EN 61131-6-2012 en Programmable controllers - Part 6 Functional safety.pdf

1、raising standards worldwideNO COPYING WITHOUT BSI PERMISSION EXCEPT AS PERMITTED BY COPYRIGHT LAWBSI Standards PublicationProgrammable controllersPart 6: Functional safetyBS EN 61131-6:2012National forewordThis British Standard is the UK implementation of EN 61131-6:2012. It isidentical to IEC 61131

2、-6:2012.The UK participation in its preparation was entrusted by Technical CommitteeGEL/65, Measurement and control, to Subcommittee GEL/65/2, Elements ofsystems.A list of organizations represented on this committee can be obtained onrequest to its secretary.This publication does not purport to incl

3、ude all the necessary provisions of acontract. Users are responsible for its correct application. The British Standards Institution 2013Published by BSI Standards Limited 2013ISBN 978 0 580 76606 0ICS 25.040.40; 35.240.50Compliance with a British Standard cannot confer immunity fromlegal obligations

4、.This British Standard was published under the authority of the StandardsPolicy and Strategy Committee on 31 March 2013.Amendments issued since publicationAmd. No. Date Text affectedBRITISH STANDARDBS EN 61131-6:2012EUROPEAN STANDARD EN 61131-6 NORME EUROPENNE EUROPISCHE NORM November 2012 CENELEC E

5、uropean Committee for Electrotechnical Standardization Comit Europen de Normalisation Electrotechnique Europisches Komitee fr Elektrotechnische Normung Management Centre: Avenue Marnix 17, B - 1000 Brussels 2012 CENELEC - All rights of exploitation in any form and by any means reserved worldwide for

6、 CENELEC members. Ref. No. EN 61131-6:2012 E ICS 25.040.40; 35.240.50 English version Programmable controllers - Part 6: Functional safety (IEC 61131-6:2012) Automates programmables - Partie 6: Scurit fonctionnelle (CEI 61131-6:2012) Speicherprogrammierbare Steuerungen Teil 6: Funktionale Sicherheit

7、 (IEC 61131-6:2012) This European Standard was approved by CENELEC on 2012-11-06. CENELEC members are bound to comply with the CEN/CENELEC Internal Regulations which stipulate the conditions for giving this European Standard the status of a national standard without any alteration. Up-to-date lists

8、and bibliographical references concerning such national standards may be obtained on application to the CEN-CENELEC Management Centre or to any CENELEC member. This European Standard exists in three official versions (English, French, German). A version in any other language made by translation unde

9、r the responsibility of a CENELEC member into its own language and notified to the CEN-CENELEC Management Centre has the same status as the official versions. CENELEC members are the national electrotechnical committees of Austria, Belgium, Bulgaria, Croatia, Cyprus, the Czech Republic, Denmark, Est

10、onia, Finland, Former Yugoslav Republic of Macedonia, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, the Netherlands, Norway, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden, Switzerland, Turkey and the United Kingdom. BS EN 61131-6:2012

11、EN 61131-6:2012 - 2 - Foreword The text of document 65B/831/FDIS, future edition 1 of IEC 61131-6, prepared by SC 65B, “Devices with the major emphasis on the Realization Phase (Box 10) of the overall safety lifecycle, shown in Figure 1. The assumption of this part is that the FS-PLC is utilized as

12、a logic subsystem for the overall E/E/PE system. The Figure 1, Realization (box 10), includes: the allocation of the FS-PLC safety aspects to FS-PLC hardware, software or firmware, or any combination, FS-PLC hardware architectures, verification and validation activities at the FS-PLC level, FS-PLC m

13、odification requirements, operation and maintenance information for the FS-PLC user, information to be provided by the FS-PLC manufacturer for the user. IEC 1817/12 BS EN 61131-6:2012 10 61131-6 IEC:2012 PROGRAMMABLE CONTROLLERS Part 6: Functional safety 1 Scope This Part of the IEC 61131 series spe

14、cifies requirements for programmable controllers (PLCs) and their associated peripherals, as defined in Part 1, which are intended to be used as the logic subsystem of an electrical/electronic/programmable electronic (E/E/PE) safety-related system. A programmable controller and its associated periph

15、erals complying with the requirements of this part is considered suitable for use in an E/E/PE safety-related system and is identified as a functional safety programmable logic controller (FS-PLC). An FS-PLC is generally a hardware (HW) / software (SW) subsystem. An FS-PLC may also include software

16、elements, for example predefined function blocks. An E/E/PE safety-related system generally consists of sensors, actuators, software and a logic subsystem. This part is a product specific implementation of the requirements of the IEC 61508 series and conformity to this part fulfils all of the applic

17、able requirements of the IEC 61508 series related to FS-PLCs. While the IEC 61508 series is a system standard, this part provides product specific requirements for the application of the principles of the IEC 61508 series to FS-PLC. This Part of the IEC 61131 series addresses only the functional saf

18、ety and safety integrity requirements of an FS-PLC when used as part of an E/E/PE safety-related system. The definition of the functional safety requirements of the overall E/E/PE safety-related system and the functional safety requirements of the ultimate application of the E/E/PE safety-related sy

19、stem are outside the scope of this part, but they are inputs for this part. For application specific information the reader is referred to standards such as the IEC 61511 series, IEC 62061, and the ISO 13849 series. This part does not cover general safety requirements for an FS-PLC such as requireme

20、nts related to electric shock and fire hazards specified in IEC 61131-2. This part applies to an FS-PLC with a Safety Integrity Level (SIL) capability not greater than SIL 3. The objective of this part is: to establish and describe the safety life-cycle elements of an FS-PLC, in harmony with the gen

21、eral safety life-cycle identified in IEC 61508-1, -2 and -3; to establish and describe the requirements for FS-PLC HW and SW that relate to the functional safety and safety integrity requirements of a E/E/PE safety-related system; to establish evaluation methods for a FS-PLC to this part for the fol

22、lowing parameters/criteria: a Safety Integrity Level (SIL) claim for which the FS-PLC is capable, a Probability of Failure on Demand (PFD) value, an average frequency of dangerous failure per hour value (PFH), a value for the safe failure fraction (SFF), a value for the hardware fault tolerance (HFT

23、), a diagnostic coverage (DC) value, a verification that the specified FS-PLC manufacturers safety lifecycle processes are in place, BS EN 61131-6:201261131-6 IEC:2012 11 the defined safe state, the measures and techniques for the prevention and control of systematic faults, and for each failure mod

24、e addressed in this part, the functional behaviour in the failed state; to establish the definitions and identify the principal characteristics relevant to the selection and application of FS-PLCs and their associated peripherals. This part is primarily intended for FS-PLC manufacturers. It also inc

25、ludes the critical role of FS-PLC users through the user documentation requirements. Some user guidelines for FS-PLCs may be found in IEC 61131-4. The requirements of ISO/IEC Guide 51 and IEC Guide 104, as they relate to this part, are incorporated herein. 2 Normative references The following docume

26、nts, in whole or in part, are normatively referenced in this document and are indispensable for its application. For dated references, only the edition cited applies. For undated references, the latest edition of the referenced document (including any amendments) applies. IEC 60947-5-1:2003, Low-vol

27、tage switchgear and controlgear Part 5-1: Control circuit devices and switching elements Electromechanical control circuit devices IEC/TS 61000-1-2:2008, Electromagnetic compatibility (EMC) Part 1-2: General Methodology for the achievement of functional safety of electrical and electronic systems in

28、cluding equipment with regard to electromagnetic phenomena IEC 61000-4-2:2008, Electromagnetic compatibility (EMC) Part 4-2: Testing and measurement techniques Electrostatic discharge immunity test IEC 61000-4-3:2006, Electromagnetic compatibility (EMC) Part 4-3: Testing and measurement techniques R

29、adiated, radio-frequency, electromagnetic field immunity test IEC 61000-4-4:2012, Electromagnetic compatibility (EMC) Part 4-4: Testing and measurement techniques Electrical fast transient/burst immunity test IEC 61000-4-5:2005, Electromagnetic compatibility (EMC) Part 4-5: Testing and measurement t

30、echniques Surge immunity test IEC 61000-4-6:2008, Electromagnetic compatibility (EMC) Part 4-6: Testing and measurement techniques Immunity to conducted disturbances, induced by radio-frequency fields IEC 61000-4-8:2009, Electromagnetic compatibility (EMC) Part 4-8: Testing and measurement technique

31、s Power frequency magnetic field immunity test IEC 61131-1:2003, Programmable controllers Part 1: General information IEC 61131-2:2007, Programmable controllers Part 2: Equipment requirements and tests IEC 61131-4:2004, Programmable controllers Part 4: User guidelines IEC 61326-3-1:2008, Electrical

32、equipment for measurement, control and laboratory use EMC requirements Part 3-1: Immunity requirements for safety-related systems and for BS EN 61131-6:2012 12 61131-6 IEC:2012 equipment intended to perform safety-related functions (functional safety) General industrial applications IEC 61326-3-2:20

33、08, Electrical equipment for measurement, control and laboratory use EMC requirements Part 3-2: Immunity requirements for safety-related systems and for equipment intended to perform safety-related functions (functional safety) Industrial applications with specified electromagnetic environment IEC 6

34、1508-1:2010, Functional safety of electrical/electronic/programmable electronic safety-related systems Part 1: General requirements IEC 61508-2:2010, Functional safety of electrical/electronic/programmable electronic safety-related systems Part 2: Requirements for electrical/electronic/programmable

35、electronic safety-related systems IEC 61508-3:2010, Functional safety of electrical/electronic/programmable electronic safety-related systems Part 3: Software requirements IEC 61508-6:2010, Functional safety of electrical/electronic/programmable electronic safety-related systems Part 6: Guidelines o

36、n the application of IEC 61508-2 and IEC 61508-3 IEC 61784-3:2010, Industrial communication networks Profiles Part 3: Functional safety fieldbuses General rules and profile definitions IEC 62443 (all parts), Industrial communication networks Network and system security IEC Guide 104:2010, The prepar

37、ation of safety publications and the use of basic safety publications and group safety publications ISO/IEC Guide 51:1999, Safety aspects Guidelines for their inclusion in standards EN 50205:2002, Relays with forcibly guided (mechanically linked) contacts 3 Terms and definitions For the purposes of

38、this document, the following terms and definitions apply. 3.1 application program application software part of the software of a programmable electronic system that specifies the functions that perform a task related to the EUC rather than the functioning of, and services provided by the programmabl

39、e device itself SOURCE: IEC 61508-4:2010, 3.2.7 3.2 application specific integrated circuit ASIC integrated circuit designed and manufactured for specific function, where its functionality is defined by the product developer SOURCE: IEC 61508-4:2010, 3.2.15 3.3 architecture specific configuration of

40、 hardware and software elements in a system BS EN 61131-6:201261131-6 IEC:2012 13 SOURCE: IEC 61508-4:2010, 3.3.4 3.4 availability the probability that an item is able to perform its intended function, expressed as a decimal value between zero and one EXAMPLE A = 0,9 means that a product is availabl

41、e 90 % of the time. Note 1 to entry: For T 1, A = 1 T, See 3.23. 3.5 average frequency of a dangerous failure per hour PFH average frequency of a dangerous failure of an E/E/PE safety-related system to perform the specified safety function over a given period of time Note 1 to entry: The term “proba

42、bility of dangerous failure per hour” is not used in this standard but the acronym PFH has been retained but when it is used it means “average frequency of dangerous failure h”. Note 2 to entry: From a theoretical point of view, the PFH is the average of the unconditional failure intensity, also cal

43、led failure frequency, and which is generally designated w(t). It should not be confused with a failure rate (see Annex B of IEC 61508-6:2010). Note 3 to entry: When the E/E/PE safety-related system is the ultimate safety layer, the PFH should be calculated from its unreliability F(T)=1-R(t) (see fa

44、ilure rate above). When it is not the ultimate safety-related system its PFH should be calculated from its unavailability U(t) (see PFD, 3.38). PFH approximations are given by F(T)/T and 1/MTTF in the first case and 1/MTBF in the second case. Note 4 to entry: When the E/E/PE safety-related system im

45、plies only quickly repaired revealed failures then an asymptotic failure rate asis quickly reached. It provides an estimate of the PFH. SOURCE: IEC 61508-4:2010, 3.6.19 3.6 black channel parts of a communication channel which are not designed or validated according to the IEC 61508 series Note 1 to

46、entry: See: 7.4.11.2 of IEC 61508-2:2010. 3.7 channel element or group of elements that separately implement an element safety function EXAMPLE A two-channel (or dual-channel) configuration is one with two channels that independently perform the same function. Note 1 to entry: The term can be used t

47、o describe a complete system, or a portion of a system (for example, sensors or final elements). SOURCE: IEC 61508-4:2010, 3.3.6 3.8 common cause failure CCF failure, that is the result of one or more events, causing concurrent failures of two or more separate channels in a multiple channel system,

48、leading to system failure SOURCE: IEC 61508-4:2010, 3.6.10 3.9 cyber security protection of data in computer and information systems from loss or corruption due to intentional or unintentional activities by unauthorized or malicious individuals BS EN 61131-6:2012 14 61131-6 IEC:2012 Note 1 to entry:

49、 This term concerns the defence against such activities via network or other communication interfaces. 3.10 dangerous failure FS-PLC failure of an element and/or subsystem and/or system that plays a part in implementing the safety function that: a) prevents a safety function from operating when required (demand mode) or causes a safety function to fail (continuous mode) such that the EUC is put into a haza