Kill switch

An emergency switch in Japan

On railways,[1] an emergency stop is a full application of the brakes in order to bring a train to a stop as quickly as possible.[2] This occurs either by a manual emergency stop activation, such as a button being pushed on the train to start the emergency stop, or on some trains automatically, when the train has passed a red signal or the driver has failed to respond to warnings to check that they are still alert, which is known as a dead man's switch. A similar mechanism is the watchdog timer.

In large ships, an emergency stop button pulls the countershaft for the fuel pumps to the stop position, cutting off the fuel supply and stopping the engines. With a controllable-pitch propeller, the stop button may declutch the engine from the propeller.

NASCAR requires all their stock cars to be equipped with a steering wheel-mounted kill switch, in case the accelerator pedal sticks and the driver needs to shut down the engine.

A related concept is the dead man's switch, where the operator must be holding a button or lever any time the vehicle is operating. A common example of this is the kill switches used by boaters and jetskiers wherein a cord connects the kill switch to the operator (usually by the operator's life jacket or clothing), and if the operator is thrown overboard in an accident, the cord will pull the switch and immediately shut down the vessel's engine. This prevents it from becoming a runaway vessel that could impose a danger to other vessels or swimmers at sea, and allows the operator to swim back to the vessel and re-board it without the risk of being injured by the boat's propeller. A similar device is featured on most lawnmowers: a lever on the handle either disables the ignition system and applies a brake to the flywheel (on a gasoline lawnmower), or cuts the power to the motor (on an electric lawnmower), as long as it is not held down.

Monster Truck Racing Association requires all of their monster trucks to be equipped with kill switches (either remote or in cab), in case the monster truck loses control and the driver needs to shut off the engine. Monster trucks' kill switches are tested before races.

Kill switches are also used on land vehicles as an anti-theft system and as an emergency power off. Such devices are often placed in bait cars and configured so that observing police can trigger the switch remotely.[3] This same idea can make the stolen object, such as a smartphone, useless to both the thief and whoever buys it, yet allow the true owner to reactivate it when/if it is recovered.[4]

The arrows indicate that the stop button must be turned to reset the switch before the equipment can be restarted.

On large industrial machines, an emergency stop button is typically located on the panel, and possibly in several other areas of the machine. Often, an emergency stop is made wireless using a remote control. This provides a rapid means to disconnect the energy source of the device to protect workers.[14] For fail-safe operation, the emergency stop button is a normally closed switch, which ensures that a broken wire will not prevent it from being activated, but may accidentally activate the emergency stop.

In the European Union, most types of machinery are required to be equipped with an emergency stop according to the Directive 2006/42/EC. Exceptions apply for machinery in which an emergency stop would not lessen the risk as well as for portable hand-held/hand-guided machinery.

Emergency stop functions are frequently used on machine tools, including equipment like wood and metal sawing machines, grinding machines, drilling machines, milling machines and machining centres and lathes. The emergency stop safety function, and general requirements for emergency stop devices are set out in ISO 13850. [15] Machine specific (type-C) standards often include specific requirements for the emergency stop functions, but in the absence of a relevant type-C standard, the risk assessment should be used to determine whether or not an emergency stop function would be useful in avoiding or limiting harm. The ISO machinery safety standard types are defined in ISO 12100,[16] and this nomenclature is used by other standards development organizations, like ANSI in the USA, and CSA in Canada. [17][18]

Complementary protective measure

An emergency stop button with a custom-made plastic molly guard to prevent it from being pressed accidentally

A machinery's emergency stop control is considered a complementary protective measure[16] because it is intended to complement the primary safeguarding measures like fixed guards, movable interlocked guards or safeguarding devices. The primary safeguarding measures prevent injury automatically, either by enforcing distance between a hazard and a person, or by eliminating the hazard by stopping hazardous motion or switching off a source of hazardous energy.

By contrast, emergency stop requires a deliberate action on the part of a person who must first recognize that some hazardous condition is about to arise or is arising, and who then must activate the emergency stop function by pressing the emergency stop button or activating another emergency stop device such as a pull-cord switch.

A kill switch is also used for gasoline pumps or any other device that pumps large amounts of explosive or flammable chemicals. There is commonly a single kill switch for all pumps at a pumping station.

Elevators[19][20]often have a red two-way button on the control panel which is either marked "Emergency Stop" or "Run/Stop". Normally, the button is in the "up" or unpushed position, allowing the elevator to "run" in normal service. When the button is pushed, the elevator comes to an immediate stop. When the button is pulled back out, it resumes normal service, thus the reason for the use of the phrase "Run/Stop". Escalators will typically have a key-operated control that will turn the escalator off, or change its direction to up or down. Next to the key switch will be a red "Emergency Stop" button, which is used in the event of equipment failure, or where there is a potential for injury, such as when someone's shoe gets stuck in the "comb" at the top or bottom of the escalator and there is a risk of serious injury. The key switch is used to return the escalator to service after it has been stopped.[21][22]

Treadmills[23] often use a safety key with one end magnetically attached to the machine and the other end clipped to the user's waist. If the safety key is pulled out, such as in the event of a fall, the treadmill stops immediately. In other cases, some other treadmills have a more traditional kill switch, often mounted towards the rear of one of the hand railings.[24][25]

The emergency stop on an amusement ride is similar to that on industrial equipment. Typically brakes on a ride are designed to be disengaged when power is applied; disconnecting power will cause all brakes to engage. Most amusement rides have a computer that can, similar to the rail example provided above, engage the emergency stop when such a ride is determined to be out of operating specification, or an accident involving a passenger or ride employee has happened.[26]

It is thought that some electronic chips used in equipment, particularly military, have a secret "kill" function that disables the equipment. It has been reported that French and Israeli electronic warfare units have used kill switches to disable opponents' military systems.[27] And systems have been infected with malware specifically designed to damage them.[28]

John Deere tractors have been criticised for it being impossible for owners to service or repair them; only John Deere has access to computer code required for this and to accept non-John-Deere replacement parts. Vital equipment from other manufacturers such as critical medical equipment has similar restrictions. Remote locking by the manufacturer may also be possible.[29] It was reported that during the 2022 Russian invasion of Ukraine Russian troops stole Ukrainian farm equipment, but that the dealers who owned the equipment locked it remotely.[30]

Range safety systems can automatically destroy errant vehicles in-flight. Range-safety officers may also manually destroy vehicles; this method was used to destruct errant solid rocket boosters in the Space Shuttle Challenger disaster.

• Hardware Trojan – Malware embedded in hardware; harder to detect and fix than software vulnerabilities
• Internet kill switch – Single shut off mechanism for all Internet traffic
• Security switch – Physical switch to disable unwanted access or operation by breaking signal or power,
• Blue light station – Emergency telephone and shut-off switch
• USBKill – Software to protect from unknown USB devices
• SawStop – American table saw manufacturer a fast kill switch for table saws triggered by electrical conductivity of user's finger.
• Battleshort – Emergency override of safety features to complete a mission, even if damage or injury will occur; the opposite of a kill switch