
BCU 460, BCU 465 · Edition 11.19
137
Safety information in accordance with EN 61508-2
20 Safety information in accordance with
EN 61508-2
20 .1 General
Scope of application
As set out in “Industrial thermoprocessing equipment –
Part 2: Safety requirements for combustion and fuel
handling systems” (EN 746-2) when used with fuels
and oxidants.
The BCU 4 is suitable for continuous operation (pursu-
ant to EN 298:2012-12, Section 3.126) and for inter-
mittent operation (pursuant to EN 298:2012-11, Sec-
tion 3.127).
Type of action
The automatic action corresponds to Type 2 pursuant
to EN 60730-1.
Behaviour under fault conditions
Switching off the safety-relevant output signals:
The output signals are switched off electronically in
accordance with the criteria of automatic action type
B.V.AC.AD.AF.AG.AH (pursuant to EN 60730-2-5:2015,
Section 6.4.3.).
Maximum reaction time in the event of a flame failure:
This corresponds to the safety time during operation
and can be parameterized to between 1 and 4 s.
Software class:
Corresponds to software class C which operates in a
similar double-channel architecture with comparison.
20 .2 Interfaces
Electrical wiring
Type of wiring:
Attachment type X to EN 60730-1.
Grounding: via PE wire connection.
Internal voltages are neither SELV nor PELV. Floating
contacts meet the requirements for SELV.
20 .3 Communication
Safety over EtherCAT® technology (FSoE, FailSafe over
EtherCAT) is used for K-SafetyLink communication.
Safety over EtherCAT® is a registered trademark and
patented technology licensed by Beckhoff Automation
GmbH, Germany.
The K-SafetyLink technology complies with SIL 3 in ac-
cordance with EN 61508 and is standardized pursuant
to IEC 61784-3-12 and ETG 5100.
Safety over EtherCAT® uses the fail-safe principle which
means that a safe state is restored in the case of an
inactive signal. In the case of communication errors, all
signals are interpreted as inactive.
Safety-relevant data are transmitted on the basis of the
black channel principle.