background image

Ch A p TEr  1

Introduction

The purpose of this safety manual is to provide information necessary to design, install, verify, and 
maintain a Safety Instrumented Function (SIF) utilizing the LLT100. This manual provides the necessary 
requirements for meeting the IEC 61508 functional safety standards. 

This chapter defines terms, abbreviations and acronyms used in this document. It also exposes 
reference documents and how to get product support.

Terms and abbreviations

Term

Meaning

Basic Safety

The equipment must be designed and manufactured such that it protects against risk of damage 
to persons by electrical shock and other hazards and against resulting fire and explosion. The 
protection must be effective under all conditions of the nominal operation and under single fault 
condition.

Continuous Mode

Mode where the safety function retains the EUC in a safe state as part of normal operation.

Fail Annunciation 
Detected

Failure that does not cause a false trip or prevent safety function but does cause loss of an 
automatic diagnostic or false diagnostic indication.

Fail Annunciation 
Undetected

Failure that does not cause a false trip or prevent the safety function but does cause loss of an 
automatic diagnostic and is not detected by another diagnostic.

Fail Dangerous

Failure that does not respond to a demand from the process (i.e. being unable to go to the 
defined fail-safe state).

Fail Dangerous 
Detected

Failure that is dangerous but is detected by automatic stroke testing.

Fail Dangerous 
Undetected

Failure that is dangerous and that is not being diagnosed by automatic stroke testing.

Fail No Effect

Failure of a component that is part of the safety function but that has no effect on the safety 
function. 

Fail-Safe State

State where the output current is ≤3.6 mA (fail low) or ≥21 mA (fail high)

Fail Safe

Failure that causes the current output to go to the defined fail-safe state without a demand from 
the process.

Functional Safety

The ability of a system to carry out the actions necessary to achieve or to maintain a defined safe 
state for the equipment under control of the system.

high Demand Mode

Mode, where the frequency of demands for operation made on a safety related system is more 
than one per year.

Low Demand Mode

Mode, where the frequency of demands for operation made on a safety related system is not 
more than one per year.

Multidrop

Multidrop Mode. In Multidrop Mode, multiple devices are connected in parallel to a single 
wire pair. The analog current signal simply serves to supply power to the devices in two-wire 
technology with a fixed current.

Summary of Contents for LLT100

Page 1: ...LLT SIL FUNCTIONAL SAFET Y GUIDE LLT100 Laser level transmitter...

Page 2: ...in this document is current and accurate However no guarantee is given or implied that the document is error free or that the information is accurate ABB makes no representations or warranties with re...

Page 3: ...ilities 15 Systematic integrity 15 Random integrity 15 Safety parameters 15 General requirements 17 4 Installation and commissioning Installation 19 Physical location and placement 19 Electrical conne...

Page 4: ...Page intentionally left blank...

Page 5: ...ss of an automatic diagnostic and is not detected by another diagnostic Fail Dangerous Failure that does not respond to a demand from the process i e being unable to go to the defined fail safe state...

Page 6: ...r HFT Hardware Fault Tolerance Ability of a functional unit hardware to continue to perform a required function when faults or errors are prevailing HMI Human Machine Interface In this case the HMI is...

Page 7: ...ev D Operating Instruction http new abb com products measurement products level laser level transmitters llt100 AD2 DS_LLT100 EN_Rev C Datasheet http new abb com products measurement products level la...

Page 8: ...Page intentionally left blank...

Page 9: ...re and high temperature applications Ordering specifications are described in the LLT100 data sheet AD2 Refer to this data sheet to get exact measuring range operating temperature and accuracy specifi...

Page 10: ...to date revision in this table Safety Release Number Release Date Software Version FPGA Version Release Notes 1 15 June 2018 1 01 03 1 01 03 Initial safety version Restriction for combination of vesse...

Page 11: ...0 can be performed directly on its HMI or with HART communication protocol through a computer or handheld terminal The LLT100 connects to the user logic device to control one or multiple actuators for...

Page 12: ...2 of span 2 of 16 mA The safe state output current can be configured to be 3 6 mA low alarm or 21 0 mA high alarm with the exception of CPU faults where the current output is in low alarm mode 3 6 mA...

Page 13: ...en 10 s and 20 s due to internal power management constraints If a CPU fault occurs at startup during the instrument self test the current output is in low alarm mode 3 6 mA Power Failure Alarm Behavi...

Page 14: ...All other instrument configurations can be used for a Safety Instrumented Function Behavior for undetected faults If a LLT100 fault occurs and is not detected through its internal diagnostics the saf...

Page 15: ...ecific failure rates of all products included in the SIF Each subsystem must be checked to ensure compliance with minimum hardware fault tolerance requirements The safety parameters used for SIL calcu...

Page 16: ...3 All safety related parameters are calculated using the Exida Electrical and Mechanical Component Reliability Handbooks 4th edition The Exida environmental profile chosen for this FMEDA was Exida Pr...

Page 17: ...nfirming that the LLT100 nameplate contains the CS label as part of the model identification code An example of such a valid identification code is shown below LLT100 AIAH10L5 E03 CS P901 Personnel pe...

Page 18: ...18 User Guide...

Page 19: ...In solid applications if the laser is installed with an angle the setting level calibration points in AD1 shall be executed to calibrate the actual depth of the monitored vessel with the measured dept...

Page 20: ...ge or configuration of safety parameters the safety function of the device shall be verified see Verify safety function on page 21 After the safety function has been checked device operation must be l...

Page 21: ...A 1 From the Process Alarm menu select Process Alarm Limits Current Out Low Alarm or High Alarm 2 From there edit the value as necessary based on the information above 3 Press OK Verify safety functio...

Page 22: ...Page intentionally left blank...

Page 23: ...be performed by following the steps described below Testing the instrument To check the safety function of the device proceed as follows 1 Verify and record the conditions as they are found prior to c...

Page 24: ...12 Restart the device by powering it down 13 Check the measured distance or ullage against a secondary standard on an installed device which could be a calibrated reference device a mobile calibration...

Page 25: ...instrument is taken out of service Replacing modular components by original ABB spare parts is permitted if personnel was trained by ABB for this purpose Before sending the unit to ABB it must be clea...

Page 26: ...Page intentionally left blank...

Page 27: ...Chapter 6 Document status Change record Version Date Change Description A 18 June 2018 Initial release...

Page 28: ...Architecture Constraints must be verified for each application Safety Function The 4 to 20 mA current output will reflect the calibrated range in level volume or ullage as selected by the user within...

Page 29: ...C001 Certificate Certificat Zertifikat Series LLT100 Lidar Sensors Systematic Capability SC 2 SIL 2 Capable Random Capability Type B Element SIL 2 HFT 0 Route 1H PFH PFDavg and Architecture Constraint...

Page 30: ...Page intentionally left blank...

Page 31: ......

Page 32: ...dify the contents of this document without prior notice With regard to purchase orders the agreed particulars shall prevail ABB does not accept any responsibility whatsoever for potential errors or po...

Reviews: