SAFETY INFORMATION (IN ENGLISH)
System requirements
The product holds a safety-related stop function that complies with the requirements for SIL3 according
to IEC61508:
The stop function deactivates all relays on the receiver when the stop button on the transmitter is
pressed. The stop function is available on all Tiger systems. The maximum delay of the stop function is
500 ms. The stop function complies with the requirements for SIL3 according to IEC61508 only when it
is a part of a complete end user system that complies with the requirements for SIL3 according to
IEC61508.
Connecting and controlling the safety function
The stop function controls the stop relays from the stop button. In order to comply with the
requirements for SIL3 according to IEC61508, the safety-related function shall use its corresponding
two relay output in an active redundant configuration in a safety-related application.
Measures for probability of hardware failures
Transmitter stop function
Probability of dangerous failure per hour PFHd= 8.5 FITs (=λdu)
Fraction of total failure rate with dangerous and
detected consequence
λdd= 357 FITs
Diagnostic coverage DC= 98.3%
Safe failure fraction SFF= 99.1 %
Common cause failure 0 FIT
Level of hardware fault tolerance HFT = 1
Proof test interval 10 years
Diagnostic test interval Continuous
Receiver stop function
Probability of dangerous failure per hour PFHd = 30.1 FITs (=λdu)
Fraction of total failure rate with dangerous and
detected consequence
λdd = 685.0 FITs
Diagnostic coverage DC = 96.9 %
Safe failure fraction SFF = 98.7 %
Common cause failure 8.0 FIT
Level of hardware fault tolerance HFT = 1
Proof test interval 10 years
Diagnostic test interval Continuous
Radio communication between transmitter and
receiver
Probability of dangerous failure per hour PFHd = 3.0 FITs
Stop functionfor a completesystem*
Probability of dangerous failure per hour PFHd = 41.6 FITs(=λdu)
* Acomplete system = transmitter + radio communication + receiver
- 6 -
To Next Page
Loading...
Need help?
General
