Lesson 16/1794%
MODULE 16

Industry Standards and Certifications

The regulatory landscape governing isolation components and end products: component standards (UL 1577; IEC 60747-5-5 / VDE 0884-5 for optocouplers; IEC 60747-17 / VDE 0884-17 for digital isolators) versus end-product standards (IEC 61010, IEC 60601-1, IEC 62368-1), automotive functional safety (ISO 26262), and how to build a coherent certification argument.

Learning Objectives

After completing this module, you will be able to:

Distinguish component-level from end-product standards
Interpret UL 1577 and IEC 60747-5-5 (VDE 0884-5) certificates, and tell them apart from IEC 60747-17 (VDE 0884-17)
Map end-product insulation requirements to component specs
Address automotive (ISO 26262/AEC-Q) requirements
Assemble certification evidence for safety files
Where this fits. This module maps the standards landscape so you can ask vendors for the right certificates, read them correctly and build your own certification argument. It uses the ratings from Module 6 and Module 7, the spacing rules from Module 11 and the tests from Module 13. Accuracy note: the optocoupler component standard is IEC 60747-5-5 (DIN EN 60747-5-5 / VDE 0884-5). IEC 60747-17 (VDE 0884-17) covers magnetic and capacitive couplers (digital isolators). Standards are summarised and paraphrased here; always work from the current edition.
Illustrations and animations are original teaching drawings, not to scale. Values marked representative are typical of common parts; always confirm against the current datasheet or standard you design to.

Two kinds of standard meet at the isolation barrier. Component standards certify the isolator: the vendor pays for the tests and you receive a certificate. End-product standards certify your equipment: they define which barriers you need, what working voltage and insulation class each barrier has, and how the lab tests the finished product.

Three layers: end-product standards at the top (IEC 62368-1, 61010-1, 60601-1, 61800-5-1, 62109-1, 60335-1), IEC 60664-1 insulation coordination in the middle, and component standards UL 1577, IEC 60747-5-5 and IEC 60747-17 at the bottom, with arrows showing evidence flowing upward
Figure 1. How the standards fit together.
Why a certified part isn’t enough

The certificate covers the part as tested: its own creepage, its internal barrier. It knows nothing about your footprint, slots, coating, pollution degree, altitude, other parts bridging the barrier, or whether you used it at a higher voltage than rated.

What the component certificate buys you

End-product standards generally accept a component certified to the right standard and class as evidence for its internal insulation, so the lab does not have to decap it or measure DTI. That can save months.

Who decides the requirement

Your end-product standard, applied through its insulation-coordination rules (based on IEC 60664-1): working voltage, overvoltage category, pollution degree, material group and altitude.

Markets add standards

CB scheme (IEC) for international certification; UL/CSA for North America; CQC for China; national deviations. Plan the certificate list per market early.

Interactive: Standards Navigator

Pick your product and supply. The navigator lists the usual standards and turns the supply into the coupler ratings to ask for. Impulse values follow the widely published IEC 60664-1 pattern by nominal voltage and overvoltage category, with reinforced insulation one step higher. They are representative — confirm with your end-product standard’s tables.

Typical barrier requirement–
Peak working voltage–
Rated impulse voltage (representative)–
Ask the coupler vendor for–
–

StandardRole

UL 1577 (“Optical Isolators”) is the North-American component standard, and many digital isolators are also recognised under it. It is a withstand standard: the part must survive a stated isolation voltage.

VISO

The rated withstand voltage, e.g. 5000 Vrms for 1 minute (type test). Common ratings are 2500, 3750, 5000 and 5700 Vrms.

Production test

Every part is tested at a higher voltage for a short time, typically 1.2 × VISO for 1 s. The datasheet states the exact condition.

Recognition, not listing

Parts carry UL Recognized Component status under a file number. Your product still needs its own listing or certification.

What it doesn’t say

No working voltage, no PD test, no lifetime. A 5 kVrms VISO does not mean you may run 5 kV continuously, or even 1 kV: that is what VIORM/VIOWM in IEC 60747-5-5 are for.

Worked example — VISO vs the product Hi-Pot

A 230 V product needs a reinforced Hi-Pot of (representative) 3000 Vrms for 60 s at type test and 1 s in production.

  1. A coupler with VISO = 5000 Vrms passes the 3000 Vrms test with 1.67× margin.
  2. A 2500 Vrms part would be over-stressed by every production test: the wrong part, regardless of its working-voltage rating.
  3. The working voltage (325 Vpk) must still be checked against VIORM from the IEC 60747-5-5 certificate.

IEC 60747-5-5 (Europe: DIN EN 60747-5-5, VDE 0884-5) is the optocoupler standard that defines working and transient ratings, a 100 % partial-discharge test and safety-limiting values. It is what most end-product standards refer to when they accept an optocoupler as reinforced or basic insulation.

RatingMeaningCompare with
VIORMMaximum repetitive peak isolation voltage (continuous, Vpeak)Peak working voltage: √2 × Vrms, or DC-link maximum
VIOWMMaximum working isolation voltage (Vrms)RMS working voltage used in creepage tables
VIOTMMaximum transient isolation voltage (Vpeak, type-tested ~60 s)Temporary overvoltages and dielectric test levels
VIOSMMaximum surge isolation voltage (1.2/50 µs, Vpeak)Rated impulse voltage for your overvoltage category
VPR / Vpd(m)Partial-discharge test voltage (e.g. ~1.875 × VIORM, 1 s, 100 %; < 5 pC)Evidence of PD-free operation at VIORM
RIOIsolation resistance (at 500 V DC, at 25 °C and at TS)Leakage budget (Module 13)
TS, IS, PSSafety-limiting case temperature, input current and output powerYour worst single-fault conditions
Climatic category, pollution degree, CTITest climate (e.g. 55/110/21), PD for its own creepage, material groupYour environment and board spacing
Voltage-level chart comparing working voltage, V_IORM, the partial-discharge test voltage, V_IOTM, UL 1577 V_ISO peak and V_IOSM surge on one scale for an example reinforced coupler
Figure 2. The voltage family of an example reinforced coupler on one scale (representative values).

Safety-limiting values

In a fault (a shorted driver, a failed resistor), the LED current or output power can rise far above normal. IEC 60747-5-5 requires the vendor to state limits (TS, IS, PS) up to which the insulation remains intact, usually with a derating curve versus temperature. Your design must keep single-fault conditions below them.

Worked example — checking IS

A coupler lists IS = 150 mA (input, representative). The LED is driven from 24 V through 2.2 kΩ.

  1. Normal: (24 − 1.2) / 2200 = 10.4 mA.
  2. Single fault: the series resistor is shorted (or a lower value fitted in error). The current is then limited only by the source: a 24 V rail can deliver amps, far above IS.
  3. Fix: split the resistor into two in series (a single short then leaves 1.1 kΩ → ~21 mA), or add a fuse or current-limited source. Record this in the insulation analysis.

Interactive: Certificate Decoder

A generic example for a fictional wide-body coupler (the “RX-817W”, a variant of the Module 7 teaching part). Click each field to decode it, then test the certificate against your application.

EXAMPLE CERTIFICATE (generic teaching layout — not a real certificate)
Click a field

Each field explains what it means and what to compare it with.

Is this part enough for my application?

Peak working voltage–
–

Digital isolators use very thin barriers (Module 15) whose lifetime depends on the field across them, so they have their own component standard: IEC 60747-17 (DIN EN IEC 60747-17, VDE 0884-17) for magnetic and capacitive couplers. In Germany it followed VDE 0884-10 and then VDE 0884-11, which VDE 0884-17 superseded.

Two cards: IEC 60747-5-5 / VDE 0884-5 for optocouplers with its key ratings, and IEC 60747-17 / VDE 0884-17 for magnetic and capacitive couplers with added lifetime evidence, plus a warning not to list IEC 60747-17 as the optocoupler standard
Figure 3. The two component standards side by side.
AspectIEC 60747-5-5 (optocouplers)IEC 60747-17 (magnetic/capacitive)
DevicesPhotocouplers / optocouplersDigital isolators, isolated gate drivers, isolated amplifiers with magnetic or capacitive barriers
Voltage ratingsVIORM, VIOWM, VIOTM, VIOSMSame family of ratings
Partial discharge100 % PD testPD test as well
LifetimeNot modelled; thick barrierBarrier-life (TDDB-type) evidence at elevated working voltage, stricter for reinforced
SurgeVIOSM testVIOSM test, with higher requirements for reinforced (10 kV-class)
Typical mistakeListed as “IEC 60747-17” in documentationDatasheets still quoting superseded VDE 0884-11 certificates
Design trap — copying the wrong standard into your safety file. Module 1 and many online sources list “IEC 60747-17” for optocouplers. A test lab will ask why an optocoupler certificate cites a digital-isolator standard. For optocouplers, cite IEC 60747-5-5 / VDE 0884-5 (plus UL 1577).
Verify Lifetime margins, failure-rate targets and surge factors in IEC 60747-17 differ between basic and reinforced insulation and between editions. Take them from the vendor’s certificate and lifetime report.

IEC 60664-1 is the basic safety publication behind nearly all end-product insulation rules. You rarely certify to it directly, but its concepts are in every product standard.

Overvoltage category (OVC)

I to IV, from protected electronics to the origin of the installation. It sets the transient (impulse) voltage the clearances must withstand.

Rated impulse voltage

For a 230/400 V system (300 V to earth): about 1.5 / 2.5 / 4 / 6 kV for OVC I–IV. Reinforced insulation is designed for the next step up. (Representative; see the standard’s table.)

Clearance

The shortest distance through air: set by the impulse voltage (and altitude correction above 2000 m).

Creepage

The shortest distance along a surface: set by the rms working voltage, the pollution degree (1–4) and the material group (CTI I–IIIb).

Solid insulation

Through-insulation: must withstand the dielectric test and, for thin layers, meet extra requirements; component standards cover the part’s internal barrier.

Altitude

Clearances need a multiplication factor above 2000 m (e.g. about 1.48 at 5000 m); PV and EV equipment often ship to high sites.

Distances and factors above are widely quoted representative figures. Cite IEC 60664-1 table numbers from the edition you apply rather than this page.

IEC 62368-1 covers ICT and audio/video equipment and has replaced IEC 60950-1 and IEC 60065. It is hazard-based: classify energy sources, then put safeguards between them and people.

Energy source classes

ES1 (safe to touch), ES2 (limited), ES3 (hazardous, e.g. mains). An ES3 source needs basic plus supplementary, or reinforced, safeguards to an ordinary person.

Safeguards

Basic, supplementary, reinforced, plus precautionary and skill safeguards. An optocoupler across the primary-to-ES1 boundary acts as a reinforced safeguard when certified accordingly.

Component route

The standard accepts optocouplers certified to IEC 60747-5-5 (and isolators to IEC 60747-17) for solid insulation, provided the ratings match the working voltage and class.

Electric strength

Test voltages come from tables based on peak working voltage, transient voltage and insulation grade (basic ≈ 1.5 kVrms, reinforced ≈ 3 kVrms for ordinary 230 V mains: representative).

IEC 61010-1 covers electrical equipment for measurement, control and laboratory use: oscilloscopes, power supplies, analysers and much industrial control. Part IEC 61010-2-030 adds requirements for measuring circuits and the familiar measurement categories.

Measurement categories

CAT II (plug-in loads), CAT III (building installation), CAT IV (origin of supply). An isolated measuring input rated “600 V CAT III” must withstand the transients of that environment across every barrier behind it.

Isolated channels

Channel-to-channel and channel-to-earth barriers each get their own rating. Optocouplers or isolated amplifiers in the digital path must match the channel’s class.

Hazardous live

The standard defines limits of voltage, current and energy above which a part is hazardous live; accessible parts must stay below them in normal and single-fault conditions.

IEC 60601-1 is the most demanding common standard for isolation because patients may be connected directly (and may be unable to react). It distinguishes MOOP (means of operator protection) and MOPP (means of patient protection), and it limits leakage currents tightly.

Block diagram of a medical device: mains feeds the power supply; two MOOP protect the operator controls and two MOPP protect the patient applied part; a table lists representative test voltages, creepage and clearance for 1 and 2 MOOP and MOPP
Figure 4. MOOP and MOPP with representative values for ~250 Vrms working voltage.
Applied-part typeTypical usePatient leakage, normal condition (representative)
BBody; not usually conductive contact100 µA
BFFloating applied part (body contact)100 µA
CFDirect cardiac contact10 µA

Representative limits commonly quoted from IEC 60601-1; single-fault limits are higher. Verify against the edition and amendment you certify to.

Design trap — designing medical isolation to IEC 62368-1 levels. Two MOPP for a 230 V product means about 4 kVrms and 8 mm creepage (representative), significantly more than the ~3 kVrms reinforced of ICT equipment. Parts and layouts reused from an ICT design often fail.

IEC 61800-5-1 covers the safety of adjustable-speed drive systems. Optocoupler gate drivers, current-sense isolation and control interfaces all sit on its barriers.

Decisive voltage classes

DVC A (safe to touch, e.g. ≤ 25 V AC / 60 V DC in dry conditions) up to DVC C (mains, DC link). Accessible control circuits (DVC A) need protective separation (double or reinforced) from DVC C circuits.

Gate-drive barriers

Inside the power section, the gate-drive coupler between the controller and a high-side switch may be functional or basic, depending on whether the controller side is accessible. Document it in the insulation diagram.

Working voltage

Use the DC-link maximum (including regenerative braking overvoltage) and switching overshoot for VIORM, not the nominal mains.

Related

IEC 62477-1 for general power-electronic converter systems; IEC 60204-1 for the machine.

Automotive adds qualification and functional-safety expectations on top of electrical safety.

AEC-Q100

Stress-test qualification for integrated circuits (digital isolators, isolated gate-driver ICs). Grades set the ambient range: grade 0 −40…+150 °C, grade 1 −40…+125 °C, grade 2 −40…+105 °C, grade 3 −40…+85 °C.

AEC-Q101 / Q102

Qualification for discrete semiconductors (Q101) and discrete optoelectronics (Q102). Automotive optocouplers are typically qualified to one of these; check the datasheet claim.

ISO 26262

Functional safety for road vehicles. You need failure rates (FIT) and failure-mode distributions for the coupler to calculate hardware metrics, plus diagnostics for its dangerous failure modes (e.g. a stuck output).

FIT data

Vendors provide FIT at stated conditions, or you use handbook models (IEC 61709, SN 29500). 1 FIT = 1 failure per 109 device-hours. Optocoupler LED ageing is a wear-out mechanism, handled by design margin (Module 9) rather than by a constant FIT.

HV isolation

ISO 6469-3 and OEM specifications define HV-to-LV isolation for traction systems, typically reinforced or basic plus supplementary at 400–800 V DC.

Worked example — FIT to failure probability

A BMS has 24 couplers at 15 FIT each (representative, at mission-profile temperature).

  1. Total λ = 24 × 15 = 360 FIT = 360 × 10−9 /h.
  2. Over 8000 operating hours of vehicle life: P ≈ λt = 360 × 10−9 × 8000 = 2.9 × 10−3 (0.29 %) per vehicle.
  3. ISO 26262 then asks which fraction of those failures is dangerous and detected. A stuck-HIGH fault in a cell-voltage alarm path needs a diagnostic (e.g. periodic test pulse).

Application-specific standards refine the generic rules for particular equipment. The ones optocoupler designers meet most often:

StandardScopeIsolation relevance
IEC 61131-2Programmable controllers: equipment requirements and testsDigital input types 1/2/3 (switching thresholds and currents, Module 10), immunity levels; safety via IEC 61010-2-201
IEC 61851 (-1, -23)Electric-vehicle conductive charging systemsIsolation between mains/DC output and control pilot, communication and user interface; insulation monitoring for DC charging
IEC 62109-1 / -2Safety of power converters for PV systemsHigh DC working voltages (up to 1000–1500 V), altitude, OVC of the PV array; isolation of comms and user interfaces
IEC 60335-1Household appliancesClass I/II construction; functional vs protective insulation of controls
IEC 60730-1Automatic electrical controlsControls with isolated sensors and triac outputs (MOC30xx designs)

A certification body wants to see a coherent argument: every barrier identified, its required class and rating derived, and evidence that each crossing component and spacing meets it. Build it as you design, not the week before the lab visit.

Animated six-step flow: requirements, insulation diagram, barrier table, component evidence, tests and safety file, highlighting each step in turn
Figure 5 (animation). Steps of the certification argument.
Insulation diagram of a class II power adapter: mains, primary circuits, a reinforced barrier crossed by transformer, optocoupler and Y-cap, and secondary SELV; with a barrier-table excerpt
Figure 6. An insulation diagram and barrier-table entry.
BarrierBetweenClassWorking voltageCrossing partsSpacing required / achievedEvidence
R1Primary ↔ SELVReinforced340 Vpk / 250 VrmsT1, U3 (opto), C12 (Y1)creepage per table / 8.2 mmU3: UL 1577 + IEC 60747-5-5 cert; T1 report; C12 Y1 cert; Hi-Pot report
B1Primary ↔ PE chassisBasic250 VrmsC10, C11 (Y2)per table / 4.1 mmHi-Pot report; Y2 certs

Interactive: Insulation-Diagram Builder

A class I industrial controller (230 V mains, earthed chassis, 24 V field I/O, a front-panel USB port and a relay output). Label each barrier F (functional), B (basic), S (supplementary) or R (reinforced), then check. Feedback gives the required rating for each.

Drag a label onto a barrier, or click a label then click a barrier.
Mains 230 V (primary)
Earthed metal chassis
Mains 230 V (primary)
Logic, display, USB (SELV)
24 V field I/O (SELV)
Logic (SELV)
Mains 230 V (primary)
Unearthed metal knob
Relay contacts (230 V load)
Logic (SELV)
Score–
–
    Evidence file contents

    Insulation diagram · barrier table · component certificates (UL, IEC 60747-5-5/-17, Y-caps, transformers, relays) · PCB spacing measurements · test reports · critical-components list with approved alternates.

    Critical-components list

    Every part crossing a barrier is “safety critical”: its manufacturer and part number are listed in the report. Changing it later needs the certifier’s approval.

    Change control

    A new coupler source, a layout change near the barrier or a different coating reopens the argument. Put a check in your ECO process.

    Two layers

    Component standards certify the isolator; end-product standards certify your product and set the requirement.

    UL 1577

    Withstand VISO for 1 min (production ~1.2× for 1 s); no working voltage.

    IEC 60747-5-5 (VDE 0884-5)

    The optocoupler standard: VIORM, VIOWM, VIOTM, VIOSM, 100 % PD test, safety-limiting values.

    IEC 60747-17 (VDE 0884-17)

    For magnetic and capacitive couplers; supersedes VDE 0884-11 and adds barrier-lifetime evidence.

    IEC 60664-1

    OVC, pollution degree, material group and altitude drive clearances, creepage and impulse ratings.

    End products

    IEC 62368-1 (replaced 60950-1/60065), 61010-1, 60601-1 (MOOP/MOPP), 61800-5-1 (DVC, protective separation).

    Automotive

    AEC-Q100 for ICs, Q101/Q102 for discretes and optoelectronics; ISO 26262 needs FIT data and diagnostics.

    Argument

    Insulation diagram → barrier table → evidence → tests → change control.

    Design checklist

    Tick items as you review a design. Your ticks are saved in this browser only; use your browser’s print function for a sign-off copy.

    Four parts: multiple choice, true/false, a matching exercise and engineering scenarios. Score 80 % on the multiple choice to pass the module.

    Part A — Multiple Choice

    Question 1 of 10  •  Score: 0/10

    Part B — True or False

    Score: 0/8

    Part C — Match the Term to Its Meaning

    Drag each term onto its definition, or click a term and then click a definition.

    Placed: 0/6

    Part D — Engineering Scenarios

    Scenario 1 — The wrong certificate
    A design review document lists “Optocoupler U4: certified to IEC 60747-17” for a PC817-class part used as reinforced insulation in a 230 V product.
    Analysis. IEC 60747-17 covers magnetic and capacitive couplers. Obtain the vendor’s IEC 60747-5-5 / VDE 0884-5 certificate and check it lists reinforced insulation with VIORM ≥ 325 Vpk (plus margin), and UL 1577 VISO above the product Hi-Pot. Many standard-body PC817 variants are certified for basic insulation only, or not to 60747-5-5 at all; wide-lead or specific certified variants may be needed. Correct the document before the lab sees it.
    Scenario 2 — Solar at altitude
    A 1000 V DC PV inverter will be installed at 3500 m. The gate-drive coupler between the DC link and the grounded control board has VIORM = 1140 Vpk and 8 mm creepage/clearance.
    Analysis. VIORM 1140 V ≥ 1000 V DC plus ripple and overshoot? Only if the maximum DC (open-circuit at cold temperature, often ~1000 V by design) plus switching overshoot stays below 1140 V: check measured overshoot. Clearance must be multiplied by the altitude factor ((≈ 1.29 at 3500 m, representative)asymp; 1.2 at 3500 m, interpolated from the IEC 60664-1 altitude table: 1.14 at 3000 m, 1.29 at 4000 m; representative), so an 8 mm package clearance may fall short of a reinforced requirement for a high impulse voltage. Consider a higher-rated part, a PCB slot plus potting, or two barriers. Verify with IEC 62109-1 and IEC 60664-1 tables.
    Scenario 3 — Medical adapter reuse
    A team reuses a certified ICT power-supply design (IEC 62368-1, reinforced: 3 kVrms, 6.4 mm creepage) for a patient-connected BF monitor.
    Analysis. Patient protection needs 2 MOPP: representative 4 kVrms, 8 mm creepage and 5 mm clearance at 250 V, plus a patient leakage limit of ~100 µA (BF). The optocoupler must have VISO ≥ 4 kVrms with margin and adequate creepage (wide-lead package), and Y-capacitance across the patient barrier must be minimised. Either redesign the supply to 60601-1 or buy a medical-certified supply and add 2 MOPP isolation for the patient interface.

    Additional Resources

    Component standards

    UL 1577 (Optical Isolators) • IEC 60747-5-5 / DIN EN 60747-5-5 (VDE 0884-5) • IEC 60747-17 / DIN EN IEC 60747-17 (VDE 0884-17) • AEC-Q100, AEC-Q101, AEC-Q102 (Automotive Electronics Council).

    End-product and basic standards

    IEC 60664-1 • IEC 62368-1 • IEC 61010-1 and IEC 61010-2-030 • IEC 60601-1 • IEC 61800-5-1 • IEC 62477-1 • IEC 61131-2 • IEC 61851-1/-23 • IEC 62109-1/-2 • ISO 26262 • ISO 6469-3.

    Reliability data

    IEC 61709 (reference conditions for failure rates) • Siemens SN 29500 • vendor FIT and reliability reports.