ISA TR84 00 08-2017 Guidance for Application of Wireless Sensor Technology to Non-SIS Independent Protection Layers.pdf

1、 NOTICE OF COPYRIGHT This is a copyright document and may not be copied or distributed in any form or manner without the permission of ISA. This copy of the document was made for the sole use of the person to whom ISA provided it and is subject to the restrictions stated in ISAs license to that pers

2、on. It may not be provided to any other person in print, electronic, or any other form. Violations of ISAs copyright will be prosecuted to the fullest extent of the law and may result in substantial civil and criminal penalties. TECHNICAL REPORT ISA-TR84.00.08-2017 Guidance for Application of Wirele

3、ss Sensor Technology to Non-SIS Independent Protection Layers Approved 24 April 2017 ISA-TR84.00.08-2017, Guidance for Application of Wireless Sensor Technology to Non-SIS Independent Protection Layers ISBN: 978-1-945541-56-8 Copyright 2017 by the International Society of Automation. All rights rese

4、rved. Printed in the United States of America. No part of this publication may be reproduced, stored in a retrieval system, or transmitted in any form or by any means (electronic, mechanical, photocopying, recording, or otherwise), without the prior written permission of the publisher. ISA 67 T.W. A

5、lexander Drive P.O. Box 12277 Research Triangle Park, North Carolina 27709 E-mail: standardsisa.org 3 ISA-TR84.00.08-2017 Preface This preface, as well as all footnotes, is included for information purposes only and is not part of ISA-TR84.00.08-2017. This technical report has been prepared as part

6、of the service of ISA, the International Society of Automation, toward a goal of uniformity in the field of automation. To be of real value, this document should not be static but should be subject to periodic review. Toward this end, the Society welcomes all comments and criticisms and asks that th

7、ey be addressed to the Secretary, Standards and Practices Board; ISA, 67 T.W. Alexander Drive; P.O. Box 12277; Research Triangle Park, NC 277099; Telephone (919) 549-8411; Fax (919) 549-8288; E-mail: standardsisa.org. The ISA Standards and Practices Department is aware of the growing need for attent

8、ion to the metric system of units in general, and the International System of Units (SI) in particular, in the preparation of instrumentation standards, recommended practices, and technical reports. The Department is further aware of the benefits of USA users of ISA standards of incorporating suitab

9、le references to the SI (and the metric system) in their business and professional dealings with other countries. Toward this end, the Department will endeavor to introduce SI and acceptable metric units in all new and revised standards to the greatest extent possible. The Metric Practice Guide, whi

10、ch has been published by the Institute of Electrical and Electronics Engineers (IEEE) as ANSI/IEEE Std. 268-1992, and future revisions, will be the reference guide for definitions, symbols, abbreviations, and conversion factors. It is the policy of ISA to encourage and welcome the participation of a

11、ll interested individuals in the development of ISA standards. Participation in the ISA standards-making process by an individual in no way constitutes endorsement by the employer of that individual, of ISA, or of any of the standards, recommended practices, and technical reports that ISA develops.

12、CAUTION ISA ADHERES TO THE POLICY OF THE AMERICAN NATIONAL STANDARDS INSTITUTE WITH REGARD TO PATENTS. IF ISA IS INFORMED OF AN EXISTING PATENT THAT IS REQUIRED FOR USE OF THE DOCUMENT, IT WILL REQUIRE THE OWNER OF THE PATENT TO EITHER GRANT A ROYALTY-FREE LICENSE FOR USE OF THE PATENT BY USERS COMP

13、LYING WITH THE DOCUMENT OR A LICENSE ON REASONABLE TERMS AND CONDITIONS THAT ARE FREE FROM UNFAIR DISCRIMINATION. EVEN IF ISA IS UNAWARE OF ANY PATENT COVERING THIS DOCUMENT, THE USER IS CAUTIONED THAT IMPLEMENTATION OF THE DOCUMENT MAY REQUIRE USE OF TECHNIQUES, PROCESSES, OR MATERIALS COVERED BY P

14、ATENT RIGHTS. ISA TAKES NO POSITION ON THE EXISTENCE OR VALIDITY OF ANY PATENT RIGHTS THAT MAY BE INVOLVED IN IMPLEMENTING THE DOCUMENT. ISA IS NOT RESPONSIBLE FOR IDENTIFYING ALL PATENTS THAT MAY REQUIRE A LICENSE BEFORE IMPLEMENTATION OF THE DOCUMENT OR FOR INVESTIGATING THE VALIDITY OR SCOPE OF A

15、NY PATENTS BROUGHT TO ITS ATTENTION. THE USER SHOULD CAREFULLY INVESTIGATE RELEVANT PATENTS BEFORE USING THE DOCUMENT FOR THE USERS INTENDED APPLICATION. HOWEVER, ISA ASKS THAT ANYONE REVIEWING THIS DOCUMENT WHO IS AWARE OF ANY PATENTS THAT MAY IMPACT IMPLEMENTATION OF THE DOCUMENT NOTIFY THE ISA ST

16、ANDARDS AND PRACTICES DEPARTMENT OF THE PATENT AND ITS OWNER. ADDITIONALLY, THE USE OF THIS DOCUMENT MAY INVOLVE HAZARDOUS MATERIALS, OPERATIONS OR EQUIPMENT. THE DOCUMENT CANNOT ANTICIPATE ALL POSSIBLE APPLICATIONS OR ADDRESS ALL POSSIBLE SAFETY ISSUES ASSOCIATED WITH USE IN HAZARDOUS CONDITIONS. T

17、HE USER OF THIS DOCUMENT MUST EXERCISE SOUND PROFESSIONAL JUDGMENT CONCERNING ITS USE AND APPLICABILITY UNDER THE USERS PARTICULAR CIRCUMSTANCES. THE USER MUST ALSO CONSIDER THE APPLICABILITY OF ANY GOVERNMENTAL REGULATORY LIMITATIONS AND ESTABLISHED SAFETY AND HEALTH PRACTICES BEFORE IMPLEMENTING T

18、HIS DOCUMENT. ISA-TR84.00.08-2017 4 THE USER OF THIS DOCUMENT SHOULD BE AWARE THAT THIS DOCUMENT MAY BE IMPACTED BY ELECTRONIC SECURITY ISSUES. THE COMMITTEE HAS NOT YET ADDRESSED THE POTENTIAL ISSUES IN THIS VERSION. ISA (www.isa.org) is a nonprofit professional association that sets the standard f

19、or those who apply engineering and technology to improve the management, safety, and cybersecurity of modern automation and control systems used across industry and critical infrastructure. Founded in 1945, ISA develops widely used global standards; certifies industry professionals; provides educati

20、on and training; publishes books and technical articles; hosts conferences and exhibits; and provides networking and career development programs for its 40,000 members and 400,000 customers around the world. ISA owns A, a leading online publisher of automation-related content, and is the founding sp

21、onsor of The Automation Federation (www.automationfederation.org), an association of non-profit organizations serving as “The Voice of Automation.“ Through a wholly owned subsidiary, ISA bridges the gap between standards and their implementation with the ISA Security Compliance Institute (www.isasec

22、ure.org) and the ISA Wireless Compliance Institute (www.isa100wci.org). This technical report is a work product of the ISA84 standards development committee. The following served as leaders of ISA84 during the technical reports development and publication: NAME/AFFILIATION LEADERSHIP POSITION Rahul

23、Bhojani, BP Co-Chair Paul Gruhn, aeSolutions Co-Chair Richard Dunn, DuPont Vice Chair Nicholas Sands, DuPont Co-Managing Director Dennis Zetterberg, Chevron Co-Managing Director This technical report was developed by ISA84 Working Group 8 under the shared leadership of Kevin Klein and Greg LaFramboi

24、se of Chevron, and Ted Schnaare of Emerson. The following served as members of the ISA Standards and Practices Board and approved the document on 24 April 2017: NAME AFFILIATION M. Wilkins, Vice President Yokogawa D. Bartusiak ExxonMobil Research the current lack of standard methods for determining

25、contribution of a mesh-style network to PFD/PFH (probability of failure on demand / probability of failure per hour) calculations and for evaluating the common cause contribution that would be introduced via a network shared between an initiating event and SCAI or between SCAI (common for wireless n

26、etworks); and insufficient guidance addressing the systematic errors that can occur as a result of introducing obstructions or additional sources of inte rference in the wireless signal transmission path(s). To simplify the discussion of wireless in this TR, it does not address wireless final elemen

27、ts and wireless systems where the logic for the function is located in a device of the network. The number of variables and complexity of implementing the logic in a device, similar to a fieldbus, would distract from the intent of this TR. In most cases, final elements for functions are not implemen

28、ted with wireless devices due to the limitations of battery life. This TR identifies additional considerations to be addressed during the design stage and the operating and maintenance phase of the safety life cycle when wireless technology is used in the implementation of a protection layer. This p

29、age intentionally left blank. 11 ISA-TR84.00.08-2017 1 Scope 1.1 This technical report (TR) addresses wireless technology-based sensors that are used in Independent Protection Layers (IPLs) providing a risk reduction factor of less than or equal to 10 (non-SIS IPL) by the authority having jurisdicti

30、on (typically the owner/operator or local regulatory authority), and establishes guidance and considerations for their utilization in the process sector. The use of wireless technology for higher risk reduction factors such as a Safety Instrumented Function has been specifically excluded from consid

31、eration in the scope of this technical report. 1.2 This TR does not address codes, regulations, and other requirements that apply only to the nuclear power industry. 1.3 This TR provides guidance in design and maintenance of wireless sensors used in a non-SIS IPL. 1.4 Recognizing that wireless senso

32、r networks will have mixed data, not only risk reduction data but other process monitoring data as well, this TR applies to the wireless functions related only to risk reduction. 1.5 This TR provides guidance for fixed wireless sensor networks and portable and traveling wireless sensors that may per

33、iodically move from one part of a facility to another. The guidance provided is applicable for the periods of time when the sensors are connected to the network. An example of a sensor that periodically moves is a temperature monitoring point on a rail car. 1.6 Typical architectures for wireless sen

34、sor networks are shown in this TR; the guidance and considerations provided apply to both the sensor network as well as the associated wireless backhaul. 1.7 This TR does not cover notification classification (for example, alarms and alerts) or personnel actions associated with alarms. Refer to ANSI

35、/ISA-18.2-2016 (see References immediately following) for alarm requirements. 2 References The following documents are referenced in this document and are indispensable for its application. For each document, the latest edition (including any amendments) applies. ANSI/ISA-84.91.01, Identification an

36、d Mechanical Integrity of Safety Controls, Alarms , and Interlocks for the Process Industries ANSI/ISA-18.2, Management of Alarm Systems for Process Industries (www.isa.org/standards) 3 Definitions of terms and acronyms 3.1 Definitions Definitions and terminology used in this technical report are de

37、fined in ISA-84.00.012 Part 1, Clause 3 (see bibliography). Additional definitions of terms used in this TR that are not previously defined are as follows: ISA-TR84.00.08-2017 12 3.1.1 backhaul a portion of a network that links smaller sub-networks to a main or core network 3.1.2 data packet a seque

38、nce of digital data representing a message or part of a message together with service digits including an address, organized to suit the transmission process and transmitted as a whole SOURCE: IEC 60050 ref. 721-09-02 22 3.1.3 fixed wireless wireless devices which do not move or move such a small di

39、stance that their network connections are not disturbed 3.1.4 gateway network device that is capable of caching wireless sensor network data and/or converting the wireless sensor network protocol to host protocols 3.1.5 latency the delay from input into a system to some desired output 3.1.6 Listen B

40、efore Talk (LBT) a technique used in radio communications whereby a radio transmitter first senses its radio environment before it starts a transmission SOURCE: IEEE 802.11 16 3.1.7 non-SIS IPL instrumented Independent Protection Layers which achieve a target risk reduction of less than or equal to

41、10. 3.1.8 portable wireless wireless devices which can move but remain fixed while performing their functions and do not maintain communications when being moved 3.1.9 stale data data which is no longer up to date 3.1.10 throughput the rate of successful message delivery over a communications channe

42、l NOTE Throughput is usually measured in bits per second (bit/s or bps), and sometimes in data packets per second (p/s or pps) or data packets per time slot. 3.1.11 traveling wireless wireless devices that work when moving slowly within a restricted area and maintain communications 13 ISA-TR84.00.08

43、2017 3.1.12 Wireless Sensor Network Access Point (WSN AP) a wireless sensor network node that also has a wired connection and serves as an entry/exit point for wireless sensor data 3.2 acronyms A complete list of acronyms can be found in ISA-84.00.012 Part 1, Clause 3. The abbreviated terms and acr

44、onyms used in this document include: Table 1 Acronyms Abbreviation Full expression AES Advanced Encryption Standard ANSI American National Standards Institute BPCS Basic Process Control System CRC Cyclic Redundancy Check dBm Decibel-milliwatts DoS Denial of Service IEC International Electrotechnical

45、 Commission I/O Input / Output IPL Independent Protection Layer IRT IPL Response Time ISA International Society of Automation ISM Unlicensed radio bands intended for Industrial, Scientific, and Medical uses ISO International Organization for Standardization KPI Key Performance Indicator LQI Link Qua

46、lity Indicator MIC Message Integrity Check MOC Management of Change NIST US National Institute of Standards and Technology NTP Network Time Protocol PER Packet Error Rate RFI Radio Frequency Interference RSL Receive Signal Level SAT Site Acceptance Testing SCAI Safety Controls, Alarms, and Interlock

47、s SIF Safety Instrumented Function SIL Safety Integrity Level SIS Safety Instrumented System SSL Secure Sockets Layer Wi-Fi AP Wi-Fi Access Point WSN AP Wireless Sensor Network Access Point WSN Wireless Sensor Network ISA-TR84.00.08-2017 14 4 Wireless sensor network design 4.1 Introduction Wireless

48、sensors and sensor networks addressed in this technical report are typically characterized by the following: Wireless sensors will have a shape and size similar to wired sensors. The sensing element, radio, and battery will be contained within the instrument body. Wireless sensors are typically batt

49、ery powered although some devices may be powered from other sources such as environmental energy harvesters. Wireless sensors achieve long battery life through duty cycled operation resulting in typical battery life in the range of 5 to 10 years. Radios contained within wireless sensors generally operate in industrial, scientific and medical (ISM) radio bands, notably in the 2.4 and 5 GHz bands. Wireless sensors typically have user-configurable update periods. Data transmission may have variable latency (jitter) due to path