Smith / Simpson Safety Critical Systems Handbook

A Straight forward Guide to Functional Safety, IEC 61508 (2010 EDITION) and Related Standards, Including Process IEC 61511 and Machinery IEC 62061 and ISO 13849
1. Auflage 2010
ISBN: 978-0-08-096782-0
Verlag: Elsevier Science & Techn.
Format: EPUB
Kopierschutz: 6 - ePub Watermark

E-Book, Englisch, 288 Seiten

Safety Critical Systems Handbook: A Straightfoward Guide to Functional Safety, IEC 61508 (2010 Edition) and Related Standards, Including Process IEC 61511 and Machinery IEC 62061 AND ISO 13849, Third Edition, offers a practical guide to the functional safety standard IEC 61508. The book is organized into three parts. Part A discusses the concept of functional safety and the need to express targets by means of safety integrity levels. It places functional safety in context, along with risk assessment, likelihood of fatality, and the cost of conformance. It also explains the life-cycle approach, together with the basic outline of IEC 61508 (known as BS EN 61508 in the UK). Part B discusses functional safety standards for the process, oil, and gas industries; the machinery sector; and other industries such as rail, automotive, avionics, and medical electrical equipment. Part C presents case studies in the form of exercises and examples. These studies cover SIL targeting for a pressure let-down system, burner control system assessment, SIL targeting, a hypothetical proposal for a rail-train braking system, and hydroelectric dam and tidal gates. - The only comprehensive guide to IEC 61508, updated to cover the 2010 amendments, that will ensure engineers are compliant with the latest process safety systems design and operation standards - Helps readers understand the process required to apply safety critical systems standards - Real-world approach helps users to interpret the standard, with case studies and best practice design examples throughout

Dr. David J. Smith is the Proprietor of Technis Consultancy. He has written numerous books on Reliability and Safety over the last 40 years. His FARADIP database has become widely used, and his other software packages are also used throughout the profession. His PhD thesis was on the subject of reliability prediction and common cause failure. He contributed to the first drafting of IEC 61508 and chairs the IGEM panel which produces SR/15 (the gas industry safety related guidance). David is past President of the Safety and Reliability Society.

Autoren/Hrsg.

Smith, David J.

Simpson, Kenneth G. L.

Inhaltsverzeichnis

1;Front Cover;1
2;Safety Critical Systems Handbook;2
3;Copyright;3
4;Contents;4
5;A Quick Overview;14
6;The 2010 Version of IEC 61508;16
7;Acknowledgements;18
8;PART A -The Concept of Safety Integrity;20
8.1;Chapter 1 The Meaning and Context of Safety Integrity Targets;22
8.1.1;1.1 Risk and the Need for Safety Targets;23
8.1.2;1.2 Quantitative and Qualitative Safety Targets;26
8.1.3;1.3 The Life-cycle Approach;29
8.1.4;1.4 Steps in the Assessment Process;32
8.1.5;1.5 Costs;34
8.1.6;1.6 The Seven Parts of IEC 61508;35
8.2;Chapter 2 Meeting IEC 61508 Part 1;40
8.2.1;2.1 Establishing Integrity Targets;41
8.2.2;2.2 ALARP (“As low as Reasonably Practicable”);55
8.2.3;2.3 Functional Safety Management and Competence;57
8.2.4;IEC 61508 Part 1;63
8.3;Chapter 3 Meeting IEC 61508 Part 2;64
8.3.1;3.1 Organizing and Managing the Life-cycle;65
8.3.2;3.2 Requirements Involving the Specification;67
8.3.3;3.3 Requirements for Design and Development;68
8.3.4;3.4 Integration and Test (Referred to as Verification);74
8.3.5;3.5 Operations and Maintenance;74
8.3.6;3.6 Validation (Meaning Overall Acceptance Test and the Close Out-of Actions);75
8.3.7;3.7 Safety Manuals;75
8.3.8;3.8 Modifications;76
8.3.9;3.9 Acquired Sub-systems;76
8.3.10;3.10 “Proven in Use” (Referred to as Route 2s in the Standard);76
8.3.11;3.11 ASICs and CPU Chips;77
8.3.12;3.12 Conformance Demonstration Template;79
8.3.13;IEC 61508 PART 2;79
8.4;Chapter 4 Meeting IEC 61508 Part 3;86
8.4.1;4.1 Organizing and Managing the Software Engineering;87
8.4.2;4.2 Requirements Involving the Specification;91
8.4.3;4.3 Requirements for Design and Development;91
8.4.4;4.4 Integration and Test (Referred to as Verification);93
8.4.5;4.5 Validation (Meaning Overall Acceptance Test and Close Out of Actions);94
8.4.6;4.6 Safety Manuals;94
8.4.7;4.7 Modifications;95
8.4.8;4.8 Alternative Techniques and Procedures;96
8.4.9;4.9 Data Driven Systems;96
8.4.10;4.10 Some Technical Comments;97
8.4.11;4.11 Conformance Demonstration Template;100
8.5;Chapter 5 Reliability Modeling Techniques;108
8.5.1;5.1 Failure Rate and Unavailability;108
8.5.2;5.2 Creating a Reliability Model;109
8.5.3;5.3 Taking Account of Auto-test;117
8.5.4;5.4 Human Factors;121
8.6;Chapter 6 Failure Rate and Mode Data;126
8.6.1;6.1 Data Accuracy;126
8.6.2;6.2 Sources of Data;129
8.6.3;6.3 Data Ranges and Confidence Levels;132
8.6.4;6.4 Conclusions;134
8.7;Chapter 7 Demonstrating and Certifying Conformance;136
8.7.1;7.1 Demonstrating Conformance;136
8.7.2;7.2 The Current Framework for Certification;137
8.7.3;7.3 Self Certification (Including Some Independent Assessment);138
8.7.4;7.4 Preparing for Assessment;141
8.7.5;7.5 Summary;142
9;PART B -Specific Industry Sectors;144
9.1;Chapter 8 Second-tier Documents – Process, Oil and Gas Industries;146
9.1.1;8.1 IEC International Standard 61511: Functional Safety – Safety Instrumented Systems for the Process Industry Sector;147
9.1.2;8.2 Institution of Gas Engineers and Managers IGEM/SR/15:Programmable Equipment in Safety-related Applications e 5thEdition 2010;156
9.1.3;8.3 Guide to the Application of IEC 61511 to Safety Instrumented Systems in the UK Process Industries;157
9.1.4;8.4 ANSI/ISA-84.00.01 (2004) – Functional Safety, Instrumented Systems for the Process Sector;158
9.1.5;8.5 Recommended Guidelines for the Application of IEC 61508 and IEC 61511 in the Petroleum Activities on the Norwegian ...;158
9.2;Chapter 9 Machinery Sector;160
9.2.1;9.1 EN ISO 14121;160
9.2.2;9.2 EN ISO 13849;162
9.2.3;9.3 BS EN 62061;167
9.3;Chapter 10 Other Industry Sectors;170
9.3.1;10.1 Rail;171
9.3.2;10.2 UK MOD Documents;174
9.3.3;10.3 Earth Moving Machinery;175
9.3.4;10.4 C Coding Standard (MISRA – Motor Industries Research Association) – Development Guidelines for Vehicle Based Prog ...;176
9.3.5;10.5 Automotive;176
9.3.6;10.6 IEC International Standard 61513: Nuclear Power Plants – Instrumentation and Control for Systems Important to Saf ...;178
9.3.7;10.7 Avionics;179
9.3.8;10.8 Medical – IEC 60601: Medical Electrical Equipment, General Requirements for Basic Safety and Essential Performance;180
9.3.9;10.9 Stage and Theatrical Equipment;181
9.3.10;10.10 Electrical Power Drives;182
9.3.11;10.11 Documents which are now Withdrawn;182
10;PART C -Case Studies in the Form of Exercises and Examples;186
10.1;Chapter 11 Pressure Control System (Exercise);188
10.1.1;11.1 The Unprotected System;188
10.1.2;11.2 Protection System;189
10.1.3;11.3 Assumptions;190
10.1.4;11.4 Reliability Block Diagram;190
10.1.5;11.5 Failure Rate Data;190
10.1.6;11.6 Quantifying the Model;191
10.1.7;11.7 Proposed Design and Maintenance Modifications;192
10.1.8;11.8 Modeling Common Cause Failure (Pressure Transmitters);192
10.1.9;11.9 Quantifying the Revised Model;193
10.1.10;11.10 ALARP;194
10.1.11;11.11 Architectural Constraints;194
10.2;Chapter 12 Burner Control Assessment (Example);196
10.2.1;Executive Summary and Recommendations;197
10.2.2;12.1 Objectives;198
10.2.3;12.2 Integrity Requirements;198
10.2.4;12.3 Assumptions;201
10.2.5;12.4 Results;202
10.2.6;12.5 Failure Rate Data;206
10.2.7;12.6 References;207
10.3;Chapter 13 SIL Targeting – Some Practical Examples;212
10.3.1;13.1 A Problem Involving EUC/SRS Independence;212
10.3.2;13.2 A Hand-held Alarm Intercom, Involving Human Error in the Mitigation;214
10.3.3;13.3 Maximum Tolerable Failure Rate Involving Alternative Propagations to Fatality;214
10.3.4;13.4 Hot/cold Water Mixer Integrity;216
10.3.5;13.5 Scenario Involving High Temperature Gas to a Vessel;218
10.3.6;13.6 Example using the LOPA Technique;220
10.4;Chapter 14 Hypothetical Rail Train Braking System (Example);224
10.4.1;14.1 The Systems;224
10.4.2;14.2 The SIL Targets;225
10.4.3;14.3 Assumptions;226
10.4.4;14.4 Failure Rate Data;226
10.4.5;14.5 Reliability Models;227
10.4.6;14.6 Overall Safety Integrity;228
10.5;Chapter 15 Rotorcraft Accidents and Risk Assessment;234
10.5.1;15.1 Helicopter Incidents;234
10.5.2;15.2 Floatation Equipment Risk Assessment;236
10.6;Chapter 16 Hydro-electric Dam and Tidal Gates;240
10.6.1;16.1 Flood-gate Control System;240
10.6.2;16.2 Spurious Opening of Either of Two Tidal Lock Gates Involving a Trapped Vessel;246
11;APPENDIX 1 -Functional Safety Management;250
11.1;Template Procedure;250
11.2;Company Standard xxx Implementation of Functional Safety;250
11.3;Annex A;258
11.4;Notes on the Second-level Work Instructions 001-008;258
12;APPENDIX 2 -Assessment Schedule;260
12.1;1 Defining the Assessment and the Safety System;260
12.2;2 Describing the Hazardous Failure Mode and Safety Targets;261
12.3;3 Assessing the Random Hardware Failure Integrity of the Proposed Safety-related System;261
12.4;4 Assessing the Qualitative Integrity of the Proposed Safety-related System;262
12.5;5 Reporting and Recommendations;262
12.6;6 Assessing Vendors;263
12.7;7 Addressing Capability and Competence;263
13;APPENDIX 3 -Betaplus CCF Model, Scoring Criteria;264
13.1;Checklist for Equipment Containing Programmable Electronics;264
13.2;Checklist and Scoring for Non-programmable Equipment;265
14;APPENDIX 4 -Assessing Safe Failure Fraction and Diagnostic Coverage;268
14.1;1 Failure Mode and Effect Analysis;268
14.2;2 Rigor of the Approach;269
15;APPENDIX 5 -Answers to Examples;272
15.1;Answer to Exercise 1 (Chapter 2.1.1d);272
15.2;Answer to Exercise 2 (Chapter 2.1.1d);272
15.3;Answer to Exercise 3 (Chapter 2.1.1d);273
15.4;Answer to Exercise 4 (Chapter 2.2);273
15.5;Answer to Exercises (Chapter 11);273
15.6;Comments on Example (Chapter 12);277
16;APPENDIX 6 -References;280
17;APPENDIX 7 -Quality and Safety Plan;282
17.1;1 Responsibilities (by name and must be listed in the company competency register);282
17.2;2 Life-cycle Details;282
17.3;3 Hazard Analysis and Risk Assessment;282
17.4;4 Items/deliverables to be Called for and Described in Outline;282
17.5;5 Descriptions of;283
18;APPENDIX 8 -Some Terms and Jargon of IEC 61508;284
18.1;Software packages;286
19;Index;288