTH buttons; if one is released even briefly, the relay cannot remain energized.

Dual Button Assembly

Each Button Assembly consists of a 60 mm yellow mushroom-head Button Actuator with a protective ring Button Guard surrounding it. The mushroom head provides ~20 square inches of contact surface, requiring a firm palm press to activate. A concave grip surface naturally guides the operator's hand to the button's center.

Each button connects to a dual-channel Button Switch NC (normally closed) contact set. When pressed, both NC contacts close, completing the circuit to the control relay. The switch is rated for 10A @ 240V AC and is designed with silver-alloy contact tips to resist contact bounce and arcing during the 45 mm travel.

A stainless steel Button Spring return spring (50 N restoring force) pushes the actuator back to the neutral (unpressed) position when hand pressure is released. The spring is rated for 10,000 cycles before fatigue.

AND Logic Relay Configuration

The Logic Relay is the critical safety component. It implements AND logic: the relay coil is energized only when BOTH button contact pairs are simultaneously closed.

The relay contains a 24V DC Relay Coil solenoid and a mechanically latched Relay Tongue armature. When the coil is de-energized, the armature rests in the neutral position; the relay contacts are in their safe (open) state. When the operator presses both buttons simultaneously:

1. Left button pressed: Current flows through left NC contacts into the relay's input terminal A.
2. Right button pressed: Current flows through right NC contacts into relay input terminal B.
3. Both closed: Current path is complete through the relay coil (inputs wired in series), solenoid energizes within 20 ms.
4. Coil energized: Armature pulls inward, closing both SPDT output Relay Contact Set. The machine enable signal flows to the servo controller.

The moment either button is released:

• Current to the relay coil is interrupted.
• Armature spring pulls the tongue back to neutral within ~50 ms.
• SPDT contacts open.
• Machine enable signal is lost; machine stops.

Anti-Tie-Down Mechanism

A mechanical Relay Tongue detent system prevents a worker from defeating the two-hand requirement. The armature has three discrete positions:

• Neutral (rest): No current through coil. Detent prevents accidental overtravel into a latched "always-on" position.
• Energized (pulled): When coil is energized and both buttons are pressed, the armature is pulled inward against the spring. It remains in this state only while power flows. If either button is released, the spring immediately resets.
• No latching: Unlike some older relay designs, there is no mechanical latch that "locks" the relay closed after momentary activation. This is the anti-tie-down feature.

A worker cannot tie a string around one button to hold it down and then use one hand on the other button. If they try, the relay simply will not energize because one of the two input contacts is mechanically held down (not actively being pressed by a hand), and the relay logic (input contacts in series) requires both to be electrically closed by the actual button switch contacts.

Relay Chatter Suppression

The Chatter Suppressor RC network (1 kΩ resistor + 10 µF capacitor) across the relay coil dampens transient oscillations during button press transitions. When a worker presses a button, the contact engagement is not instantaneous; the button and relay spring systems can oscillate at frequencies of 10–100 Hz, causing the relay to vibrate ("chatter") and produce multiple rapid open-close cycles instead of one clean transition.

The RC network smooths the coil current rise-time from ~1 ms to ~5 ms, preventing the relay armature from bouncing. This ensures the relay transitions once per button press, not multiple times, which could cause unintended machine jerks or create electrical arcing that damages contacts.

Solenoid Supervision and Fault Detection

The Coil Feedback Circuit circuit monitors the relay coil current to detect electrical faults. A Sense Resistor 1 kΩ sense resistor is placed in series with the coil return path. The nominal coil current is 24V ÷ 15Ω = 1.6A, producing 1.6V drop across the sense resistor.

A Op-Amp op-amp with 100× gain amplifies this 1.6V signal to ~160V output (referenced to 5V supply), giving excellent resolution. A Comparator threshold comparator monitors this output:

• Normal operation: Coil current is between 1.28A and 1.92A (±20% tolerance). Comparator output is LOW (relay energized).
• Coil open circuit: No current flows; comparator output goes HIGH, triggering a fault condition.
• Coil short circuit: Excess current (>2A) flows; comparator output goes HIGH, triggering a fault condition.

Faults are logged and can trigger an external alarm or inhibit machine restart until a technician clears the fault code. This protects against coil burnout and unintended relay behavior.

Enclosure and Installation

The Button Console Control Enclosure is a NEMA 4 galvanized steel box (300 × 400 × 150 mm). The Button Plate front panel has two 60 mm holes for the mushroom buttons, clearly labeled with ISO 13850 two-hand control symbols. The internal Internal Rail DIN rail mounts the logic Logic Relay, Feedback PCB, and Terminal Block terminal block.

Control wiring runs from the two button switches through NC contact pairs into one side of the relay input (series connection). The other side of the relay input is jumpered to complete the logic. SPDT relay output contacts are wired to the machine's emergency stop circuit: one contact pair cuts enable power to servos, the other might open a solenoid vent line to dump hydraulic pressure.

A cable entry gland on the enclosure back allows input power (24V DC) and output signals (machine enable, fault alarm) to be routed via shielded cable to the rest of the control system. Padlock provisions on the cable entry prevent workers from tampering with wiring.

Regulatory Context

OSHA 29 CFR 1910.217(h)(1) requires two-hand controls for power press safeguarding. The standard mandates that button guards prevent single-hand activation and that the button response time is <500 ms for the "release and stop" sequence. ISO 13849-1 classifies two-hand controls as Category 3 PLd equivalent, suitable for machinery with moderate hazard risk.

CSA Z434 (Industrial Power Presses) and ANSI B11.1 (C-Frame Power Presses) specify two-hand control as one of several permissible guarding approaches, along with guards, gates, and light curtains. In practice, light curtains are now preferred for modern equipment because they allow faster production cycles, but two-hand controls remain the most cost-effective retrofit solution for older machinery.

Maintenance and Testing

Two-hand control stations require periodic functional testing. A qualified technician must verify:

• Both buttons actuate smoothly without mechanical binding.
• Relay coil continuity and response time (<25 ms pull-in observed via test light).
• Contact closure: both buttons must be pressed simultaneously before the relay energizes.
• Anti-tie-down: tying down one button should not allow single-button operation.

Annual maintenance includes button spring replacement (if deformation is noted) and relay contact cleaning or replacement if arcing has blackened the contact surfaces. The Feedback PCB is typically not field-serviceable; the entire control console is exchanged if electronics fail.

Control station specifications are fixed at manufacturing; they cannot be reconfigured in the field to disable the two-hand requirement without disassembling the console and bypassing wiring (which violates safety regulations).