1756-RM001B-EN-P, Using ControlLogix in SIL2 ... - Tuv-fs.com

More documents

Recommendations

Info

9-8 Technical SIL2 Requirements for the Application Program• If online edits exist in the standard routines only, those edits arenot required to be validated before returning to normaloperation. Users must verify that changes in the standard routinedo not affect SIL routines.IMPORTANTIf any changes are needed to the program in thesafety loop, they must be done so in accordancewith IEC 61511-1, paragraph 11.7.1.5 which states:"The Safety Instrumentation System (SIS) operatorinterface design shall be such as to prevent changesto SIS application software. Where safety informationneeds to be transmitted from the basic processcontrol system (BPCS) to the SIS then systems shouldbe used which can selectively allow writing from theBPCS to specific SIS variables. Equipment orprocedures should be applied to confirm the properselection has been transmitted and received by theSIS and does not compromise the safety function ofthe SIS."Also, for more information on changing the SIL2application program, see Chapter 10.ForcingThe following rules apply to forcing in an RSLogix 5000 project:• Users must remove forces on all SIL2 tags before beginningnormal operation for the project.• Users cannot force SIL2 tags while a project is in the Run mode.Publication 1756-RM001B-EN-P - October 2003
Chapter 10Use and Application of Human toMachine InterfacesNo specific device is part of the certification because the variety ofdevices is so large, ranging from simple thumb-wheel and LEDreadouts to PC/CRT-based human to machine interface (HMI) deviceson a variety of networks. The range and breadth of these devices issimilar to that of sensors and actuators; it would be impractical toimpose device restrictions.Using Precautions andTechniques with HMIHowever, users must exercise the same precautions and techniqueson HMI devices as on simple devices such as sensor and switchinputs. The precautions include, but are not restricted to:• Limited access and security• Specifications, testing and validation• Restrictions on data and access• Limits on data and parametersFor more information on how HMI devices fits into a typical SIL loop,see Figure 1.2 on page 1-4.Sound techniques should be used in either the application softwarewithin the HMI or PLC in safety-related systems and non-safety-relatedsystems.Accessing Safety-Related SystemsNormally, when accessing the safety-related system, the HMI shouldbe restricted to read data and information such as diagnostics. Theuser should use techniques to limit access to only those sections ofmemory that are appropriate. For more information, see Figure 1.2 onpage 1-4.If parameters in safety-related system require a change from an HMI,users should follow the guidelines indicated in the next section.1 Publication 1756-RM001B-EN-P - October 2003
Page 1:
Using ControlLogixin SIL2 Applicati
Page 4 and 5:
Summary of Changes 2Notes:Publicati
Page 6 and 7:
Preface 2Table Preface.1Section: Ti
Page 8 and 9:
Table of Contents 2ControlLogix Com
Page 10 and 11:
Table of Contents 4Additional Infor
Page 12 and 13:
1-2 SIL PolicyThe TUV Rheinland has
Page 14 and 15:
1-4 SIL PolicySIL2 CertificationFig
Page 16 and 17:
1-6 SIL PolicySIL2-Certified Contro
Page 18 and 19:
1-8 SIL PolicyHardware Designs andF
Page 20 and 21:
1-10 SIL PolicyCatalogNumberDescrip
Page 22 and 23:
1-12 SIL PolicyCatalogNumberDescrip
Page 24 and 25:
1-14 SIL PolicySIL ComplianceDistri
Page 26 and 27:
1-16 SIL PolicyProgram Watchdog Tim
Page 28 and 29:
2-2 The ControlLogix SystemIf an an
Page 30 and 31:
2-4 The ControlLogix SystemData Ech
Page 32 and 33:
2-6 The ControlLogix SystemSoftware
Page 34 and 35:
2-8 The ControlLogix SystemNotes:Pu
Page 36 and 37:
3-2 ControlLogix System HardwareCon
Page 38 and 39:
3-4 ControlLogix System HardwareRec
Page 40 and 41: 3-6 ControlLogix System HardwareNot
Page 42 and 43: 4-2 ControlLogix ControllerRecommen
Page 44 and 45: 5-2 ControlLogix Communications Mod
Page 46 and 47: 5-4 ControlLogix Communications Mod
Page 48 and 49: 6-2 ControlLogix I/O ModulesFigure
Page 50 and 51: 6-4 ControlLogix I/O ModulesModule
Page 52 and 53: 6-6 ControlLogix I/O ModulesWiring
Page 54 and 55: 6-8 ControlLogix I/O ModulesGeneral
Page 58 and 59: 6-12 ControlLogix I/O ModulesApplic
Page 60 and 61: 6-14 ControlLogix I/O Modules• Ch
Page 66 and 67: 6-20 ControlLogix I/O ModulesUsing
Page 68 and 69: 6-22 ControlLogix I/O ModulesFigure
Page 72 and 73: 6-26 ControlLogix I/O ModulesCheckl
Page 74 and 75: 7-2 Faults in the ControlLogix Syst
Page 76 and 77: 7-4 Faults in the ControlLogix Syst
Page 78 and 79: 8-2 General Requirements for Applic
Page 84 and 85: 9-2 Technical SIL2 Requirements for
Page 92 and 93: 10-2 Use and Application of Human t
Page 94 and 95: 10-4 Use and Application of Human t
Page 96 and 97: A-2 Response Times in ControlLogixE
Page 98 and 99: A-4 Response Times in ControlLogixR
Page 100 and 101: B-2 System Self-Testing and User-Pr
Page 102 and 103: C-2 Additional Information on Handl
Page 104 and 105: D-2 Spurious Failure EstimatesNotes
Page 106 and 107: E-2 Sample Probability of Failure o
Page 108 and 109: E-4 Sample Probability of Failure o
Page 110: 2 IndexMMean time between failures
show all

1756-RM001B-EN-P, Using ControlLogix in SIL2 ... - Tuv-fs.com

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?