Endress+Hauser Deltapilot S FMB70, Руководство по функциональной безопасности

Страница: 29 / 36

Deltapilot S
Hauser 29
Repair
Repair All repairs to the Deltapilot S must be carried out by Hauser only.
In the event of failure of a SIL-labeled Hauser device, which has been operated in a protection
function, the "Declaration of Contamination and Cleaning" with the corresponding note "Used as SIL device in
protection system" must be enclosed when the defective device is returned
Please refer to the second-last page of Operating Instructions BA332P/00 with regard to this.
If the Deltapilot S is equipped with new software, a reset must be carried out following download, and the
device must be tested to ensure that it is functioning correctly and also recalibrated.
Appendix
Notes on the redundant
connection of multiple sensors
for SIL 3 With redundant connection with HFT = 1 (e.g. coincidence logic 1oo2 or 2oo3), the FMB70 meets the
requirements for SIL 3.
The common cause factors
β
and
β
D
indicated in the table below are minimum values for the FMB70.
These values should be used when calculating the failure probability of redundantly connected FMB70 units
as per IEC 61508-6.
The system-specific observation can return higher values depending on the actual installation and the use of
other components (e.g. Ex barriers).
Minimum value
β
with homogeneous redundant use 5 %
Minimum value
β
D
with homogeneous redundant use 2 %