BS EN 61069-5-2016 Industrial-process measurement control and automation Evaluation of system properties for the purpose of system assessment Assessment of system dependability《工业过.pdf

1、Industrial-process measurement, control andautomation Evaluation of system properties for the purpose of system assessmentPart 5: Assessment of system dependabilityBS EN 61069-5:2016BSI Standards PublicationWB11885_BSI_StandardCovs_2013_AW.indd 1 15/05/2013 15:06National forewordThis British Standar

2、d is the UK implementation of EN 61069-5:2016. It isidentical to IEC 61069-5:2016. It supersedes BS EN 61069-5:1995 which iswithdrawn.The UK participation in its preparation was entrusted by TechnicalCommittee GEL/65, Measurement and control, to Subcommittee GEL/65/1,System considerations.A list of

3、organizations represented on this committee can be obtained onrequest to its secretary.This publication does not purport to include all the necessary provisions ofa contract. Users are responsible for its correct application. The British Standards Institution 2016.Published by BSI Standards Limited

4、2016ISBN 978 0 580 85995 3ICS 25.040.40Compliance with a British Standard cannot confer immunity fromlegal obligations.This British Standard was published under the authority of theStandards Policy and Strategy Committee on 31 October 2016.Amendments/corrigenda issued since publicationDate Text affe

5、ctedBRITISH STANDARDBS EN 61069-5:2016EUROPEAN STANDARD NORME EUROPENNE EUROPISCHE NORM EN 61069-5 September 2016 ICS 25.040.40 Supersedes EN 61069-5:1995 English Version Industrial-process measurement, control and automation - Evaluation of system properties for the purpose of system assessment - P

6、art 5: Assessment of system dependability (IEC 61069-5:2016) Mesure, commande et automation dans les processus industriels - Apprciation des proprits dun sytme en vue de son valuation - Partie 5: Evaluation de la sret de fonctionnement dun systme (IEC 61069-5:2016) Leittechnik fr industrielle Prozes

7、se - Ermittlung der Systemeigenschaften zum Zweck der Eignungsbeurteilung eines Systems - Teil 5: Eignungsbeurteilung der Systemzuverlssigkeit (IEC 61069-5:2016) This European Standard was approved by CENELEC on 2016-07-20. CENELEC members are bound to comply with the CEN/CENELEC Internal Regulation

8、s which stipulate the conditions for giving this European Standard the status of a national standard without any alteration. Up-to-date lists and bibliographical references concerning such national standards may be obtained on application to the CEN-CENELEC Management Centre or to any CENELEC member

9、. This European Standard exists in three official versions (English, French, German). A version in any other language made by translation under the responsibility of a CENELEC member into its own language and notified to the CEN-CENELEC Management Centre has the same status as the official versions.

10、 CENELEC members are the national electrotechnical committees of Austria, Belgium, Bulgaria, Croatia, Cyprus, the Czech Republic, Denmark, Estonia, Finland, Former Yugoslav Republic of Macedonia, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, the Net

11、herlands, Norway, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden, Switzerland, Turkey and the United Kingdom. European Committee for Electrotechnical Standardization Comit Europen de Normalisation Electrotechnique Europisches Komitee fr Elektrotechnische Normung CEN-CENELEC Management

12、Centre: Avenue Marnix 17, B-1000 Brussels 2016 CENELEC All rights of exploitation in any form and by any means reserved worldwide for CENELEC Members. Ref. No. EN 61069-5:2016 E BS EN 61069-5:2016EN 61069-5:2016 2 European foreword The text of document 65A/793/FDIS, future edition 2 of IEC 61069-5,

13、prepared by SC 65A “System aspects“, of IEC/TC 65 “Industrial-process measurement, control and automation“ was submitted to the IEC-CENELEC parallel vote and approved by CENELEC as EN 61069-5:2016. The following dates are fixed: latest date by which the document has to be implemented at national lev

14、el by publication of an identical national standard or by endorsement (dop) 2017-04-20 latest date by which the national standards conflicting with the document have to be withdrawn (dow) 2019-07-20 This document supersedes EN 61069-5:1995. Attention is drawn to the possibility that some of the elem

15、ents of this document may be the subject of patent rights. CENELEC and/or CEN shall not be held responsible for identifying any or all such patent rights. Endorsement notice The text of the International Standard IEC 61069-5:2016 was approved by CENELEC as a European Standard without any modificatio

16、n. In the official version, for Bibliography, the following notes have to be added for the standards indicated: IEC 60300-3-1:2003 NOTE Harmonized as EN 60300-3-1:2004 (not modified). IEC 60068 NOTE Harmonized in EN 60068 series. IEC 60812:2006 NOTE Harmonized as EN 60812:2006 (not modified). IEC 61

17、000 NOTE Harmonized in EN 61000 series. IEC 61025:2006 NOTE Harmonized as EN 61025:2007 (not modified). IEC 61069-6 NOTE Harmonized as EN 61069-6. IEC 61078 NOTE Harmonized as EN 61078. IEC 61165 NOTE Harmonized as EN 61165. IEC 61326 NOTE Harmonized in EN 61326 series. IEC 61508 NOTE Harmonized in

18、EN 61508 series. BS EN 61069-5:2016EN 61069-5:2016 3 IEC 62443 NOTE Harmonized in EN 62443 series 1). IEC/TS 62603-1 NOTE Harmonized as CLC/TS 62603-1. 1) At draft stage. BS EN 61069-5:2016EN 61069-5:2016 4 Annex ZA (normative) Normative references to international publications with their correspond

19、ing European publications The following documents, in whole or in part, are normatively referenced in this document and are indispensable for its application. For dated references, only the edition cited applies. For undated references, the latest edition of the referenced document (including any am

20、endments) applies. NOTE 1 When an International Publication has been modified by common modifications, indicated by (mod), the relevant EN/HD applies. NOTE 2 Up-to-date information on the latest versions of the European Standards listed in this annex is available here: www.cenelec.eu. Publication Ye

21、ar Title EN/HD Year IEC 60300-3-2 - Dependability management - Part 3-2: Application guide - Collection of dependability data from the field EN 60300-3-2 - IEC 60319 - Presentation and specification of reliability data for electronic components - - IEC 61069-1 2016 Industrial-process measurement, co

22、ntrol and automation - Evaluation of system properties for the purpose of system assessment - Part 1: Terminology and basic concepts EN 61069-1 201X2)IEC 61069-2 2016 Industrial-process measurement, control and automation - Evaluation of system properties for the purpose of system assessment - Part

23、2: Assessment methodology EN 61069-2 201X2) IEC 61070 - Compliance test procedures for steady-state availability - - IEC 61709 2011 Electric components - Reliability - Reference conditions for failure rates and stress models for conversion EN 61709 2011 ISO/IEC 25010 - Systems and software engineeri

24、ng - Systems and software Quality Requirements and Evaluation (SQuaRE) - System and software quality models - - ISO/IEC 27001 2013 Information technology - Security techniques - Information security management systems - Requirements - - ISO/IEC 27002 - Information technology - Security techniques -

25、Code of practice for information security controls - - 2) To be published. BS EN 61069-5:2016 2 IEC 61069-5:2016 IEC 2016 CONTENTS FOREWORD . 4 INTRODUCTION . 6 1 Scope 8 2 Normative references. 8 3 Terms, definitions, abbreviated terms, acronyms, conventions and symbols 9 3.1 Terms and definitions

26、9 3.2 Abbreviated terms, acronyms, conventions and symbols 9 4 Basis of assessment specific to dependability 9 4.1 Dependability properties 9 4.1.1 General . 9 4.1.2 Availability . 10 4.1.3 Reliability . 10 4.1.4 Maintainability 10 4.1.5 Credibility 11 4.1.6 Security . 11 4.1.7 Integrity . 12 4.2 Fa

27、ctors influencing dependability . 12 5 Assessment method 12 5.1 General . 12 5.2 Defining the objective of the assessment . 12 5.3 Design and layout of the assessment . 13 5.4 Planning of the assessment program . 13 5.5 Execution of the assessment . 13 5.6 Reporting of the assessment . 13 6 Evaluati

28、on techniques 13 6.1 General . 13 6.2 Analytical evaluation techniques 14 6.2.1 Overview . 14 6.2.2 Inductive analysis 15 6.2.3 Deductive analysis . 15 6.2.4 Predictive evaluation 15 6.3 Empirical evaluation techniques. 16 6.3.1 Overview . 16 6.3.2 Tests by fault-injection techniques 16 6.3.3 Tests

29、by environmental perturbations . 17 6.4 Additional topics for evaluation techniques 17 Annex A (informative) Checklist and/or example of SRD for system dependability . 18 Annex B (informative) Checklist and/or example of SSD for system dependability . 19 B.1 SSD information 19 B.2 Check points for s

30、ystem dependability . 19 Annex C (informative) An example of a list of assessment items (information from IEC TS 62603-1) . 20 C.1 Overview. 20 C.2 Dependability 20 C.3 Availability 20 BS EN 61069-5:2016IEC 61069-5:2016 IEC 2016 3 C.3.1 System self-diagnostics 20 C.3.2 Single component fault toleran

31、ce and redundancy 20 C.3.3 Redundancy methods . 21 C.4 Reliability 22 C.5 Maintainability . 23 C.5.1 General . 23 C.5.2 Generation of maintenance requests 23 C.5.3 Strategies for maintenance . 23 C.5.4 System software maintenance 23 C.6 Credibility . 23 C.7 Security 24 C.8 Integrity 24 C.8.1 General

32、 . 24 C.8.2 Hot-swap . 24 C.8.3 Module diagnostic 24 C.8.4 Input validation 24 C.8.5 Read-back function 24 C.8.6 Forced output 24 C.8.7 Monitoring functions . 24 C.8.8 Controllers . 24 C.8.9 Networks . 25 C.8.10 Workstations and servers . 25 Annex D (informative) Credibility tests 26 D.1 Overview. 2

33、6 D.2 Injected faults . 27 D.2.1 General . 27 D.2.2 System failures due to a faulty module, element or component 27 D.2.3 System failures due to human errors 27 D.2.4 System failures resulting from incorrect or unauthorized inputs into the system through the man-machine interface . 27 D.3 Observatio

34、ns . 28 D.4 Interpretation of the results 28 Annex E (informative) Available failure rate databases . 29 E.1 Databases 29 E.2 Helpful standards concerning component failure 30 Annex F (informative) Security considerations 31 F.1 Physical security . 31 F.2 Cyber-security . 31 F.2.1 General . 31 F.2.2

35、 Security policy . 31 F.2.3 Other considerations 31 Bibliography . 33 Figure 1 General layout of IEC 61069 . 7 Figure 2 Dependability . 9 BS EN 61069-5:2016 4 IEC 61069-5:2016 IEC 2016 INTERNATIONAL ELECTROTECHNICAL COMMISSION _ INDUSTRIAL-PROCESS MEASUREMENT, CONTROL AND AUTOMATION EVALUATION OF SY

36、STEM PROPERTIES FOR THE PURPOSE OF SYSTEM ASSESSMENT Part 5: Assessment of system dependability FOREWORD 1) The International Electrotechnical Commission (IEC) is a worldwide organization for standardization comprising all national electrotechnical committees (IEC National Committees). The object of

37、 IEC is to promote international co-operation on all questions concerning standardization in the electrical and electronic fields. To this end and in addition to other activities, IEC publishes International Standards, Technical Specifications, Technical Reports, Publicly Available Specifications (P

38、AS) and Guides (hereafter referred to as “IEC Publication(s)”). Their preparation is entrusted to technical committees; any IEC National Committee interested in the subject dealt with may participate in this preparatory work. International, governmental and non-governmental organizations liaising wi

39、th the IEC also participate in this preparation. IEC collaborates closely with the International Organization for Standardization (ISO) in accordance with conditions determined by agreement between the two organizations. 2) The formal decisions or agreements of IEC on technical matters express, as n

40、early as possible, an international consensus of opinion on the relevant subjects since each technical committee has representation from all interested IEC National Committees. 3) IEC Publications have the form of recommendations for international use and are accepted by IEC National Committees in t

41、hat sense. While all reasonable efforts are made to ensure that the technical content of IEC Publications is accurate, IEC cannot be held responsible for the way in which they are used or for any misinterpretation by any end user. 4) In order to promote international uniformity, IEC National Committ

42、ees undertake to apply IEC Publications transparently to the maximum extent possible in their national and regional publications. Any divergence between any IEC Publication and the corresponding national or regional publication shall be clearly indicated in the latter. 5) IEC itself does not provide

43、 any attestation of conformity. Independent certification bodies provide conformity assessment services and, in some areas, access to IEC marks of conformity. IEC is not responsible for any services carried out by independent certification bodies. 6) All users should ensure that they have the latest

44、 edition of this publication. 7) No liability shall attach to IEC or its directors, employees, servants or agents including individual experts and members of its technical committees and IEC National Committees for any personal injury, property damage or other damage of any nature whatsoever, whethe

45、r direct or indirect, or for costs (including legal fees) and expenses arising out of the publication, use of, or reliance upon, this IEC Publication or any other IEC Publications. 8) Attention is drawn to the Normative references cited in this publication. Use of the referenced publications is indi

46、spensable for the correct application of this publication. 9) Attention is drawn to the possibility that some of the elements of this IEC Publication may be the subject of patent rights. IEC shall not be held responsible for identifying any or all such patent rights. International Standard IEC 61069

47、-5 has been prepared by subcommittee 65A: System aspects, of IEC technical committee 65: Industrial-process measurement, control and automation. This second edition cancels and replaces the first edition published in 1994. This edition constitutes a technical revision. This edition includes the foll

48、owing significant technical changes with respect to the previous edition: a) reorganization of the material of IEC 61069-5:1994 to make the overall set of standards more organized and consistent; b) IEC TS 62603-1 has been incorporated into this edition. BS EN 61069-5:2016IEC 61069-5:2016 IEC 2016 5

49、 The text of this standard is based on the following documents: FDIS Report on voting 65A/793/FDIS 65A/803/RVD Full information on the voting for the approval of this standard can be found in the report on voting indicated in the above table. This publication has been drafted in accordance with the ISO/IEC Directives, Part 2. A list of all parts in the IEC 61069 series, published under the general title Industrial-process measurement, control and automation Evaluation of system properties for the