8
Safety concept
4 Safety
Instruction book, IQAN-MC3
For the IQAN-MC3, the maximum achievable Performance Level and Safety Integrity
Level is shown in the following table.
System boundaries
The safety integrity of the IQAN-MC3 covers:
• All inputs (VIN, DIN, FIN, DFIN)
• All sensor supplies (VREF)
• All outputs (COUT, DOUT)
• Core electronics (processor, memory, power supply)
•CAN
For the functions above, the following restrictions apply:
• I/O must be installed and used in accordance with this manual
• Information sent over CAN must also be protected by the high level protocol
The following internal diagnostic information is used for keeping the IQAN-MC3
within the specified range, and may not be used for implementation of safety functions:
• Measurement of module supply voltage
• Measurement of module temperature
The following built in functionality of the IQAN-MC3 is seen as non-safety related:
•Logs
• LED diagnostics
NOTICE
The IQAN-MC3 does not come with any pre existing safety function implemented. An
application file must always be created in IQANdesign before the module can be used.
Average probability of dangerous
failure per hour [1/h]
EN 13849-1 PL EN 62061 SIL IEC61508 SIL
>10
-5
to < 10
-4
a- -
>3 ·10
-6
to < 10
-5
b11
>
10
-6
to < 3 ·10
-6
c11
>
10
-7
to < 10
-6
d22
>10
-8
to < 10
-7
e33
- - 4
Maximum achievable Performance Level,
EN ISO 13849-1 PLd
Maximum achievable Safety Integrity Level,
EN IEC 62061 SIL2
Maximum achievable Safety Integrity Level,
EN IEC 61508 SIL2