1、ANSI/IEC/ASQ D60300-3- 1-1997 Dependability management Part 3: application guide- Section 1: analysis techniques for dependability: Guide on methodology Approved as an American National Standard by: American Society for Quality COPYRIGHT American Society for QualityLicensed by Information Handling S
2、ervicesSTD-ASQ Db03-3-1-ENGL 1977 O75950b 00023b7 387 ANSI/IEC/ASQ D60300-3-1-1997 AMERICAN NATIONAL STANDARD Dependability Management-Part 3: Application Guide- Section I: Analysis Techniques for Dependability: Guide on Methodology Approved as an American National Standard by: American Society for
3、Quality An American National Standard Approved on September 16, 1997 American National Standards: An American National Standard implies a consensus of those substantially concerned with its scope and provisions. An American National Standard is intended as a guide to aid the manufacturer, the consum
4、er, and the general public. The existence of an American National Standard does not in any respect preclude anyone, whether he or she has approved the standard or not, from manufacturing, purchasing, or using products, processes, or procedures not conforming to the standard. American National Standa
5、rds are subject to periodic review and users are cautioned to obtain the latest edition. Caution Notice: This American National Standard may be revised or withdrawn at any time. The procedures of the American National Standards Institute require that action be taken to reaffirm, revise, or withdraw
6、this standard no later than five years from the date of publication. Purchasers of American National Standards may receive current information on all standards by calling or writing the American National Standards Institute. COPYRIGHT American Society for QualityLicensed by Information Handling Serv
7、ices STD.ASQ Db0300-3-1-ENGL 1997 m 075950b 0002370 OTO 01991 by IEC Copyright Protection Notice for the A NSi/iEC/ASQ 060300-3- I- 1997 Standard. This standard is subject to copyright claims of IEC, ANSI and ASQ. Not for resale. No part of this publication may be reproduced in any form, including a
8、n electronic retrieval system, without the prior written permission of ASQ. All requests pertaining to the ANSI/IEC/ASQ D60300-3-1-1997 standard should be submitted to ASQ. Note: As used in the document, the term “International Standard” refers to the American National Standard adoption of this and
9、other International Standards. ASQ Mission: To facilitate continuous improvement and increase customer satisfac- tion by identifying, communicating, and promoting the use of quality principles, con- cepts, and technologies; and thereby be recognized throughout the world as the leading authority on,
10、and champion for, quality. 1098 76543 2 1 Printed in the United States of America Printed on acid-free paper Published by: Amerlcan Society for Quality Quality Press 61 1 East Wisconsin Avenue Milwaukee, Wisconsin 53201 -3005 Web site http:/www.asq.org 800-248-1 946 COPYRIGHT American Society for Qu
11、alityLicensed by Information Handling ServicesANSVIEC/ASQ D60300-3-1-1997 Contents Page Foreword . 1 Introduction 2 Clause Scope . 3 Normative references 3 Definitions . 3 General 4 Basic approach to system dependability analysis 4 5.1 General procedure 4 5.2 Analysis of functional structure . 7 5.3
12、 Deductive analysis 7 5.4 Inductive analysis 7 5.5 Maintenance and repair analysis and considerations . 8 Characteristics of various dependability analysis methods 8 6.1 Selecting the appropriate analysis method . 8 6.2 Short descriptions of analysis methods . 8 6.3 Explanations to table 2 10 6.4 Ad
13、vantages and disadvantages of methods . 14 Annex A Other reference . 18 iii COPYRIGHT American Society for QualityLicensed by Information Handling Services STD-ASQ Db0300-3-1-ENGL 1777 075750b 0002372 773 m 56( CO) 138 ANSI/I EC/ASQ D60300-3-1-1997 56(CO) 1 46 Dependability Management Part 3: Applic
14、ation guide Section 1 : Analysis techniques for dependability: Guide on methodology Foreword 1) The formal decisions or agreements of the IEC on technical matters, prepared by Technical Committees on which all the National Committees having a special interest therein are represented, express, as nea
15、rly as possible, an international consensus of opinion on the subjects dealt with. 2) They have the form of recommendations for international use and they are accepted by the National Committees in that sense. 3) In order to promote international unification, the IEC expresses the wish that all Nati
16、onal Committees should adopt the text of the IEC recommendation for their national rules in so far as national condi- tions will permit. Any divergence between the IEC recommendation and the corresponding national rules should, as far as possible, be clearly indicated in the latter. This Internation
17、al Standard has been prepared by IEC Technical Committee No. 56: Dependability. The text of this standard is based on the following documents: 1 Six Months Rule 1 Report on Voting 1 Full information on the voting for the approval of this standard can be found in the Voting Report indi- cated in the
18、above table. Annex A is for information only. 1 COPYRIGHT American Society for QualityLicensed by Information Handling ServicesSTD=ASQ Db0300-3-L-ENGL 1997 D 075950b 0002373 BOT W ANSVIEC/ASQ D60300-3-1-1997 Introduction Dependability analysis techniques are used for the review and prediction of the
19、 reliability, availability, maintainability and safety measures of a system. Dependability analyses are conducted mainly during the concept and definition phase, the design and development phase, and the operation and maintenance phase at various system levels and degrees of detail in order to evalu
20、ate and determine the dependability measures of a system or an installation. They are also used to compare the results of the analysis with specified requirements. 2 COPYRIGHT American Society for QualityLicensed by Information Handling ServicesANSI/IEC/ASQ D60300-3 -1 -1 997 Dependability Managemen
21、t Part 3: Application guide Section 1 : Analysis techniques for dependability: Guide on methodology 1 Scope This International Standard gives a general overview of commonly used dependability analysis proce- dures. It describes the usual methodologies, the advantages and disadvantages, data input an
22、d other requirements for the various techniques. This guide is an introduction to the available methodology and is intended to provide the analyst with the necessary Information In order to choose the analysis method most appropriate to the system. Available IEC standards, providing details, are ind
23、icated in table 2. 2 Normative references The following normative documents contain provisions which, through reference in this text, constitute provisions of this International Standard. At the time of publication the editions indicated were valid. All normative documents are subject to revision, a
24、nd parties to agreements based on this International Standard are encouraged to investigate the possibility of applying the most recent edition of the norma- tive documents indicated below. Members of IEC and IS0 maintain registers of currently valid International Standards. IEC 60050( 191): 1990, I
25、nternational Electrotechnical Vocabulary, Chapter 191: Dependability and quality of service. IEC 6081 2: 1985, Analysis techniques for system reliability-Procedure for failure mode and effects analysis (FMEA). IEC 61 025: 1990, Fault tree analysis (RA). IEC 61 078: 1991, Analysis techniques for depe
26、ndability-eliability block diagram method. 3 Definitions Terms and definitions are in accordance with Chapter 191 of the International Electrotechnical Vocabulary. In addition, the following definitions are applicable for this standard: 3.1 system: Item on the highest level considered in the analysi
27、s. 3.2 component: Item on the lowest level considered in the analysis. 3.3 allocation: A procedure applied during the design of an item intended to apportion the require- ments for performance measures for an item to its subitems according to given criteria. NOTE-”System” may be replaced by “sub-sys
28、tem,” etc., as applicable 3 COPYRIGHT American Society for QualityLicensed by Information Handling ServicesSTD-ASQ Db0300-3-1-ENGL 1997 075950b 0002375 b82 ANSI/IEC/ASQ D60300-3-1-1997 4 General The analysis methods allow the evaluation of qualitative characteristics and estimation of measures (e.9.
29、 failure rate, MnF, MTBF, reliability, steady state availability) which describe the predicted long-term operating behaviour of a system. In order to perform a systematic and reproducible system analysis, use of a consistent procedure is essential. However, no single dependability analysis method is
30、 sufficiently comprehensive and flexible to deal with ail the possible model complexities required to evaluate the features of practical systems (hardware and software. complex functional structures, various technologies, repairable and maintainable structures, etc.). It may be necessary to consider
31、 several additional analysis methods to ensure proper treatment of complex or multi-functional systems. 5 Basic approach to system dependability analysis Specific procedures for analysis are contained in the standards describing each analysis method. General procedures, approaches and requirements a
32、re described hereinafter. 5.1 General procedure The procedure consists of the following steps (as applicable): Step 1 List all system reliability and availability requirements, characteristics and features, together with envi- ronmental and operating conditions, and maintenance requirements. Define
33、the system to be analyzed, its modes of operation, the functional relationships to higher levels and to interfacing systems or processes. Step 2 Define system fault, fault criteria and conditions based on system functional requirements, expected operation and operating environment. Software performa
34、nce should also be considered. Step 3 When numerical results are required, it is recommended to carry out an allocation based on a prelimi- nary design (assignment of a portion of the total permitted system failure rate or unavailability to each su b-system). 4 COPYRIGHT American Society for Quality
35、Licensed by Information Handling Services - STD-ASQ Db0300-3-1-ENGL 1777 = 075750b 000237b 517 ANSI/IEC/ASQ D60300=3=1 -I 997 Step 4 Analysis of the system as follows: 4.7) Qualitative analysis (deductive/inductive methodology): Analyze the functional system structure, determine system/component fau
36、lt modes, failure mecha- nisms, effects and consequences of failures, consider item maintainability, construct reliability and/or availability models, determine possible maintenance and repair strategies, etc. 4.2) Quantitative analysis (analytical or event simulation methods): Obtain or identify it
37、em reliability data (e.9. failure rates), construct mathematical reliability and/or availability models, perform numerical evaluations of mathematical models, perform component crit- icality and sensitivity analyses, evaluate improvement of system performance due to redundant sub- structures and mai
38、ntenance strategies, etc. Step 5 Evaluation of results, comparison with requirements and/or alternative designs. Additional activities may include: 5.7) Reviewing system design, determining weaknesses, unbalances, critical/high risk fault modes and items, considering system interface problems, fail-
39、safe features and mechanisms, etc. 5.2) Developing alternative ways for improving dependability (e.g. redundancy allocation, perfor- mance monitoring, fault detection, system reconfiguration procedures, maintainability, component replaceability, and repair procedures). 5.3) Performing trade-off stud
40、ies and evaluating the cost of alternative designs. The relationships between the general analysis procedure and the specific methods and procedures are given in table 1 (note that table 1 is not exhaustive). The methods are explained further in 5.2 to 5.5 inclusive. 5 COPYRIGHT American Society for
41、 QualityLicensed by Information Handling ServicesSTD=ASQ Db0300-3-II-ENGL II797 075950b 0002377 Li55 Componentlsub- system/system reliability and availability, main- tenance and repair policy, sys- tem structure System structure, redundancy alle cation, compo- nent selection, repair policy, sys- tem
42、 reconfigura- tion, etc. Determine most economical solution Determine high- est component failure rates Re-evaluate choice of weakest components Estimate cost ANSI/IEC/ASQ D60300-3-1-1997 Table I-Correspondence of methods to general analysis procedure Steps of general procedure Analysis methods Acti
43、vity FTA Fault tree analysis RBD Reliability block diagram MA Markov analysis PC Parts count relia- bility prediction FMWFMECA Fault mode and effects/criticality analysis Component specification and operation System and sub- system operation Component func- tion, functional system structure Componen
44、t specification and failure data Requirements and system definition Functional system structure Failure of first order functional level Undesired (top) event Criteria of system success (failure) Criteria of system successand failure Failure of first order functional level Definition of system fault
45、I Reliability apportionment If applicable to components If applicable to su b-systems If applicable to su b-systems su b-systems components Qualitative analy- sis maintenance strategy Inductive (table) Deductive (fault tree) Deductive (block diagram) Inductive/deduc- tive (state transi- tion diagram
46、) Assume series system structure, list and evaluate components Fault criticality/ probability analysis - Calculation of system reliability and availability measures Probability of undesired event within require- ment? Calculation of system reliability and availability measures Reliability/ availabil
47、ity req u irement met? Quantitative analysis (numeri- cal evaluation) Calculation of system reliability and availability measures Reliability/ availability requirements met? Calculation of components and system failure rates Does estimated system failure rate meet require- ments? Requirements met (t
48、erminate procedure?) Criticality of fail- ures and failure probabilities within limits? Review design, determine weaknesses Component fail- ure modes, failure rates etc. Su b-system/com- ponent failure modes, failure rates, system structure, etc. Sub-system relia- bility/availability, sub-system/cor
49、n- ponent failure rates, system structure, etc. Develop alterna- tive designs Component selection and maintenance etc. System structure, redundancy allocation, fault detection, mainte- nance, etc. System structure, redundancy allo- cation, compo- nent selection, maintenance, etc. Determine most economical solution Determine most economical solution Perform trade-off studies and cost- evaluation Determine most economical solution 6 COPYRIGHT American Society for QualityLicensed by Information Handling ServicesSTD.ASQ Db0300-3-1-ENGL ltqq? m 075750b O002378 371 m
