T
M
(a)
CCFHFTSCCat.
DC
(%)
MTTF
D
(a)
PFD
avg
(T
1
= 5
a)
PFD
avg
(T
1
= 2
a)
PFH
(T
1
= 20
a)
(1/h)
SFF
(%)
PL
SIL/
SILCL
Frame
size
2080133≥9010008
6.66E-
05
2.66E-
05
3.21E-
09
99.1e3
R6
R7
R8
R9
3AXD10000006217 K, 3AXD10000083197 H
• The following temperature profile is used in safety value calculations:
•
670 on/off cycles per year with ΔT = 71.66 °C
•
1340 on/off cycles per year with ΔT = 61.66 °C
•
30 on/off cycles per year with ΔT = 10.0 °C
• 32 °C board temperature at 2.0% of time
• 60 °C board temperature at 1.5% of time
• 85 °C board temperature at 2.3% of time.
• The STO is a type A safety component as defined in IEC 61508-2.
• Relevant failure modes:
• The STO trips spuriously (safe failure)
• The STO does not activate when requested
• A fault exclusion on the failure mode “short circuit on printed circuit board” has
been made (EN 13849-2, table D.5). The analysis is based on an assumption
that one failure occurs at one time. No accumulated failures have been analyzed.
• STO response times:
• STO reaction time (shortest detectable break): 1 ms
• STO response time: 2 ms (typical), 5 ms (maximum)
• Fault detection time: Channels in different states for longer than 200 ms
• Fault reaction time: Fault detection time + 10 ms
• Indication delays:
•
STO fault indication (parameter 31.22) delay: < 500 ms
•
STO warning indication (parameter 31.22) delay: < 1000 ms
The Safe torque off function 291