BS EN 62138-2009 Nuclear power plants - Instrumentation and control important for safety - Software aspects for computer-based systems performing category B or C functions《核电站 安全性的.pdf

1、BRITISH STANDARD BS EN 62138:2009 Nuclear power plants Instrumentation and control important for safety Software aspects for computer-based systems performing category B or C functions ICS 27.120.20; 35.080 Licensed Copy: Wang Bin, ISO/EXCHANGE CHINA STANDARDS, 13/05/2010 08:46, Uncontrolled Copy, (

2、c) BSINational foreword This British Standard is the UK implementation of EN 62138:2009. It is identical to IEC 62138:2004. It supersedes BS IEC 62138:2004 which is withdrawn. The UK participation in its preparation was entrusted to Technical Committee NCE/8, Reactor instrumentation. A list of organ

3、izations represented on this committee can be obtained on request to its secretary. This publication does not purport to include all the necessary provisions of a contract. Users are responsible for its correct application. Compliance with a British Standard cannot confer immunity from legal obligat

4、ions. BS EN 62138:2009 Amendments/corrigenda issued since publication Date Comments 31 December 2009 This corrigendum renumbers BS IEC 62138:2004 as BS EN 62138:2009 This British Standard was published under the authority of the Standards Policy and Strategy Committee on 5 November 2004 BSI 2009 ISB

5、N 978 0 580 63963 0 Licensed Copy: Wang Bin, ISO/EXCHANGE CHINA STANDARDS, 13/05/2010 08:46, Uncontrolled Copy, (c) BSI EUROPEAN STANDARD EN 62138 NORME EUROPENNE EUROPISCHE NORM August 2009 CENELEC European Committee for Electrotechnical Standardization Comit Europen de Normalisation Electrotechniq

6、ue Europisches Komitee fr Elektrotechnische Normung Central Secretariat: Avenue Marnix 17, B - 1000 Brussels 2009 CENELEC - All rights of exploitation in any form and by any means reserved worldwide for CENELEC members. Ref. No. EN 62138:2009 E ICS 27.120.20 English version Nuclear power plants - In

7、strumentation and control important for safety - Software aspects for computer-based systems performing category B or C functions (IEC 62138:2004) Centrales nuclaires - Instrumentation et contrle-commande importants pour la sret - Aspects logiciels des systmes informatiss ralisant des fonctions de c

8、atgorie B ou C (CEI 62138:2004) Kernkraftwerke - Leittechnik fr Systeme mit sicherheitstechnischer Bedeutung - Softwareaspekte fr rechnerbasierte Systeme zur Realisierung von Funktionen der Kategorie B oder C (IEC 62138:2004) This European Standard was approved by CENELEC on 2009-07-01. CENELEC memb

9、ers are bound to comply with the CEN/CENELEC Internal Regulations which stipulate the conditions for giving this European Standard the status of a national standard without any alteration. Up-to-date lists and bibliographical references concerning such national standards may be obtained on applicati

10、on to the Central Secretariat or to any CENELEC member. This European Standard exists in three official versions (English, French, German). A version in any other language made by translation under the responsibility of a CENELEC member into its own language and notified to the Central Secretariat h

11、as the same status as the official versions. CENELEC members are the national electrotechnical committees of Austria, Belgium, Bulgaria, Cyprus, the Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, the Netherl

12、ands, Norway, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden, Switzerland and the United Kingdom. Licensed Copy: Wang Bin, ISO/EXCHANGE CHINA STANDARDS, 13/05/2010 08:46, Uncontrolled Copy, (c) BSIForeword The text of the International Standard IEC 62138:2004, prepared by SC 45A, Instr

13、umentation and control of nuclear facilities, of IEC TC 45, Nuclear instrumentation, was submitted to the formal vote and was approved by CENELEC as EN 62138 on 2009-07-01 without any modification. The following dates were fixed: latest date by which the EN has to be implemented at national level by

14、 publication of an identical national standard or by endorsement (dop) 2010-07-01 latest date by which the national standards conflicting with the EN have to be withdrawn (dow) 2012-07-01 Annex ZA has been added by CENELEC. _ Endorsement notice The text of the International Standard IEC 62138:2004 w

15、as approved by CENELEC as a European Standard without any modification. In the official version, for Bibliography, the following notes have to be added for the standards indicated: IEC 61508-3 NOTE Harmonized as EN 61508-3:2001 (not modified). IEC 61508-4 NOTE Harmonized as EN 61508-4:2001 (not modi

16、fied). IEC 61511-1 NOTE Harmonized as EN 61511-1:2004 (not modified). ISO 9000-3 NOTE Harmonized as EN ISO 9000-3:1997 (not modified). ISO 9001 NOTE Harmonized as EN ISO 9001:2008 (not modified). _ Licensed Copy: Wang Bin, ISO/EXCHANGE CHINA STANDARDS, 13/05/2010 08:46, Uncontrolled Copy, (c) BSI CO

17、NTENTS Introduction.3 1 Scope.4 2 Normative references .5 3 Terms, definitions and abbreviations 5 4 Key concepts and assumptions.10 4.1 Types of software10 4.2 Types of data 11 4.3 Software and System Safety Lifecycles .11 4.4 Gradation principles 14 5 Requirements for the software of I the use of

18、application-oriented languages. This standard is not intended to be used as a general-purpose software engineering guide. It provides requirements that the software of I&C systems of safety classes 2 or 3 must meet to achieve system nuclear safety objectives. BSIEC62138:2004 BS EN 62138:2009 4 Licen

19、sed Copy: Wang Bin, ISO/EXCHANGE CHINA STANDARDS, 13/05/2010 08:46, Uncontrolled Copy, (c) BSI63128 IE2:C 400 9 2 Normative references The following referenced documents are indispensable for the application of this document. For dated references, only the edition cited applies. For undated referenc

20、es, the latest edition of the referenced document (including any amendments) applies. IEC 61226, Nuclear power plants Instrumentation and control systems important for safety Classification IEC 61513:2001, Nuclear power plants Instrumentation and control for systems important to safety General requi

21、rements for systems 3 Terms, definitions and abbreviations For the purposes of this document, the following terms, definitions and abbreviation apply. 3.1 animation process by which the behaviour defined by a specification is displayed with actual values derived from the stated behaviour expressions

22、 and from some input values (IEC 60880-2) 3.2 application function function of an I&C system that performs a task related to the process being controlled rather than to the functioning of the system itself (IEC 61513) 3.3 application-oriented language computer language specifically designed to addre

23、ss a certain type of application and to be used by persons who are specialists of this type of application NOTE 1 Equipment families usually feature application-oriented languages so as to provide easy to use capability for adjusting the equipment to specific requirements. NOTE 2 Application-oriente

24、d languages may be used to specify the functional requirements of an I&C system, and/or to specify or design application software. They may be based on texts, on graphics, or on both. NOTE 3 Examples: function block diagram languages, languages defined by IEC 61131-3. NOTE 4 See also General-purpose

25、 language. 3.4 application software part of the software of an I&C system that implements the application functions (IEC 61513) NOTE See also System software, Operational system software. BSIEC62138:2004 BS EN 62138:2009 5 Licensed Copy: Wang Bin, ISO/EXCHANGE CHINA STANDARDS, 13/05/2010 08:46, Unco

26、ntrolled Copy, (c) BSI63128 IE2:C 400 10 3.5 category of an I&C function one of three possible safety assignments (A, B, C) of I&C functions resulting from considerations of the importance to safety of the functions to be performed. An unclassified assignment may be made if the function is not signi

27、ficant to safety (IEC 61513) NOTE See also Class of an I&C system. 3.6 class of an I&C system one of three possible assignments (1, 2, 3) of I&C systems important to safety resulting from consideration of their requirement to implement I&C functions of differing importance to safety. An unclassified

28、 assignment is made if the I&C system does not implement functions important to safety (IEC 61513) NOTE See also Category of an I&C function. 3.7 complexity degree to which a system or component has a design, implementation or behaviour that is difficult to understand and verify (IEC 61513) 3.8 conf

29、iguration management discipline applying technical and administrative direction and surveillance to identify and document the functional and physical characteristics of a configuration item, control modifications to those characteristics, record and report changes in status, and verify compliance wi

30、th specified requirements (IEC 61513) 3.9 design specification document or set of documents that describe the organisation and functioning of an item, and that are used as a basis for the implementation and the integration of the item 3.10 documentation for safety document or set of documents that s

31、pecifies how a product can be safely used for applications important to safety 3.11 equipment family set of hardware and software components that may work co-operatively in one or more defined architectures (configurations). The development of plant specific configurations and of the related applica

32、tion software may be supported by software tools. An equipment family usually provides a number of standard functionalities (application functions library) that may be combined to generate specific application software (IEC 61513) NOTE 1 An equipment family may be a product of a defined manufacturer or a set of products interconnected and adapted by a supplier. NOTE 2 The term “Equipment platform” is sometime used as a synonym of “Equipment family”. BSIEC62138:2004 BS EN 62138:2009 6 Licensed Copy: Wang Bin, ISO/EXCHANGE CHINA STANDARDS, 13/05/2010 08:46, Uncontrolled Copy, (c) BSI