background image

General safety instructions 

 

2.2 Safety Integrity Level (SIL) 

 

Functional safety for SITRANS P, series DS III PROFIsafe 

2-2

 

Product information, 07/2006, A5E00849297-01 

3RVLWLRQHU
3QHXPDWLFDFWXDWRU

0RGXODWLQJYDOYH

)LQDOFRQWUROOLQJHOHPHQW

6KXWGRZQ
VLJQDO9

)DXOWVDIH3/&

6HQVRU
7UDQVPLWWHU

352),%863$

6,6

'3

3$

&RXSOHU

'3

'3

/LQN

 

Figure 2-1 

Example of a safety-instrumented system with a bus 

Functioning of the system as shown in the example 

The transmitter generates a process-specific measured value. The programmable logic 

control (PLC) monitors this value in case it exceeds a preset limit value. If a fault occurs, the 

PLC generates a shutdown signal for the connected positioner. The positioner switches the 

corresponding valve to the defined safety position. The communication with the positioner 

via PROFIBUS PA or FOUNDATION Fieldbus remains unrestricted, i.e. position and status 

messages are still possible. 

2.2

 

Safety Integrity Level (SIL) 

Definition: SIL 

The international standard IEC 61508 defines four discrete Safety Integrity Levels (SIL) from 

SIL 1 to SIL 4. Each level corresponds to the probability range for the failure of a safety 

function. The higher the SIL of the safety-instrumented system, the higher probability that the 

required safety function will work. 

Содержание DS III PROFIsafe Series

Страница 1: ...vice specific safety instructions 3 Appendix A List of Abbreviations Acronyms B SITRANS Pressure transmitter Functional safety for SITRANS P series DS III PROFIsafe Product information 07 2006 A5E00849297 01 Supplement to the Operating Instructions ...

Страница 2: ...mmissioning and operation of a device system may only be performed by qualified personnel Within the context of the safety notes in this documentation qualified persons are defined as persons who are authorized to commission ground and label devices systems and circuits in accordance with established safety practices and standards Prescribed Usage Note the following Warning This device may only be...

Страница 3: ...ted system 2 1 2 2 Safety Integrity Level SIL 2 2 3 Device specific safety instructions 3 1 3 1 Application range 3 1 3 2 Safety function 3 2 3 3 Settings 3 3 3 4 Behavior in case of faults 3 4 3 5 Maintenance Checking 3 4 3 6 Safety characteristics 3 5 A Appendix A 1 A 1 Literature and standards A 1 A 2 SIL Declaration of Conformity A 2 A 3 Test report excerpt A 5 B List of Abbreviations Acronyms...

Страница 4: ...Table of contents Functional safety for SITRANS P series DS III PROFIsafe iv Product information 07 2006 A5E00849297 01 ...

Страница 5: ...t of a safety function This documentation is applicable only in connection with the following documentation No Name Order number 1 Operating Instructions for SITRANS P series DS III PA A5E00053276 1 3 History This history establishes the correlation between the current documentation and the valid firmware of the device The documentation of this edition is applicable for the following firmware Edit...

Страница 6: ... course of further development Siemens Regional Offices If you need more information or have particular problems which are not covered sufficiently by the operating instructions contact your local Siemens Regional Office You will find the address of your local Siemens Regional Office on the Internet Product information on the Internet The Programming Manual forms a part of the supplied CD and is a...

Страница 7: ... a limit signal sensor and a control valve Definition Safety function Defined function executed by a safety instrumented system with the objective of achieving or maintaining a safe system status taking into account a defined dangerous occurrence Example Limit pressure monitoring Definition Dangerous failure Failure with the potential to bring the safety instrumented system into a dangerous or non...

Страница 8: ...itors this value in case it exceeds a preset limit value If a fault occurs the PLC generates a shutdown signal for the connected positioner The positioner switches the corresponding valve to the defined safety position The communication with the positioner via PROFIBUS PA or FOUNDATION Fieldbus remains unrestricted i e position and status messages are still possible 2 2 Safety Integrity Level SIL ...

Страница 9: ... 10 5 10 4 3 10 4 10 3 2 10 3 10 2 1 10 2 10 1 The average probability of dangerous failures of the entire safety instrumented system PFDAVG is normally split between the three sub systems in the following figure 6HQVRU H J SUHVVXUH WHPSHUDWXUH HWF RQWURO V VWHP RU ORJLF XQLW H J 3 3 9 FRPSRQHQW LQDO FRQWUROOLQJ HOHPHQW H J YDOYH ZLWK DFWXDWRU DQG SRVLWLRQHU Figure 2 2 Example of PFD distribution ...

Страница 10: ...inal controlling elements with complex components if the following conditions are applicable for the device The device is ready for operation The user can configure only the process related parameters e g control range signal direction in case of a fault limiting values etc The configuration level of the firmware is blocked against unauthorized operation The function requires SIL of less than 4 Th...

Страница 11: ...ure from the differential pressure breaker range With appropriate parameterization you can also use it for the following additional measurement types Level Volume Mass Flow You can install the transmitter of the appropriate version having the intrinsically safe type of protection EEx ia EEx ib or flameproof enclosure EEx d in hazardous areas on zone 0 and in zones 1 or 2 Devices have an EC type ex...

Страница 12: ...lute pressure These versions measure the absolute pressure of corrosive non corrosive and hazardous gases vapors and liquids Requirements These pressure transmitters meet the following requirements Functional safety to SIL 2 under IEC 61508 or IEC 61511 1 from firmware version FW from 301 02 01K Explosion protection for corresponding versions Electromagnetic compatibility in compliance with EN 613...

Страница 13: ...nfiguration While operating configuring ensure that the technical data of the pressure transmitter are adhered to in their respective version Checking the safety function We recommend that You check the status for warnings and alarms You check the measured value limits Simulate various measured values and statuses You check the measuring accuracy that must be in the range of 2 for the safety funct...

Страница 14: ...te The address of the responsible SIEMENS repair center contacts spare parts lists etc can be found on the Internet See also Services Support http www siemens com automation services support Partner http www automation siemens com partner 3 5 Maintenance Checking Interval We recommend that the functioning of the pressure transmitter be checked at regular intervals of one year Checking the safety f...

Страница 15: ...sary for using the system are listed in the SIL declaration of conformity These values apply under the following conditions The SITRANS P pressure transmitter is only used in applications with a low demand rate for the safety function low demand mode The safety related parameters settings have been entered by local operation or PROFIBUS communication before commencing safety instrumented operation...

Страница 16: ...Device specific safety instructions 3 6 Safety characteristics Functional safety for SITRANS P series DS III PROFIsafe 3 6 Product information 07 2006 A5E00849297 01 ...

Страница 17: ... standards No Standard Description 1 IEC 61508 Section 1 7 Functional safety of following systems Safety instrumented Electrical Electronic Programmable Target group Manufacturers and suppliers of equipment 2 IEC 61511 Section 1 3 Functional safety Safety systems for the process industry Target group Planners constructors and users ...

Страница 18: ...Appendix A 2 SIL Declaration of Conformity Functional safety for SITRANS P series DS III PROFIsafe A 2 Product information 07 2006 A5E00849297 01 A 2 SIL Declaration of Conformity ...

Страница 19: ...Appendix A 2 SIL Declaration of Conformity Functional safety for SITRANS P series DS III PROFIsafe Product information 07 2006 A5E00849297 01 A 3 ...

Страница 20: ...Appendix A 2 SIL Declaration of Conformity Functional safety for SITRANS P series DS III PROFIsafe A 4 Product information 07 2006 A5E00849297 01 ...

Страница 21: ...Appendix A 3 Test report excerpt Functional safety for SITRANS P series DS III PROFIsafe Product information 07 2006 A5E00849297 01 A 5 A 3 Test report excerpt ...

Страница 22: ...Appendix A 3 Test report excerpt Functional safety for SITRANS P series DS III PROFIsafe A 6 Product information 07 2006 A5E00849297 01 ...

Страница 23: ...Appendix A 3 Test report excerpt Functional safety for SITRANS P series DS III PROFIsafe Product information 07 2006 A5E00849297 01 A 7 ...

Страница 24: ...Appendix A 3 Test report excerpt Functional safety for SITRANS P series DS III PROFIsafe A 8 Product information 07 2006 A5E00849297 01 ...

Страница 25: ...to SIL 4 Each level corresponds to a range of probability for failure of a safety function The higher the Safety Integrity Level of the safety instrumented system the lower the probability that it will not execute the required safety functions SFF Safe Failure Fraction Proportion of safe failures Proportion of failures without the potential to bring the safety instrumented system into a dangerous ...

Страница 26: ...List of Abbreviations Acronyms B 1 Abbreviations Functional safety for SITRANS P series DS III PROFIsafe B 2 Product information 07 2006 A5E00849297 01 ...

Страница 27: ...n faults failures occur Failure fault Failure A resource is no longer capable of executing a required function Fault Undesired state of a resource indicated by the incapability of executing a required function Fault Failure fault Fault tolerance Fault tolerance N means that a device can execute the intended task even when N faults exist The device fails to execute the intended function in case of ...

Страница 28: ...and final controlling element Example A safety instrumented system is made up of a pressure transmitter a limit signal sensor and a control valve Sensor Converter that converts mechanical or other non electrical variables into electrical signals SIL The international standard IEC 61508 defines four discrete Safety Integrity Levels SIL from SIL 1 to SIL 4 Each level corresponds to the probability r...

Страница 29: ...1 1 E Electronics 3 5 F Final controlling element 2 1 H History 1 1 M Maintenance 3 4 Mean Time Between Failures 3 3 Measuring accuracy 3 3 More information 1 2 MTTR 3 5 P Product information on the Internet 1 2 S Safety Checking 3 5 Safety function 2 1 3 2 Checking 3 3 3 4 Sensor 2 1 Settings 3 3 Siemens Regional Office 1 2 system Safety instrumented 2 1 T Technical data 3 3 W Write protection 3 ...

Страница 30: ...Index Functional safety for SITRANS P series DS III PROFIsafe Index 2 Product information 07 2006 A5E00849297 01 ...

Отзывы: