BS EN 61131-6-2012 Programmable controllers Functional safety《可编程控制器 功能安全性》.pdf

1、raising standards worldwideNO COPYING WITHOUT BSI PERMISSION EXCEPT AS PERMITTED BY COPYRIGHT LAWBSI Standards PublicationProgrammable controllersPart 6: Functional safetyBS EN 61131-6:2012Copyright European Committee for Electrotechnical Standardization Provided by IHS under license with CENELECNot

2、 for ResaleNo reproduction or networking permitted without license from IHS-,-,-National forewordThis British Standard is the UK implementation of EN 61131-6:2012. It isidentical to IEC 61131-6:2012.The UK participation in its preparation was entrusted by Technical CommitteeGEL/65, Measurement and c

3、ontrol, to Subcommittee GEL/65/2, Elements ofsystems.A list of organizations represented on this committee can be obtained onrequest to its secretary.This publication does not purport to include all the necessary provisions of acontract. Users are responsible for its correct application. The British

4、 Standards Institution 2013Published by BSI Standards Limited 2013ISBN 978 0 580 76606 0ICS 25.040.40; 35.240.50Compliance with a British Standard cannot confer immunity fromlegal obligations.This British Standard was published under the authority of the StandardsPolicy and Strategy Committee on 31

5、March 2013.Amendments issued since publicationAmd. No. Date Text affectedBRITISH STANDARDBS EN 61131-6:2012Copyright European Committee for Electrotechnical Standardization Provided by IHS under license with CENELECNot for ResaleNo reproduction or networking permitted without license from IHS-,-,-EU

6、ROPEAN STANDARD EN 61131-6 NORME EUROPENNE EUROPISCHE NORM November 2012 CENELEC European Committee for Electrotechnical Standardization Comit Europen de Normalisation Electrotechnique Europisches Komitee fr Elektrotechnische Normung Management Centre: Avenue Marnix 17, B - 1000 Brussels 2012 CENELE

7、C - All rights of exploitation in any form and by any means reserved worldwide for CENELEC members. Ref. No. EN 61131-6:2012 E ICS 25.040.40; 35.240.50 English version Programmable controllers - Part 6: Functional safety (IEC 61131-6:2012) Automates programmables - Partie 6: Scurit fonctionnelle (CE

8、I 61131-6:2012) Speicherprogrammierbare Steuerungen Teil 6: Funktionale Sicherheit (IEC 61131-6:2012) This European Standard was approved by CENELEC on 2012-11-06. CENELEC members are bound to comply with the CEN/CENELEC Internal Regulations which stipulate the conditions for giving this European St

9、andard the status of a national standard without any alteration. Up-to-date lists and bibliographical references concerning such national standards may be obtained on application to the CEN-CENELEC Management Centre or to any CENELEC member. This European Standard exists in three official versions (

10、English, French, German). A version in any other language made by translation under the responsibility of a CENELEC member into its own language and notified to the CEN-CENELEC Management Centre has the same status as the official versions. CENELEC members are the national electrotechnical committee

11、s of Austria, Belgium, Bulgaria, Croatia, Cyprus, the Czech Republic, Denmark, Estonia, Finland, Former Yugoslav Republic of Macedonia, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, the Netherlands, Norway, Poland, Portugal, Romania, Slovakia, Slove

12、nia, Spain, Sweden, Switzerland, Turkey and the United Kingdom. BS EN 61131-6:2012Copyright European Committee for Electrotechnical Standardization Provided by IHS under license with CENELECNot for ResaleNo reproduction or networking permitted without license from IHS-,-,-EN 61131-6:2012 - 2 - Forew

13、ord The text of document 65B/831/FDIS, future edition 1 of IEC 61131-6, prepared by SC 65B, “Devices with the major emphasis on the Realization Phase (Box 10) of the overall safety lifecycle, shown in Figure 1. The assumption of this part is that the FS-PLC is utilized as a logic subsystem for the o

14、verall E/E/PE system. The Figure 1, Realization (box 10), includes: the allocation of the FS-PLC safety aspects to FS-PLC hardware, software or firmware, or any combination, FS-PLC hardware architectures, verification and validation activities at the FS-PLC level, FS-PLC modification requirements, o

15、peration and maintenance information for the FS-PLC user, information to be provided by the FS-PLC manufacturer for the user. IEC 1817/12 BS EN 61131-6:2012Copyright European Committee for Electrotechnical Standardization Provided by IHS under license with CENELECNot for ResaleNo reproduction or net

16、working permitted without license from IHS-,-,- 10 61131-6 IEC:2012 PROGRAMMABLE CONTROLLERS Part 6: Functional safety 1 Scope This Part of the IEC 61131 series specifies requirements for programmable controllers (PLCs) and their associated peripherals, as defined in Part 1, which are intended to be

17、 used as the logic subsystem of an electrical/electronic/programmable electronic (E/E/PE) safety-related system. A programmable controller and its associated peripherals complying with the requirements of this part is considered suitable for use in an E/E/PE safety-related system and is identified a

18、s a functional safety programmable logic controller (FS-PLC). An FS-PLC is generally a hardware (HW) / software (SW) subsystem. An FS-PLC may also include software elements, for example predefined function blocks. An E/E/PE safety-related system generally consists of sensors, actuators, software and

19、 a logic subsystem. This part is a product specific implementation of the requirements of the IEC 61508 series and conformity to this part fulfils all of the applicable requirements of the IEC 61508 series related to FS-PLCs. While the IEC 61508 series is a system standard, this part provides produc

20、t specific requirements for the application of the principles of the IEC 61508 series to FS-PLC. This Part of the IEC 61131 series addresses only the functional safety and safety integrity requirements of an FS-PLC when used as part of an E/E/PE safety-related system. The definition of the functiona

21、l safety requirements of the overall E/E/PE safety-related system and the functional safety requirements of the ultimate application of the E/E/PE safety-related system are outside the scope of this part, but they are inputs for this part. For application specific information the reader is referred

22、to standards such as the IEC 61511 series, IEC 62061, and the ISO 13849 series. This part does not cover general safety requirements for an FS-PLC such as requirements related to electric shock and fire hazards specified in IEC 61131-2. This part applies to an FS-PLC with a Safety Integrity Level (S

23、IL) capability not greater than SIL 3. The objective of this part is: to establish and describe the safety life-cycle elements of an FS-PLC, in harmony with the general safety life-cycle identified in IEC 61508-1, -2 and -3; to establish and describe the requirements for FS-PLC HW and SW that relate

24、 to the functional safety and safety integrity requirements of a E/E/PE safety-related system; to establish evaluation methods for a FS-PLC to this part for the following parameters/criteria: a Safety Integrity Level (SIL) claim for which the FS-PLC is capable, a Probability of Failure on Demand (PF

25、D) value, an average frequency of dangerous failure per hour value (PFH), a value for the safe failure fraction (SFF), a value for the hardware fault tolerance (HFT), a diagnostic coverage (DC) value, a verification that the specified FS-PLC manufacturers safety lifecycle processes are in place, BS

26、EN 61131-6:2012Copyright European Committee for Electrotechnical Standardization Provided by IHS under license with CENELECNot for ResaleNo reproduction or networking permitted without license from IHS-,-,-61131-6 IEC:2012 11 the defined safe state, the measures and techniques for the prevention and

27、 control of systematic faults, and for each failure mode addressed in this part, the functional behaviour in the failed state; to establish the definitions and identify the principal characteristics relevant to the selection and application of FS-PLCs and their associated peripherals. This part is p

28、rimarily intended for FS-PLC manufacturers. It also includes the critical role of FS-PLC users through the user documentation requirements. Some user guidelines for FS-PLCs may be found in IEC 61131-4. The requirements of ISO/IEC Guide 51 and IEC Guide 104, as they relate to this part, are incorpora

29、ted herein. 2 Normative references The following documents, in whole or in part, are normatively referenced in this document and are indispensable for its application. For dated references, only the edition cited applies. For undated references, the latest edition of the referenced document (includi

30、ng any amendments) applies. IEC 60947-5-1:2003, Low-voltage switchgear and controlgear Part 5-1: Control circuit devices and switching elements Electromechanical control circuit devices IEC/TS 61000-1-2:2008, Electromagnetic compatibility (EMC) Part 1-2: General Methodology for the achievement of fu

31、nctional safety of electrical and electronic systems including equipment with regard to electromagnetic phenomena IEC 61000-4-2:2008, Electromagnetic compatibility (EMC) Part 4-2: Testing and measurement techniques Electrostatic discharge immunity test IEC 61000-4-3:2006, Electromagnetic compatibili

32、ty (EMC) Part 4-3: Testing and measurement techniques Radiated, radio-frequency, electromagnetic field immunity test IEC 61000-4-4:2012, Electromagnetic compatibility (EMC) Part 4-4: Testing and measurement techniques Electrical fast transient/burst immunity test IEC 61000-4-5:2005, Electromagnetic

33、compatibility (EMC) Part 4-5: Testing and measurement techniques Surge immunity test IEC 61000-4-6:2008, Electromagnetic compatibility (EMC) Part 4-6: Testing and measurement techniques Immunity to conducted disturbances, induced by radio-frequency fields IEC 61000-4-8:2009, Electromagnetic compatib

34、ility (EMC) Part 4-8: Testing and measurement techniques Power frequency magnetic field immunity test IEC 61131-1:2003, Programmable controllers Part 1: General information IEC 61131-2:2007, Programmable controllers Part 2: Equipment requirements and tests IEC 61131-4:2004, Programmable controllers

35、Part 4: User guidelines IEC 61326-3-1:2008, Electrical equipment for measurement, control and laboratory use EMC requirements Part 3-1: Immunity requirements for safety-related systems and for BS EN 61131-6:2012Copyright European Committee for Electrotechnical Standardization Provided by IHS under l

36、icense with CENELECNot for ResaleNo reproduction or networking permitted without license from IHS-,-,- 12 61131-6 IEC:2012 equipment intended to perform safety-related functions (functional safety) General industrial applications IEC 61326-3-2:2008, Electrical equipment for measurement, control and

37、laboratory use EMC requirements Part 3-2: Immunity requirements for safety-related systems and for equipment intended to perform safety-related functions (functional safety) Industrial applications with specified electromagnetic environment IEC 61508-1:2010, Functional safety of electrical/electroni

38、c/programmable electronic safety-related systems Part 1: General requirements IEC 61508-2:2010, Functional safety of electrical/electronic/programmable electronic safety-related systems Part 2: Requirements for electrical/electronic/programmable electronic safety-related systems IEC 61508-3:2010, Fu

39、nctional safety of electrical/electronic/programmable electronic safety-related systems Part 3: Software requirements IEC 61508-6:2010, Functional safety of electrical/electronic/programmable electronic safety-related systems Part 6: Guidelines on the application of IEC 61508-2 and IEC 61508-3 IEC 6

40、1784-3:2010, Industrial communication networks Profiles Part 3: Functional safety fieldbuses General rules and profile definitions IEC 62443 (all parts), Industrial communication networks Network and system security IEC Guide 104:2010, The preparation of safety publications and the use of basic safe

41、ty publications and group safety publications ISO/IEC Guide 51:1999, Safety aspects Guidelines for their inclusion in standards EN 50205:2002, Relays with forcibly guided (mechanically linked) contacts 3 Terms and definitions For the purposes of this document, the following terms and definitions app

42、ly. 3.1 application program application software part of the software of a programmable electronic system that specifies the functions that perform a task related to the EUC rather than the functioning of, and services provided by the programmable device itself SOURCE: IEC 61508-4:2010, 3.2.7 3.2 ap

43、plication specific integrated circuit ASIC integrated circuit designed and manufactured for specific function, where its functionality is defined by the product developer SOURCE: IEC 61508-4:2010, 3.2.15 3.3 architecture specific configuration of hardware and software elements in a system BS EN 6113

44、1-6:2012Copyright European Committee for Electrotechnical Standardization Provided by IHS under license with CENELECNot for ResaleNo reproduction or networking permitted without license from IHS-,-,-61131-6 IEC:2012 13 SOURCE: IEC 61508-4:2010, 3.3.4 3.4 availability the probability that an item is

45、able to perform its intended function, expressed as a decimal value between zero and one EXAMPLE A = 0,9 means that a product is available 90 % of the time. Note 1 to entry: For T 1, A = 1 T, See 3.23. 3.5 average frequency of a dangerous failure per hour PFH average frequency of a dangerous failure

46、 of an E/E/PE safety-related system to perform the specified safety function over a given period of time Note 1 to entry: The term “probability of dangerous failure per hour” is not used in this standard but the acronym PFH has been retained but when it is used it means “average frequency of dangero

47、us failure h”. Note 2 to entry: From a theoretical point of view, the PFH is the average of the unconditional failure intensity, also called failure frequency, and which is generally designated w(t). It should not be confused with a failure rate (see Annex B of IEC 61508-6:2010). Note 3 to entry: Wh

48、en the E/E/PE safety-related system is the ultimate safety layer, the PFH should be calculated from its unreliability F(T)=1-R(t) (see failure rate above). When it is not the ultimate safety-related system its PFH should be calculated from its unavailability U(t) (see PFD, 3.38). PFH approximations are given by F(T)/T and 1/MTTF in the first case and 1/MTBF in the second case. Note 4 to entry: When the E/E/PE safety-related system implies only quickly repaired revealed failures then an asymptotic failure rate as