Two-hand control devices, defined under ISO 13851:2002, require the operator to actuate two input devices within 0.5 s of each other to release a single machine cycle, providing hand-presence protection only during the dangerous motion [S1]. Physical safety fences, specified under ISO 14120 / EN 953 for construction and ISO 13849-1 for the control system linked to the guard interlock, create a fixed or movable barrier that physically prevents access to the hazard zone [S1].
The two architectures answer different questions: the fence says "no operator body can be inside the danger zone while the machine is running," while two-hand control says "the operator's hands are demonstrably outside the hazard point at the moment the cycle starts." The standard scope for two-hand control is Type I (general) and Type II (special) devices that act as trip devices, and the standard applies to machinery where a single hazardous motion can be safely stopped mid-cycle, such as mechanical power presses, blanking stations, and small riveting cells [S1][S3].
Functional Architecture: How ISO 13851 Forces the Hand-Presence Logic
ISO 13851:2002 specifies a synchronous actuation requirement: both control devices must be actuated within 0.5 s, the output must be released if either input is released (anti-repeat), and a re-initiation sequence must occur before the next cycle [S1]. This is encoded in JIS B9712:2006, the Japanese adoption of the same standard, which uses the same Type I / Type III classifications and the same 0.5 s synchronism window for mechanical-power-press retrofit projects [S3].
The standard also defines two device types: Type I (general two-hand control) requires a Category 3 or 4 control system per ISO 13849-1, dual-channel inputs, and a 0.5 s synchronism check. Type III requires that the output be re-initiated only after both devices are released, preventing a sustained press from re-cycling the press. A typical modular relay implementation such as the Banner AT-FM-10K Duo-Touch module (24 V AC/DC, 2 N/O output contacts) is a drop-in logic block that performs the synchronism check, anti-repeat, and EDM (external device monitoring) feedback on the contactors it drives, and it is usually mounted in the same panel as the press contactors [S2].
For a clearer picture of how a two-hand control module sits inside a wider safety chain, see the field guide on Two-Hand Control vs Safety Relay: Spec Boundaries and Module Selection, which maps the relay-level spec boundaries and EDM wiring patterns a process engineer must get right.
Physical Separation: What a Safety Fence Actually Delivers
A safety fence is a perimeter guard plus interlocked gate. ISO 14120 (general safety-of-machinery guards) sets the mechanical construction rules: minimum height 1400 mm for floor-level hazard zones, mesh aperture ≤ 40 mm where fingers can reach through, top of fence ≥ 1800 mm where reach-over is possible, and 100 mm floor clearance to prevent reach-under [S1]. The control side is governed by ISO 13849-1, which assigns a Performance Level (PL a to PL e) and a Category (B, 1, 2, 3, 4) to the interlock switch, gate-hinge switch, or electronic-coded sensor chain.
Unlike two-hand control, the fence does not need to release mid-cycle: the interlock can be a guard-locking type (per ISO 14119) that holds the gate shut while the hazard persists, for example until a hydraulic press has bottomed and the tool has retracted. A coded magnetic interlock on a sliding gate gives PL d / Cat 3 in typical factory wiring, and the higher PL e / Cat 4 is reached with two channels plus a monitored contactor downstream [S1].
For the mechanical and electrical spec bands that distinguish a guard-locking switch from a process interlock, the access control entry on the encyclopedia side covers the same PL / Cat vocabulary from the door-and-gate viewpoint.
Selection Criteria: Fence, Two-Hand Control, or Both
The correct first question is: can the operator stay outside the hazard zone during the entire cycle, or must the hands enter the danger point to perform the work? If hands must enter, two-hand control or a light curtain (Type 4 ESPE, IEC 61496-1) is required; the fence is then only a secondary perimeter to prevent reach-around and walking into the cell. If hands stay outside, the fence with interlocked gates is sufficient and two-hand control adds no value. [S1]
For mixed operations such as a small riveting cell, a typical three-tier spec looks like this: the cell perimeter is a 1400 mm welded-mesh fence with one sliding gate on a guard-locking coded magnetic switch (PL d / Cat 3, ISO 13849-1), the operator work point is protected by an ISO 13851 Type IIIC two-hand control station wired to a Banner-class safety relay with 0.5 s synchronism and anti-repeat, and the press contactor is monitored by EDM back to that relay. Operator reaches through a small aperture in the fence to the work point; the two-hand station sits 600–700 mm above floor at the outside of the fence. This combination is what most automotive-tier Tier 1 suppliers run in their mechanical-press sub-cells.
The mechanics of the interlocked-gate half of that cell is covered in the safety fence reference, which gives the same ISO 14120 height, aperture, and reach-under figures in the catalog-facing format.
Failure Modes and Common Spec Traps
Two-hand control fails in a few characteristic ways: a stuck or bypassed pushbutton, a mechanical defeat that holds one button down (often with tape, wood, or a magnetic puck), a synchronism window set too wide, or contactors whose EDM contact is not wired back, so the relay never sees a welded contactor. ISO 13851 mitigates these by mandating a re-initiation (anti-repeat) sequence after release, and a synchronism window that defaults to 0.5 s on most off-the-shelf modules including the AT-FM-10K [S1][S2].
Safety fences fail differently: a gate that is interlocked but not guard-locked will allow a slow operator to step inside before the machine has actually stopped, a mesh with apertures over 40 mm lets fingers through, and a fence with the wrong PL on the interlock switch passes the visual audit but fails the functional safety audit. The most expensive recurring defect is a Category 1 switch wired to a Category 3 application; the design passes the paperwork review but trips on a single welded contact.
For the wiring and control-cabling side of the gate interlock, the control cable reference gives the conductor-count and shielding conventions typical of PL d / Cat 3 gate chains.
Standards Reference and Compliance Map
The two architectures sit in different standards trees. Two-hand control is a single-standard discipline: ISO 13851:2002 (international), EN 574 (European adoption), and JIS B9712:2006 (Japanese adoption), all defining the same Type I / Type II / Type III behaviour, the same 0.5 s synchronism window, and the same anti-repeat requirement [S1][S3]. The control system behind it, including the safety relay or safety PLC, falls under ISO 13849-1 for Performance Level / Category, or under IEC 62061 for SIL.
The fence is a multi-standard build: ISO 14120 / EN 953 for mechanical construction (heights, apertures, distances from hazard), ISO 14119 for interlocking devices and guard-locking, and ISO 13849-1 (PL / Cat) for the electrical control chain. The two-hand station itself is referenced in ISO 13851 as a trip device, not a guard, so the two standards are complementary, not competing: the fence defines the perimeter, the two-hand station defines the protective device at the operator interface, and the risk assessment under ISO 12100 stitches them together.
The complementary protective-device pairing is what the two-hand control entry on the encyclopedia side covers at a glance, with the same Type I / Type III and 0.5 s synchronism figures pulled into the catalog view.
Verdict: Which to Specify, and When to Specify Both
Specify a safety fence with interlocked gates when the operator never needs to be inside the work envelope: robotic cells, CNC tending stations, conveyor transfer lines, palletising cells, and any large automated work cell where reach-in is not part of the cycle. Pair the fence with a guard-locking interlock (ISO 14119) on every access point, and prove the chain at PL d / Cat 3 minimum. [S2]
Specify a two-hand control station when the operator's hands must enter the danger point to feed, hold, or remove a part, and the hazardous motion is short enough that the machine can be stopped mid-stroke: small mechanical presses, riveting machines, clinching stations, small hydraulic blanking presses, hand-fed cut-off saws with brake. Use a Type IIIC station per ISO 13851, drive it from a dedicated safety relay with EDM, and never bridge the synchronism check. Specify both, in series, when the operator reaches through a fence aperture to a work point that also requires hand presence: the fence is the perimeter, the two-hand station is the trip device, and the two should be wired to different input channels of the same safety controller, not stacked on a single relay. The 24 V AC/DC, 2 N/O contact pattern on a module such as the AT-FM-10K is the common denominator for the two-hand half of that chain [S2].
Trackable next node: the next revision of ISO 13851 has been on the ISO work programme for years, and any change to the synchronism window (still 0.5 s in the 2002 edition) or to the Type I / Type III classification would force a re-spec of every Banner-class module on the shop floor [S1]. Watch the ISO/TC 199 committee drafts for the first CD after 2025-Q4; the JIS B9712:2006 mirror will lag by roughly 12–18 months on the same change [S3].