Endress+Hauser Deltapilot S FMB70, Руководство по функциональной безопасности

Страница: 7 / 36

Deltapilot S
Hauser 7
Restrictions for use in safety-
related applications – Device warmup time: after device warmup, the safety functions are available after a 30-second initialization
period.
– In the case of local operation of the Deltapilot S FMB70 without a display and without an operating tool or
without a HART communicator, the device cannot be safely configured because the user cannot perform a
visual check. In both these situations, communication via HART alone is not sufficient.
– The device must be locked following configuration.
– When using the device as a subsystem of a safety function, the "Hold meas. value" setting may not be selected
as this option does not provide failsafe alarming.
– During commissioning, a complete function test of the safety-related functions must be performed.
– The maximum interval for recurrent testing (Proof Test Interval) is 5 years.
– Faulty devices must be replaced as soon as possible to minimize the possibility of multiple errors occurring.
The failure probabilities indicated in this Safety Manual are based on a medium time to repair (MTTR) of
8 hours.
Functional safety parameters The table shows the specific functional safety parameters.
Parameters according to IEC 61508 Value
Safety functions MIN, MAX, Range
SIL (Hardware) 2 (single-channel),
3 (with use of a SIL 3 capable coincidence logic)
SIL (Software) 3
Device type B
Mode of operation Low demand mode
Safety functions MIN, MAX, Range
λ
sd
0 FIT
λ
su
332 FIT
λ
dd
463 FIT
λ
du
53 FIT
λ
tot
*
1
1058 FIT
MTBF *
1
108 years
SFF 93.7 %
PFD
avg
for T
1
= 1 year (single-channel) *
2
2.32 × 10
-4
T
1
(Proof-test interval)
→
graphic
Diagnostic test interval *
3
5 min (RAM, ROM, ...), 1 s (Measurement)
Fault reaction time *
4
5 min (RAM, ROM, …), 10 s (Measurement)
Settling time *
5
→
Technical Information TI416P, "Dead time, time constant (T63)" section
*
1
According to Siemens SN29500. This value takes into account all failure types (
→
"Management summary"
→
ä
30).
*
2
Where the average temperature when in continuous use is in the region of 50 °C, a factor of 1.3 should be taken into
account. For further information
→
"Management summary"
→
ä
30.
*
3
During this time, all diagnostic functions are executed at least once.
*
4
Time between fault detection and fault reaction.
*
5
Step response time as per DIN EN 61298-2.