background image

Functional Safety HiD282*, HiD284*

Planning

20

21

-1

0

15

3.5

Useful Lifetime

Although a constant failure rate is assumed by the probabilistic estimation this only applies 

provided that the useful lifetime of components is not exceeded. Beyond this useful lifetime, 

the result of the probabilistic estimation is meaningless as the probability of failure significantly 

increases with time. The useful lifetime is highly dependent on the component itself 

and its operating conditions 

 temperature in particular. For example, electrolytic capacitors 

can be very sensitive to the operating temperature.
This assumption of a constant failure rate is based on the bathtub curve, which shows 

the typical behavior for electronic components.
Therefore it is obvious that failure calculation is only valid for components that have 

this constant domain and that the validity of the calculation is limited to the useful lifetime 

of each component.
It is assumed that early failures are detected to a huge percentage during the installation 

and therefore the assumption of a constant failure rate during the useful lifetime is valid.
The standard EN/ISO 13849-1:2015 proposes a useful lifetime T

M

 of 20 years for devices 

used within industrial environments. This device is designed for this lifetime. Observe that 

the useful lifetime can be reduced if the device is exposed to the following conditions:

highly stressful environmental conditions such as constantly high temperatures

temperature cycles with high temperature differences

permanent repeated mechanical stress (vibration)

As noted in DIN EN 61508-2:2011 note N3, appropriate measures taken by the manufacturer 

and plant operator can extend the useful lifetime.
Please note that the useful lifetime refers to the (constant) failure rate of the device. 

The effective lifetime can be higher.
The estimated useful lifetime is greater than the warranty period prescribed by law 

or the manufacturer's guarantee period. However, this does not result in an extension 

of the warranty or guarantee services. Failure to reach the estimated useful lifetime is not 

a material defect.

Maximum Switching Power of Output Contacts (HiD282* only)

The useful lifetime is limited by the maximum switching cycles of the relays under 

load conditions.
For requirements regarding the connected output load, refer to the documentation 

of the connected peripheral devices.
Devices with relay contact outputs are not intended for applications with continuous demand, 

as the relay contacts are subject to mechanical wear. To exclude higher failure rates, 

a maximum number of 10 switching cycles per hour is considered adequate. A higher number 

of switching cycles can lead to higher failure rates than given in the table.

Note

See corresponding datasheets for further information.

Summary of Contents for HiD2842

Page 1: ...ISO9001 2 Functional Safety Switch Amplifier HiD282 HiD284 Manual...

Page 2: ...ion as well as the supplementary clause Expanded reservation of proprietorship Worldwide Pepperl Fuchs Group Lilienthalstr 200 68307 Mannheim Germany Phone 49 621 776 0 E mail info de pepperl fuchs co...

Page 3: ...Function 8 2 3 Interfaces 8 2 4 Marking 9 2 5 Standards and Directives for Functional Safe 9 3 Planning 10 3 1 System Structure 10 3 2 Assumptions 11 3 3 Safety Function and Safe State 12 3 4 Characte...

Page 4: ...Functional Safety HiD282 HiD284 Contents 4 2021 10...

Page 5: ...ing Dismounting Disposal The documentation consists of the following parts Present document Instruction manual Manual Datasheet Additionally the following parts may belong to the documentation if appl...

Page 6: ...d understood the instruction manual and the further documentation Intended Use The device is only approved for appropriate and intended use Ignoring these instructions will void any warranty and absol...

Page 7: ...displayed in descending order as follows Informative Symbols Action This symbol indicates a paragraph with instructions You are prompted to perform an action or a sequence of actions Danger This symb...

Page 8: ...ault A separate fault indication output is available HiD284 The HiD2842 device is a 2 channel isolated barrier The HiD2844 device is a 4 channel isolated barrier This isolated barrier is used for intr...

Page 9: ...fuchs com HiD2822 HiD2824 HiD2842 HiD2844 Up to SIL 2 Note If you design the safety loops in homogeneous redundancy HFT 1 you can use the devices in applications up to SIL 3 Functional safety IEC EN 6...

Page 10: ...ually the demand rate for this safety loop is assumed to be higher than once per year The relevant safety parameters to be verified are the PFH value Probability of dangerous Failure per Hour Fault re...

Page 11: ...f 2 5 based on experience A similar factor must be used if frequent temperature fluctuations are expected Do not use more than one input channel of a multi channel device for a safety loop as the chan...

Page 12: ...sheet the input loops of all device versions are supervised The related safety function is defined as the outputs are de energized safe state if there is a line fault detected Reaction Time The fault...

Page 13: ...the safety function 156 FIT 162 FIT no part 34 FIT 34 FIT SFF 1 72 2 88 4 MTBF 2 2 acc to SN29500 This value includes failures which are not part of the safety function MTTR 24 h The value is calcula...

Page 14: ...influencing the safety function and are therefore not included in SFF and in the failure rates of the safety function 127 FIT 125 FIT no part 34 FIT 34 FIT SFF 1 75 3 86 6 MTBF 2 2 acc to SN29500 Thi...

Page 15: ...at the useful lifetime can be reduced if the device is exposed to the following conditions highly stressful environmental conditions such as constantly high temperatures temperature cycles with high t...

Page 16: ...Check the safety function to ensure the expected output behavior 4 1 Configuration Configuring the Device The device is configured via DIP switches The DIP switches for setting the safety functions a...

Page 17: ...es See chapter 3 4 It is under the responsibility of the plant operator to define the type of proof test and the interval time period Check the settings after the configuration by suitable tests 5 1 1...

Page 18: ...SC 220 or a resistor RLB 150 k to the input The device must detect an external fault This state is indicated by red LED and the relay of the corresponding output must be de activated The yellow LED is...

Page 19: ...hat repeats one NAMUR input Test all inputs outputs and safety loops that are used in the safety application HiD2822 Zone 0 1 2 Div 1 2 Zone 2 Div 2 Termination Board Multimeter mA Multimeter mA RLB R...

Page 20: ...input HiD2822 Zone 0 1 2 Div 1 2 Zone 2 Div 2 Termination Board Multimeter mA Multimeter mA RLB RSC 240 2 5 W 24 V DC Multimeter mA 240 2 5 W 24 V DC SL2 SL1 8a 7a 8b 7b 10a 9a 9b 10b 11 14 17 18 12 1...

Page 21: ...not work Take appropriate measures to protect personnel and equipment while the safety function is not available Secure the application against accidental restart 3 Do not repair a defective device A...

Page 22: ...afety function Probability of failure of components that are in the safety loop HFT Hardware Fault Tolerance MTBF Mean Time Between Failures MTTFD Mean Time To dangerous Failure MTTR Mean Time To Rest...

Page 23: ...Functional Safety HiD282 HiD284 Notes 2021 10 23...

Page 24: ...Pepperl Fuchs Quality Download our latest policy here www pepperl fuchs com quality www pepperl fuchs com Pepperl Fuchs Subject to modifications Printed in Germany DOCT 7253A...

Reviews: