
Functional Safety
- 83 -
16
Functional Safety
16.1
Safety Parameters
Table 26: Required and achieved SIL
Safety
function
Norm
reference
Required SIL
due to
EN81 (or
due to risk
analysis,
refer to
comments)
Achieved
SIL due
to PFHD
and SFF
PFHD
[FIT]
(acc. to
FMEDA)
Percentage
of required
SIL
Comments
Overspeed
(pre-
tipping)
EN81-20 §
5.6.2.2.1.6
a.)
SIL2
SIL3
40 FIT
4 %
Overspeed
(final trip-
ping)
EN81-20
§5.6.2.2.1.1 a.)
SIL3
SIL3
28 FIT
28 %
Overspeed
Inspection
(pre-
tripping)
EN81-20
§5.12.1.5.2.1 e.)
No SIL
SIL3
40 FIT
n.a.
This function is named in the EN81
but without any demand for a SIL
Overspeed
Inspection
(final-
tripping)
Not named in EN81
SIL 3
SIL3
29 FIT
29 %
Not named in the EN81 secures
braking distance for pre-triggered
stopping system, therefore SIL3
Overspeed
Teach
(pre-
tipping)
Not named in EN81
SIL3
SIL3
40 FIT
40 %
The safety function “over-speed teach
(pre-tripping)” is a substitute for ETSL,
which cannot be carried out in teach
mode. Because ETSL is SIL 3
according to EN81-20, Annex A,
“overspeed teach (pre- tripping)” is
also SIL3.
Overspeed
Teach
(final-
tipping)
Not named in EN81
No SIL
SIL3
28FIT
n. a.
Cares for additional safety before
and during commissioning
Final limit
switches
EN81-20
§5.12.2.3.1 b.)
SIL1
SIL3
40 FIT
0.40 %
Inspection
limit
switches
EN81-21 §5.5.3.4,/
§ 5.7.3.4
(under constraints)
SIL2
SIL3
41 FIT
4.1%
Check on
correct
travel
direction in
Inspection
Not named in EN81
SIL2
SIL3
41 FIT
4.1%
In order to complete safety of “In-
spection limit switches”, therefore this
is SIL2
Pre-
triggered
stopping
system
EN 81-21 §5.5.2.2 /
§5.7.2.2
(under constraints)
SIL3
SIL3
29 FIT
29 %
When the positions where the pre-
triggered stopping system trips are
defined, a certain stopping distance
must be taken. The stopping distance
depends directly from the velocity.
Therefore, a worst-case value for the
velocity must be assumed. The safety
function “over-speed inspection (final
tripping)” supervises that this worst-
case velocity is not exceeded. There-
fore, it is the same SIL like pre-
triggered stopping system: SIL 3.
ETSL
EN81-20 §5.12.1.3
SIL3
SIL3
47
FIT/28FIT
47 % /
28 %
In case the eSGC-actuator is enabled
and connected with a suitable brak-
Summary of Contents for LIMAX33 CP-00 SERIES
Page 91: ...91 Notes...