1、BRITISH STANDARD BS EN60671:2011Nuclear power plants Instrumentation and control systems important to safety Surveillance testingICS 27.120.20nullnull nullnullnullnullnullnullnull nullnullnullnullnullnullnull nullnullnull nullnullnullnullnullnullnullnullnullnull nullnullnullnullnullnull nullnull nul
2、lnullnullnullnullnullnullnullnull nullnull nullnullnullnullnullnullnullnullnull nullnullnullCopyright European Committee for Electrotechnical Standardization Provided by IHS under license with CENELECNot for ResaleNo reproduction or networking permitted without license from IHS-,-,-National foreword
3、This British Standard is the UK implementation of EN 60671:2011. It supersedes BS IEC 60671:2007 which is withdrawn.The UK participation in its preparation was entrusted to Technical Committee NCE/8, Reactor instrumentation.A list of organizations represented on this committee can be obtained on req
4、uest to its secretary.This publication does not purport to include all the necessary provisions of a contract. Users are responsible for its correct application.Compliance with a British Standard cannot confer immunity from legal obligations.BS EN 60671:2011This British Standard waspublished under t
5、he authorityof the Standards Policy andStrategy Committeeon 29 June 2007 BSI 2011ISBN 978 0 580 70691 2Amendments/corrigenda issued since publicationDate Comments 31 October 2011 This corrigendum renumbers BS IEC 60671:2007 as BS EN 60671:2011Copyright European Committee for Electrotechnical Standar
6、dization Provided by IHS under license with CENELECNot for ResaleNo reproduction or networking permitted without license from IHS-,-,-EUROPEAN STANDARD EN 60671 NORME EUROPENNE EUROPISCHE NORM August 2011 CENELEC European Committee for Electrotechnical Standardization Comit Europen de Normalisation
7、Electrotechnique Europisches Komitee fr Elektrotechnische Normung Management Centre: Avenue Marnix 17, B - 1000 Brussels 2011 CENELEC - All rights of exploitation in any form and by any means reserved worldwide for CENELEC members. Ref. No. EN 60671:2011 E ICS 27.120.20 English version Nuclear power
8、 plants - Instrumentation and control systems important to safety - Surveillance testing (IEC 60671:2007) Centrales nuclaires de puissance - Systmes dinstrumentation et de contrle-commande importants pour la sret - Essais de surveillance (CEI 60671:2007) Kernkraftwerke - Leittechnik fr Systeme mit s
9、icherheitstechnischer Bedeutung - Prfungen zur Sicherstellung der Funktionsfhigkeit (IEC 60671:2007) This European Standard was approved by CENELEC on 2011-08-08. CENELEC members are bound to comply with the CEN/CENELEC Internal Regulations which stipulate the conditions for giving this European Sta
10、ndard the status of a national standard without any alteration. Up-to-date lists and bibliographical references concerning such national standards may be obtained on application to the Central Secretariat or to any CENELEC member. This European Standard exists in three official versions (English, Fr
11、ench, German). A version in any other language made by translation under the responsibility of a CENELEC member into its own language and notified to the Central Secretariat has the same status as the official versions. CENELEC members are the national electrotechnical committees of Austria, Belgium
12、, Bulgaria, Croatia, Cyprus, the Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, the Netherlands, Norway, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden, Switzerland and the United Kingdom. Copy
13、right European Committee for Electrotechnical Standardization Provided by IHS under license with CENELECNot for ResaleNo reproduction or networking permitted without license from IHS-,-,-Foreword The text of the International Standard IEC 60671:2007, prepared by SC 45A, Instrumentation and control o
14、f nuclear facilities, of IEC TC 45, Nuclear instrumentation, was submitted to the formal vote and was approved by CENELEC as EN 60671 on 2011-08-08 without any modification. Attention is drawn to the possibility that some of the elements of this document may be the subject of patent rights. CEN and
15、CENELEC shall not be held responsible for identifying any or all such patent rights. The following dates were fixed: latest date by which the EN has to be implemented at national level by publication of an identical national standard or by endorsement (dop) 2012-08-08 latest date by which the nation
16、al standards conflicting with the EN have to be withdrawn (dow) 2014-08-08 As stated in the nuclear safety directive 2009/71/EURATOM, Chapter 1, Article 2, item 2, Member States are not prevented from taking more stringent safety measures in the subject-matter covered by the Directive, in compliance
17、 with Community law. In a similar manner, this European standard does not prevent Member States from taking more stringent nuclear safety measures in the subject-matter covered by this standard. Annex ZA has been added by CENELEC. _ Endorsement notice The text of the International Standard IEC 60671
18、:2007 was approved by CENELEC as a European Standard without any modification. _ BS EN 60671:2011 EN 60671:2011 (E) 2 Copyright European Committee for Electrotechnical Standardization Provided by IHS under license with CENELECNot for ResaleNo reproduction or networking permitted without license from
19、 IHS-,-,-Annex ZA (normative) Normative references to international publications with their corresponding European publications The following referenced documents are indispensable for the application of this document. For dated references, only the edition cited applies. For undated references, the
20、 latest edition of the referenced document (including any amendments) applies. NOTE When an international publication has been modified by common modifications, indicated by (mod), the relevant EN/HD applies. Publication Year Title EN/HD Year IEC 60880 - Nuclear power plants - Instrumentation and co
21、ntrol systems important to safety - Software aspects for computer-based systems performing category A functions EN 60880 - IEC 60987 - Nuclear power plants - Instrumentation and control important to safety - Hardware design requirements for computer-based systems EN 60987 - IEC 61226 - Nuclear power
22、 plants - Instrumentation and control important to safety - Classification of instrumentation and control functions EN 61226 - IEC 61513 - Nuclear power plants - Instrumentation and control for systems important to safety - General requirements for systems - - IEC 62138 - Nuclear power plants - Inst
23、rumentation and control important for safety - Software aspects for computer-based systems performing category B or C functions EN 62138 - IAEA Safety guide NS-G-1.3 - Instrumentation and control systems important to safety in nuclear power plants - - BS EN 60671:2011 EN 60671:2011 (E) 3 Copyright E
24、uropean Committee for Electrotechnical Standardization Provided by IHS under license with CENELECNot for ResaleNo reproduction or networking permitted without license from IHS-,-,-CONTENTSINTRODUCTION.1 Scope.2Normative References3Terms and definitions.4Basic Principlesfor Surveillance Testing4.1Gen
25、eral.4.2Gradation of Requirements Based on Category.14.3Extent of Surveillance Testing.14.4Self-supervision in Lieu of Periodic Testing.14.5Continuous Operation in Lieu of PeriodicTesting 15General Requirements for Surveillance Testing15.1 Design Requirements15.2Procedures15.3Data to be recorded upo
26、n detectionof a fault15.4Other data to be recorded .15.5Test intervals15.6Verification of actuation set-points.15.7Bypass15.8Response time 15.9Restoration16Requirements for Testing of Sensors and Signal Processing Devices.16.1General.16.2Non-tested parts16.3Testing devices .16.4Signals16.5Variation
27、ofsignals16.5.1General .16.5.2Slowly changing signal16.5.3Rapidly changing signal.16.5.4Large change in signal 16.6Operability.16.7Sensor response time16.8Testing equipment.16.9Calibration and transfer function16.10 Surveillance17Requirements for Testing of Electromechanical Equipment.17.1General.17
28、.2Interface17.3Typical functional tests17.4Continuous monitoring.17.5Relays and valves.18Requirements for Testing of Logic Assemblies.8.1Scope8.2General.6899111122233344455556666667777778888888999202020BS EN 60671:2011 EN 60671:2011 (E) 4 Copyright European Committee for Electrotechnical Standardiza
29、tion Provided by IHS under license with CENELECNot for ResaleNo reproduction or networking permitted without license from IHS-,-,-8.3Switching ofsignals.8.4Testing signals8.5Interface8.6Data to bedisplayed8.7Data to be recorded.8.8Detailed display.8.9Testing equipment.8.10 Testing equipment using pu
30、lses 29Self-supervision in computer-based Itest of a group of equipment or components to confirm properties that support the safetyfunction (continuity, power availability, etc.);testbased on information redundancy or comparison of control signatures (consistencychecking for redundant sensors, CRC-c
31、hecking, Checksum, etc.);periodic testing which is related to the correctnessof functional behaviour of an I however, they may be combined withthe surveillance testing discussed herein. For anyon-line tests the potential interaction and fault dependencies between the part ofthesystem under test and
32、the testing part, have to be carefully studied and their influenceshave to be fullyintegrated into the reliability assessment of the functionsimportant to safety (inaccordance with IEC 61513).BS EN 60671:2011 EN 60671:2011 (E) 8 Copyright European Committee for Electrotechnical Standardization Provi
33、ded by IHS under license with CENELECNot for ResaleNo reproduction or networking permitted without license from IHS-,-,-This standard applies to the I this subset is t o be identified at the beginning of any project.SignalprocessingLogicassemblyActuatingdevice MSensor Extent ofI operationalbypass: a
34、bypass of certain protective actions when theyare not necessaryin a particularmode of plant operation IAEA Safety Glossary, Ed. 2.0 2006NOTE 1 A maintenance bypass that is applied to a channel may still leave the safety function operable throughredundancy and majority voting (e.g. two out of four co
35、incidence logic becomes two out of three).NOTE 2 A maintenance bypass is not the same as an operational bypass. Amaintenance bypass may reduce the degree of redundancy of equipment, but it does not result in the loss of a safety function.3.4full functional testtestthat includes perturbation of the p
36、rocess variable, detection by the sensor, processing of the signal(s), actuation of the appropriate sub-assemblies, logic assemblies and actuationdevices 3.5functional reliability ability to comply with requirements on complete and correct functionalityand performance in:a) all defined plant operati
37、onal modes and conditions,b) in all defined plant I the state after switching is stable and correct; thetime delay or the time constant has the correct value.5.2 ProceduresPeriodic tests shall be made on the basis of carefully prepared test programmes in whichidentification ofthe testedparts, test c
38、ondition sincluding initial plant state, test proceduresand test periods are stated. 5.3Datato be recorded upon detection of a fault Upon detection of a fault at least the following data shall be recorded: identification of the tested part; test device description;detectable fault combinations; date
39、 and time of the test during which faults have been detected;period between this test and the previous testthat would ha ve permitted the detection ofthe faults; type of failure which could becaused by the fault incase of demand;operating mode of I authorization signature(s); title of test programme
40、; action taken when fault is detected.5.4Other data to be recorded 5.4.1 After each test where no fault was detected at least the following data shall be recorded: test frequency (for automatic tests only); test schedule used; date, time and duration of thetest(for manually initiated tests); identif
41、ication of tested equipment.NOTE It is recommended that statistical data related to the test results be carefully recorded and analyzed to give realistic “failure rate” data. When such data become available with a reasonable confidence level, they should be compared with the frequency of testing to
42、determine whether modification of the frequency in either direction isappropriate.BS EN 60671:2011 EN 60671:2011 (E) 14 Copyright European Committee for Electrotechnical Standardization Provided by IHS under license with CENELECNot for ResaleNo reproduction or networking permitted without license fr
43、om IHS-,-,-5.4.2 Anynon-safetyrelevant valuesthat can be measured during the surveillance test sshould be analysed from the maintenance pointof viewand recorded. The onlylimitation of thesemeasurements is that they shall not jeopardise t he safetysurveillance te sting.5.5 Test intervals Thetest inte
44、rval is the relevant design parameter for the demonstration thatreliability and availability goalsare met for the system under consideration. The test intervals shall be basedon mathematical rel ations involving the reliability and availability goals, the type of systemarchitecture, the expected fau
45、lt-rate or experienced fault-rate, test durationand permissible system unavailability. 5.6Verification of actuation set-points5.6.1 Testing to verify actuati on set-points that are continuously calculated or likewisetesting toverifya calculated complex safety function witha fixed set-point level sha
46、ll beperformed by manipulating each variable that enters into the computation. While the signal forone or more variables is being varied toachieve actuation or change in computer output, the signalsfor the other variablesshould be adjusted to normal expected valuesfor the actuation condition.5.6.2 F
47、or computer-based I for example, testing the actuation device for a system pump separately fromthe actuation device for thesystemvalves. 7.2.3 The operation of certain actuatedequipment shallbe preventedduringa testof the related actuation devices; for example, moving the circuit breaker for a pump
48、to a test position that preventspower from being supplied to the pump during a test closure ofits circuitbreaker. Operation of the actuated equipment itself shall be tested when plant conditionspermit in a way that overlaps this test. 7.2.4 Operation of the actuatedequipment shall require the coincident operation of more than one actuator device; for example, individualtesting of the two solenoid-operatedvalvesthat act in coincidence to control compressed air to an is olation valve.7.2.5 Designin accordance with the requirements of7.2.3 or 7.2.4 shall be justified on thebas
