12
48-651 SIL Certified Safety Manual for E3 Modulevel
®
8.2 Safety Function Requirements
This section lists the Safety Function Requirements that
specify what safety relevant functionality is to be performed
for implementation of the safety integrity function and also
to maintain the desired level of safety integrity. These
requirements may also rule out particular functionality for
SIF usage that could lead to designs that are difficult to vali-
date for deterministic performance or safety integrity.
Safety Function Requirement
Upon application of power and successful initialization, the Model E3 MODULEVEL shall enter the Normal Mode
or Faulted Mode of operation.
Upon application of power and successful initialization, the Model E3 MODULEVEL shall enter the Normal Mode
operation within 5 seconds.
Upon application of power and successful initialization, the Model E3 MODULEVEL shall enter the Faulted Mode
of operation in less than 8 seconds.
The Model E3 MODULEVEL shall transition to the Faulted Mode from the Normal Mode within the Diagnostic Test
Interval after a diagnostic event occurs. The safety function will respond to a change from the user’s process with-
in the safety (function) response time.
The Model E3 MODULEVEL shall transition to the Faulted Mode from the Normal Mode within the Diagnostic Test
Interval of 3 seconds after a diagnostic event occurs.
The safety function output of the Model E3 MODULEVEL shall respond to a change from the user’s process with-
in the safety (function) response time of 3 seconds assuming Damping is set to 0.
The Model E3 MODULEVEL may leave the Faulted Mode when all diagnostics are clear.
8.3 Safety User Programming and
Configuration Requirements
The Safety User Programming and Configuration
Requirements provide the requirements for field configura-
tion of the device required to create and maintain SIF con-
figurations. These requirements should provide the neces-
sary guidance to ensure that the engineering environment
will meet both the intended market and safety certification
requirements, along with guidance and user restrictions doc-
umented in the safety manual.
Safety User Programming Requirement
Setup, configuration, and maintenance functionality for the Model E3 MODULEVEL shall be supported by the
non-interfering HART communications interface.
Setup, configuration and maintenance functionality for the Model E3 MODULEVEL shall be supported by the non-
interfering Local User Interface.
To Next Page
Loading...
Need help?
General
