Manual 26815 QuickTrip Electro-Hydraulic Trip Block Assembly
Woodward 47
Chapter 6.
Safety Management
Product Variations Certified
The functional safety requirement in this manual applies to all QuickTrip variations.
These products are certified for use in applications up to SIL3 according to
IEC61508.
Figure 6-1. TUV Rheinland SIIL Certification Stamp
Safe State
The QuickTrip is designed so that the safe state is configured for de-energize to trip. De-energize to trip
will place the valves into their open state.
The de-energize-to-trip functionality is implemented such that a complete loss of power to the module
results in a trip of that module. When power is again supplied to the electrical modules, they will power up
in the tripped state when a trip condition is present or in the run state when a run condition is present.
Table 6-1. De-Energize-to-Trip Functionality
Configuration
State
State
De-energize to trip, trip
condition present
Tripped Tripped
De-energize to trip, run
condition present
Tripped Not Tripped
SIL Specifications
PFD and PFH calculations have been performed on the QuickTrip according
IEC61508. For SIL3, IEC states the following requirements.
Table 6-2. Calculation Types and SIL 3 Values
PFH ≥ 10
-8
to < 10
-7
PFD ≥ 10
-4
to < 10
-3
SFF ≥ 60% to < 90%