SIST EN 61800-5-2:2017

Adjustable speed electrical power drive systems - Part 5-2: Safety requirements - Functional (IEC 61800-5-2:2016)

This part of IEC 61800, which is a product standard, specifies requirements and makes
recommendations for the design and development, integration and validation of safety related
power drive systems (PDS(SR)) in terms of their functional safety considerations. It applies to
adjustable speed electrical power drive systems covered by the other parts of the IEC 61800
series of standards as referred in IEC 61800-2.
NOTE 1 The term “integration” refers to the PDS(SR) itself, not to its incorporation into the safety-related
application.
NOTE 2 Other parts of IEC 61800 cover rating specifications, EMC, electrical safety, etc.
This International Standard is applicable where functional safety of a PDS(SR) is claimed and
the PDS(SR) is operating mainly in the high demand or continuous mode (see 3.15)
While low demand mode operation is possible for a PDS(SR), this standard concentrates on
high demand and continuous mode. Safety sub-functions implemented for high demand or
continuous mode can also be used in low demand mode. Requirements for low demand mode
are given in IEC 61508 series. Some guidance for the estimation of average probability of
dangerous failure on demand (PFDavg) value is provided in Annex F.
This part of IEC 61800 sets out safety-related considerations of PDS(SR)s in terms of the
framework of IEC 61508, and introduces requirements for PDS(SR)s as subsystems of a
safety-related system. It is intended to facilitate the realisation of the electrical/ electronic/
programmable electronic (E/E/PE) parts of a PDS(SR) in relation to the safety performance of
safety sub-function(s) of a PDS.
Manufacturers and suppliers of PDS(SR)s by using the normative requirements of this part of
IEC 61800 will indicate to users (system integrator, original equipment manufacturer) the
safety performance for their equipment. This will facilitate the incorporation of a PDS(SR) into
a safety-related control system using the principles of IEC 61508, and possibly its specific
sector implementations (for example IEC 61511, IEC 61513, IEC 62061 or ISO 13849).
By applying the requirements from this part of the IEC 61800 series, the corresponding
requirements of IEC 61508 that are necessary for a PDS(SR) are fulfilled.
This part of IEC 61800 does not specify requirements for:
• the hazard and risk analysis of a particular application;
• the identification of safety sub-functions for that application;
• the initial allocation of SILs to those safety sub-functions;
• the driven equipment except for interface arrangements;
• secondary hazards (for example from failure in a production or manufacturing process);
• the electrical, thermal and energy safety considerations, which are covered in
+IEC 61800-5-1;
• the PDS(SR) manufacturing process;
• the validity of signals and commands to the PDS(SR).
• security aspects (e.g. cyber security or PDS(SR) security of access)
NOTE 3 The functional safety requirements of a PDS(SR) are dependent on the application, and can be
considered as a part of the overall risk assessment of the installation. Where the supplier of the PDS(SR) is not
responsible for the driven equipment, the installation designer is responsible for the risk assessment, and for
specifying the functional and safety integrity requirements of the PDS(SR).
This part of IEC 61800 only applies to PDS(SR)s implementing safety sub-functions with a SIL
not greater than SIL 3.
Figure 1 shows the installation and the functional parts of a PDS(SR) that are considered in
this part of IEC 61800 and shows a logical representation of a PDS(SR) rather than its
physical description.

Elektrische Leistungsantriebssysteme mit einstellbarer Drehzahl - Teil 5-2: Anforderungen an die Sicherheit - Funktionale Sicherheit (IEC 61800-5-2:2016)

It specifies requirements and makes recommendations for the design and development, integration and validation of PDS(SR)s in terms of their functional safety considerations. It applies to adjustable speed electric drive systems covered by the other parts of the IEC 61800 series of standards.

Entraînements électriques de puissance à vitesse variable - Partie 5-2: Exigences de sécurité - Fonctionnelle (IEC 61800-5-2:2016)

L'IEC 61800-5-2:2016 spécifie des exigences et donne des recommandations pour la conception et le développement, l'intégration et la validation des entraînements de puissance relatifs à la sécurité (PDS(SR)), en considération de leur sécurité fonctionnelle. Elle s'applique aux entraînements électriques de puissance à vitesse variable couverts par les autres parties de la série de normes IEC 61800 à laquelle il est fait référence dans l'IEC 61800-2. L'IEC 61800-5-2, qui est une norme de produit, expose des considérations relatives à la sécurité des PDS(SR) prises dans le cadre de l'IEC 61508 et présente des exigences pour les PDS(SR) en tant que sous-systèmes d'un système relatif à la sécurité. Elle est destinée à faciliter la réalisation des parties électriques/électroniques/électroniques programmables (E/E/PE) d'un PDS(SR) en liaison avec la performance de sécurité d'une ou des sous-fonctions de sécurité d'un PDS. Cette édition inclut les modifications techniques majeures suivantes par rapport à l'édition précédente:
a) ajout, dans le domaine d'application, de la justification pour laquelle le mode de fonctionnement à faible sollicitation n'est pas couvert par la présente norme,
b) ajout des définitions de "catégorie" et de "fonction de sécurité",
c) "Autres sous-fonctions" réorganisées en "Sous-fonctions de contrôle" et en "Fonctions de sortie",
d) suppression du terme "essai périodique" dans l'ensemble du document dans la mesure où cet essai n'est pas applicable à un PDS(SR),
e) remplacement du terme "fonction de sécurité" par "sous-fonction de sécurité" dans l'ensemble du document,
f) mise à jour des références à la série IEC 61508 Éd. 2010,
g) ajout des règles de principe de l'ISO 13849-1 et d'une référence aux tableaux de l'ISO 13849-2,
h) 6.1.6 texte remplacé par le Tableau 2,
i) 6.1.7 Modification des Circuits intégrés avec redondance sur la puce pour correspondre aux exigences de l'Annexe E de l'IEC 61508-2:2010,
j) 6.2.8 Exigences relatives à la conception pour l'immunité thermique d'un PDS(SR),
k) 6.2.9 Exigences relatives à la conception pour l'immunité mécanique d'un PDS(SR),
l) 6.1.6 SIL pour plusieurs sous-fonctions de sécurité dans un PDS(SR),
m) 6.1.7 Circuits intégrés avec redondance sur la puce,
n) 6.2.1 Principes de sécurité de base et principes de sécurité éprouvés,
o) 6.2.2.1.4 Intervalle entre essais de diagnostic pour une tolérance aux défauts supérieure à zéro du matériel,
p) 6.2.5.2.7 Paramétrage du PDS(SR),
q) 9 Exigences relatives aux essais,
r) 9.3 Essais d'immunité électromagnétique (EM),
s) 9.4 Essais d'immunité thermique,
t) 9.5 Essais d'immunité mécanique,
u) Annexe A Table de tâches séquentielles,
v) Annexe D, D.3.16, mise à jour de Capteurs de signal de retour de mouvement et de position,
w) Annexe E Exigences d'immunité électromagnétique (EM) pour le PDS(SR),
x) Annexe F Estimation de la valeur PFDmoy pour une faible sollicitation avec la valeur de la PFH donnée.

Električni pogonski sistemi z nastavljivo hitrostjo - 5-2. del: Varnostne zahteve - Funkcijske (IEC 61800-5-2:2016)

Ta del standarda IEC 61800, ki je standard za izdelek, določa zahteve in podaja priporočila za načrtovanje, izdelavo, vgradnjo in potrjevanje z varnostjo povezanih električnih pogonskih sistemov (PDS(SR)) v smislu njihovih funkcionalnih varnostnih napotkov. Uporablja se za električne pogonske sisteme z nastavljivo hitrostjo, ki so zajeti v drugih delih skupine standardov IEC 61800, kot je podano v standardu IEC 61800-2.
OPOMBA 1: izraz »vgradnja« se nanaša na z varnostjo povezane električne pogonske sisteme in ne na njihovo vključitev v z varnostjo povezano aplikacijo.
OPOMBA 2: drugi deli standarda IEC 61800 zajemajo specifikacije, elektromagnetno združljivost, električno varnost itd. Ta mednarodni standard se uporablja, če je navedena funkcionalna varnost z varnostjo povezanega električnega pogonskega sistema in če ta deluje predvsem na način z visokimi zahtevami ali neprekinjen način (glej točko 3.15). Čeprav lahko z varnostjo povezani električni pogonski sistem deluje na način z nizkimi zahtevami, se ta standard osredotoča na način z visokimi zahtevami in neprekinjen način. Varnostne podfunkcije, ki so vpeljane za način z visokimi zahtevami ali neprekinjeni način, je mogoče uporabiti tudi v načinu z nizkimi zahtevami. Zahteve za način z nizkimi zahtevami so podane v skupini standardov IEC 61508. Nekaj navodil o ocenitvi povprečne vrednosti verjetnosti nevarnih okvar na zahtevo (PFDavg) je podanih v dodatku F.
Ta del standarda IEC 61800 podaja z varnostjo povezane napotke o z varnostjo povezanih električnih pogonskih sistemih v smislu okvira standarda IEC 61508 in uvaja zahteve za z varnostjo povezane električne pogonske sisteme kot podsisteme z varnostjo povezanega sistema. Namenjen je za lažjo realizacijo električnih/elektronskih/programabilnih elektronskih (E/E/PE) delov z varnostjo povezanega električnega pogonskega sistema v povezavi z varnostno zmogljivostjo varnostnih podfunkcij z varnostjo povezanega električnega pogonskega sistema.
Proizvajalci in dobavitelji z varnostjo povezanih električnih pogonskih sistemov bodo z uporabo normativnih zahtev tega dela standarda IEC 61800 uporabnikom (integrator sistema, proizvajalec originalne opreme) navedli varnostno zmogljivost svoje opreme. To bo poenostavilo vključitev z varnostjo povezanega električnega pogonskega sistema v z varnostjo povezani nadzorni sistem z uporabo načel iz standarda IEC 61508 in po možnosti njegovih uvajanj za ustrezen sektor (npr. standard IEC 61511, IEC 61513, IEC 62061 ali ISO 13849).
Z uporabo zahtev iz tega dela skupine standardov IEC 61800 se izpolnijo ustrezne zahteve standarda IEC 61508, ki so potrebne za z varnostjo povezan električni pogonski sistem.
Ta del standarda IEC 61800 ne določa zahtev za:
• analizo nevarnosti in tveganja za določeno uporabo;
• prepoznavanje varnostnih podfunkcij za to uporabo;
• začetno dodelitev stopenj varnostne celovitosti (SIL) tem varnostnim podfunkcijam;
• pogonsko opremo, razen za priprave vmesnika;
• sekundarne nevarnosti (npr. zaradi okvare pri postopku proizvodnje);
• električne, toplotne in energijske varnostne napotke, ki so zajeti v standardu +IEC 61800-5-1;
• postopek proizvodnje z varnostjo povezanega električnega pogonskega sistema;
• veljavnost signalov in ukazov za z varnostjo povezan električni pogonski sistem;
• varnostne vidike (npr. kibernetska varnost ali varnost dostopa do z varnostjo povezanega električnega pogonskega sistema).

General Information

• Status: Published
• Publication Date: 15-May-2017
• ICS: 13.110 - Safety of machinery
• ICS: 29.200 - Rectifiers. Convertors. Stabilized power supply
• Technical Committee: I11 - Imaginarni 11
• Current Stage: 6060 - National Implementation/Publication (Adopted Project)
• Start Date: 03-May-2017
• Due Date: 08-Jul-2017
• Completion Date: 16-May-2017
• Directive: 2006/42/EC - Directive 2006/42/EC of the European Parliament and of the Council of 17 May 2006 on machinery, and amending Directive 95/16/EC (recast)
• Mandate: M/396 - Mandate to CEN and Cenelec for standardisation in the field of machinery
• Ref Project: EN 61800-5-2:2017 - Adjustable speed electrical power drive systems - Part 5-2: Safety requirements - Functional

Relations

• Revised: SIST EN 61800-5-2:2008 - Adjustable speed electrical power drive systems -- Part 5-2: Safety requirements - Functional
• Effective Date: 24-Feb-2015
• Replaces: SIST EN 61800-5-2:2008 - Adjustable speed electrical power drive systems -- Part 5-2: Safety requirements - Functional
• Effective Date: 02-May-2017

Standards Content (Sample)

SLOVENSKI STANDARD
SIST EN 61800-5-2:2017
01-junij-2017
1DGRPHãþD
SIST EN 61800-5-2:2008
(OHNWULþQLSRJRQVNLVLVWHPL]QDVWDYOMLYRKLWURVWMRGHO9DUQRVWQH]DKWHYH
)XQNFLMVNH,(&
Adjustable speed electrical power drive systems - Part 5-2: Safety requirements -
Functional (IEC 61800-5-2:2016)
Elektrische Leistungsantriebssysteme mit einstellbarer Drehzahl - Teil 5-2:
Anforderungen an die Sicherheit - Funktionale Sicherheit (IEC 61800-5-2:2016)
Entraînements électriques de puissance à vitesse variable - Partie 5-2: Exigences de
sécurité - Fonctionnelle (IEC 61800-5-2:2016)
Ta slovenski standard je istoveten z: EN 61800-5-2:2017
ICS:
13.110 Varnost strojev Safety of machinery
29.200 8VPHUQLNL3UHWYRUQLNL Rectifiers. Convertors.
6WDELOL]LUDQRHOHNWULþQR Stabilized power supply
QDSDMDQMH
SIST EN 61800-5-2:2017 en
2003-01.Slovenski inštitut za standardizacijo. Razmnoževanje celote ali delov tega standarda ni dovoljeno.

---------------------- Page: 1 ----------------------

SIST EN 61800-5-2:2017

---------------------- Page: 2 ----------------------

SIST EN 61800-5-2:2017


EUROPEAN STANDARD EN 61800-5-2

NORME EUROPÉENNE

EUROPÄISCHE NORM
April 2017
ICS 13.110; 29.200 Supersedes EN 61800-5-2:2007
English Version
Adjustable speed electrical power drive systems - Part 5-2:
Safety requirements - Functional
(IEC 61800-5-2:2016)
Entraînements électriques de puissance à vitesse variable - Elektrische Leistungsantriebssysteme mit einstellbarer
Partie 5-2: Exigences de sécurité - Fonctionnelle Drehzahl - Teil 5-2: Anforderungen an die Sicherheit -
(IEC 61800-5-2:2016) Funktionale Sicherheit
(IEC 61800-5-2:2016)
This European Standard was approved by CENELEC on 2016-05-23. CENELEC members are bound to comply with the CEN/CENELEC
Internal Regulations which stipulate the conditions for giving this European Standard the status of a national standard without any alteration.
Up-to-date lists and bibliographical references concerning such national standards may be obtained on application to the CEN-CENELEC
Management Centre or to any CENELEC member.
This European Standard exists in three official versions (English, French, German). A version in any other language made by translation
under the responsibility of a CENELEC member into its own language and notified to the CEN-CENELEC Management Centre has the
same status as the official versions.
CENELEC members are the national electrotechnical committees of Austria, Belgium, Bulgaria, Croatia, Cyprus, the Czech Republic,
Denmark, Estonia, Finland, Former Yugoslav Republic of Macedonia, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia,
Lithuania, Luxembourg, Malta, the Netherlands, Norway, Poland, Portugal, Romania, Serbia, Slovakia, Slovenia, Spain, Sweden,
Switzerland, Turkey and the United Kingdom.


European Committee for Electrotechnical Standardization
Comité Européen de Normalisation Electrotechnique
Europäisches Komitee für Elektrotechnische Normung
CEN-CENELEC Management Centre: Avenue Marnix 17, B-1000 Brussels
© 2017 CENELEC All rights of exploitation in any form and by any means reserved worldwide for CENELEC Members.
 Ref. No. EN 61800-5-2:2017 E

---------------------- Page: 3 ----------------------

SIST EN 61800-5-2:2017
EN 61800-5-2:2017
European foreword
The text of document 22G/332/FDIS, future edition 2 of IEC 61800-5-2, prepared by
SC 22G “Adjustable speed electric drive systems incorporating semiconductor power converters” of
IEC/TC 22 “Power electronic systems and equipment" was submitted to the IEC-CENELEC parallel
vote and approved by CENELEC as EN 61800-5-2:2017.

The following dates are fixed:
(dop)
• latest date by which the document has to be 2017-10-28
implemented at national level by
publication of an identical national
standard or by endorsement
(dow)
• latest date by which the national 2020-04-28
standards conflicting with the
document have to be withdrawn

This document supersedes EN 61800-5-2:2007.

Attention is drawn to the possibility that some of the elements of this document may be the subject of
patent rights. CENELEC [and/or CEN] shall not be held responsible for identifying any or all such
patent rights.

This document has been prepared under a mandate given to CENELEC by the European Commission
and the European Free Trade Association.

Endorsement notice
The text of the International Standard IEC 61800-5-2:2016 was approved by CENELEC as a
European Standard without any modification.
In the official version, for Bibliography, the following notes have to be added for the standards indicated:

IEC 60300-3-1:2003 NOTE Harmonized as 60300-3-1:2003.
IEC 60664-1:2007 NOTE Harmonized as EN 60664-1:2007.
IEC 606643 NOTE Harmonized as EN 60664-3.
IEC 61025 NOTE Harmonized as EN 61025.
IEC 61078 NOTE Harmonized as EN 61078.
IEC 61165 NOTE Harmonized as EN 61165.
IEC 61508-4:2010 NOTE Harmonized as EN 61508-4:2010.
IEC 61508-5:2010 NOTE Harmonized as EN 61508-5:2010.
IEC 61511 (series) NOTE Harmonized as EN 61511 (series).
IEC 61511-1 NOTE Harmonized as EN 61511-1.
IEC 61513 NOTE Harmonized as EN 61513.
IEC 61558 (series) NOTE Harmonized as EN 61558 (series).
IEC 61558-1:2005 NOTE Harmonized as EN 61558-1:2005.
IEC 61558-1:2005/AMD1:2009 NOTE Harmonized as EN 61558-1:2005/A1:2009.
2

---------------------- Page: 4 ----------------------

SIST EN 61800-5-2:2017
EN 61800-5-2:2017
IEC 61784-3 NOTE Harmonized as EN 61784-3.
IEC 62061 NOTE Harmonized as EN 62061.
ISO 13849-2 NOTE Harmonized as EN ISO 13849-2.

3

---------------------- Page: 5 ----------------------

SIST EN 61800-5-2:2017
EN 61800-5-2:2017

Annex ZA
(normative)
Normative references to international publications
with their corresponding European publications
The following documents, in whole or in part, are normatively referenced in this document and are
indispensable for its application. For dated references, only the edition cited applies. For undated
references, the latest edition of the referenced document (including any amendments) applies.
NOTE 1 When an International Publication has been modified by common modifications, indicated by (mod), the relevant

EN/HD applies.

NOTE 2 Up-to-date information on the latest versions of the European Standards listed in this annex is available here:
www.cenelec.eu.
Publication Year Title EN/HD Year
IEC 60204-1 -  Safety of machinery - Electrical equipment EN 60204-1 -
of machines -- Part 1: General
requirements
IEC 61000-2-4 2002 Electromagnetic compatibility (EMC) -- Part EN 61000-2-4 2002
2-4: Environment - Compatibility levels in
industrial plants for low-frequency
conducted disturbances
IEC 61000-4-2 2008 Electromagnetic compatibility (EMC) -- Part EN 61000-4-2 2009
4-2: Testing and measurement techniques
- Electrostatic discharge immunity test
IEC 61000-4-3 2006 Electromagnetic compatibility (EMC) -- Part EN 61000-4-3 2006
4-3: Testing and measurement techniques
- Radiated, radio-frequency,
electromagnetic field immunity test
+ A1 2007  + A1 2008
+ A2 2010  + A2 2010
IEC 61000-4-4 2012 Electromagnetic compatibility (EMC) -- Part EN 61000-4-4 2012
4-4: Testing and measurement techniques
- Electrical fast transient/burst immunity
test
IEC 61000-4-5 2014 Electromagnetic compatibility (EMC) - Part EN 61000-4-5 2014
4-5: Testing and measurement techniques
- Surge immunity test
IEC 61000-4-6 2013 Electromagnetic compatibility (EMC) -- Part EN 61000-4-6 2014
4-6: Testing and measurement techniques
- Immunity to conducted disturbances,
induced by radio-frequency fields
IEC 61000-4-29 2000 Electromagnetic compatibility (EMC) -- Part EN 61000-4-29 2000
4-29: Testing and measurement
techniques - Voltage dips, short
interruptions and voltage variations on d.c.
input power port immunity tests
IEC 61000-4-34 2005 Electromagnetic compatibility (EMC) -- Part EN 61000-4-34 2007
4-34: Testing and measurement
techniques - Voltage dips, short
interruptions and voltage variations
immunity tests for equipment with input
current more than 16 A per phase
IEC 61000-6-7 2014 Electromagnetic compatibility (EMC) - Part EN 61000-6-7 2015
6-7: Generic standards - Immunity
requirements for equipment intended to
perform functions in a safety-related
system (functional safety) in industrial
locations
4

---------------------- Page: 6 ----------------------

SIST EN 61800-5-2:2017
EN 61800-5-2:2017
IEC 61400-21 2008 Wind turbines -- Part 21: Measurement and EN 61400-21 2008
assessment of power quality
characteristics of grid connected wind
turbines
IEC 61508-1 2010 Functional safety of EN 61508-1 2010
electrical/electronic/programmable
electronic safety-related systems -- Part 1:
General requirements
IEC 61508-2 2010 Functional safety of EN 61508-2 2010
electrical/electronic/programmable
electronic safety-related systems -- Part 2:
Requirements for
electrical/electronic/programmable
electronic safety-related systems
IEC 61508-3 2010 Functional safety of EN 61508-3 2010
electrical/electronic/programmable
electronic safety-related systems -- Part 3:
Software requirements
IEC 61508-6 2010 Functional safety of EN 61508-6 2010
electrical/electronic/programmable
electronic safety-related systems -- Part 6:
Guidelines on the application of IEC
61508-2 and IEC 61508-3
IEC 61508-7 2010 Functional safety of EN 61508-7 2010
electrical/electronic/programmable
electronic safety-related systems -- Part 7:
Overview of techniques and measures
IEC 61800-1 -  Adjustable speed electrical power drive EN 61800-1 -
systems -- Part 1: General requirements -
Rating specifications for low voltage
adjustable speed d.c. power drive systems
IEC 61800-2 2015 Adjustable speed electrical power drive EN 61800-2 2015
systems -- Part 2: General requirements -
Rating specifications for low voltage
adjustable speed a.c. power drive systems
IEC 61800-3 2004 Adjustable speed electrical power drive EN 61800-3 2004
systems -- Part 3: EMC requirements and
specific test methods
IEC 61800-4 -  Adjustable speed electrical power drive EN 61800-4 -
systems -- Part 4: General requirements -
Rating specifications for a.c. power drive
systems above 1 000 V a.c. and not
exceeding 35 kV
IEC 61800-5-1 2007 Adjustable speed electrical power drive EN 61800-5-1 2007
systems - Part 5-1: Safety requirements -
Electrical, thermal and energy
ISO 13849-1 2006 Safety of machinery - Safety-related parts - -
of control systems -- Part 1: General
principles for design
ISO 13849-2 2012 Safety of machinery - Safety-related parts EN ISO 13849-2 2012
of control systems_- Part_2: Validation

5

---------------------- Page: 7 ----------------------

SIST EN 61800-5-2:2017

---------------------- Page: 8 ----------------------

SIST EN 61800-5-2:2017




IEC 61800-5-2

®


Edition 2.0 2016-04




INTERNATIONAL



STANDARD




NORME



INTERNATIONALE
colour

inside










Adjustable speed electrical power drive systems –

Part 5-2: Safety requirements – Functional




Entraînements électriques de puissance à vitesse variable –

Partie 5-2: Exigences de sécurité – Fonctionnelle
















INTERNATIONAL

ELECTROTECHNICAL

COMMISSION


COMMISSION

ELECTROTECHNIQUE


INTERNATIONALE




ICS 13.110; 29.200 ISBN 978-2-8322-3302-3



Warning! Make sure that you obtained this publication from an authorized distributor.

Attention! Veuillez vous assurer que vous avez obtenu cette publication via un distributeur agréé.

® Registered trademark of the International Electrotechnical Commission
Marque déposée de la Commission Electrotechnique Internationale

---------------------- Page: 9 ----------------------

SIST EN 61800-5-2:2017
– 2 – IEC 61800-5-2:2016 © IEC 2016
CONTENTS
FOREWORD . 6
INTRODUCTION . 8
1 Scope . 9
2 Normative references. 10
3 Terms and definitions . 12
4 Designated safety sub-functions . 18
4.1 General . 18
4.2 Safety sub-functions . 19
4.2.1 General . 19
4.2.2 Limit values . 20
4.2.3 Stopping functions . 20
4.2.4 Monitoring functions . 21
4.2.5 Output functions – Safe brake control (SBC) . 23
5 Management of functional safety . 23
5.1 Objective . 23
5.2 Requirements for the management of functional safety . 23
5.3 PDS(SR) development lifecycle . 23
5.4 Planning of PDS(SR) functional safety management . 24
5.5 Safety requirements specification (SRS) for a PDS(SR) . 26
5.5.1 General . 26
5.5.2 Safety sub-functions requirements specification . 26
5.5.3 Safety integrity requirements specification . 27
5.6 PDS(SR) safety system architecture specification . 28
5.6.1 General . 28
5.6.2 Requirements for safety system architecture specification . 28
6 Requirements for design and development of a PDS(SR) . 29
6.1 General requirements . 29
6.1.1 Change in operational status . 29
6.1.2 Design standards . 29
6.1.3 Realisation . 29
6.1.4 Safety integrity and fault detection . 29
6.1.5 Safety and non-safety sub-functions . 30
6.1.6 SIL for multiple safety sub-functions within one PDS(SR) . 30
6.1.7 Integrated circuits with on-chip redundancy . 31
6.1.8 Software requirements . 31
6.1.9 Design documentation . 31
6.2 PDS(SR) design requirements . 31
6.2.1 Basic and well-tried safety principles . 31
6.2.2 Requirements for the estimation of the probability of dangerous random
hardware failures per hour (PFH). 31
6.2.3 Architectural constraints . 34
6.2.4 Estimation of safe failure fraction (SFF) . 35
6.2.5 Requirements for systematic safety integrity of a PDS(SR) and
PDS(SR) subsystems . 36
6.2.6 Design requirements for electromagnetic (EM) immunity of a PDS(SR). 39
6.2.7 Design requirements for thermal immunity of a PDS(SR) . 39

---------------------- Page: 10 ----------------------

SIST EN 61800-5-2:2017
IEC 61800-5-2:2016 © IEC 2016 – 3 –
6.2.8 Design requirements for mechanical immunity of a PDS(SR) . 39
6.3 Behaviour on detection of fault . 39
6.3.1 Fault detection . 39
6.3.2 Fault tolerance greater than zero . 39
6.3.3 Fault tolerance zero . 39
6.4 Additional requirements for data communications . 39
6.5 PDS(SR) integration and testing requirements . 40
6.5.1 Hardware integration . 40
6.5.2 Software integration . 40
6.5.3 Modifications during integration . 40
6.5.4 Applicable integration tests . 40
6.5.5 Test documentation . 40
7 Information for use . 41
7.1 General . 41
7.2 Information and instructions for safe application of a PDS(SR) . 41
8 Verification and validation . 42
8.1 General . 42
8.2 Verification . 43
8.3 Validation . 43
8.4 Documentation . 43
9 Test requirements . 43
9.1 Planning of tests . 43
9.2 Functional testing . 43
9.3 Electromagnetic (EM) immunity testing . 44
9.3.1 General . 44
9.3.2 Intended EM environment . 44
9.3.3 Performance criterion (fail safe state – FS) . 44
9.4 Thermal immunity testing . 44
9.4.1 General . 44
9.4.2 Functional thermal test . 45
9.4.3 Component thermal test . 45
9.5 Mechanical immunity testing . 45
9.5.1 General . 45
9.5.2 Vibration test . 45
9.5.3 Shock test . 45
9.5.4 Performance criterion for mechanical immunity tests (fail safe state –
FS) . 45
9.6 Test documentation . 45
10 Modification . 46
10.1 Objective . 46
10.2 Requirements . 46
10.2.1 General . 46
10.2.2 Modification request . 46
10.2.3 Impact analysis . 46
10.2.4 Authorization. 46
10.2.5 Documentation . 46
Annex A (informative) Sequential task table. 47
Annex B (informative) Example for estimation of PFH . 51

---------------------- Page: 11 ----------------------

SIST EN 61800-5-2:2017
– 4 – IEC 61800-5-2:2016 © IEC 2016
B.1 General . 51
B.2 Example PDS(SR) structure . 51
B.2.1 General . 51
B.2.2 Subsystem A/B . 52
B.2.3 Subsystem PS/VM . 52
B.3 Example PDS(SR) PFH value determination . 53
B.3.1 Subsystem “A/B” (main subsystem) . 53
B.3.2 Subsystem “PS/VM” . 58
B.3.3 PFH value of the safety sub-function STO of PDS(SR) . 61
B.4 Reduction of DC and SFF depending on test interval . 62
Annex C (informative) Available failure rate databases . 63
C.1 Databases . 63
C.2 Helpful standards concerning component failure . 63
Annex D (informative) Fault lists and fault exclusions . 65
D.1 General . 65
D.2 Remarks applicable to fault exclusions . 65
D.2.1 Validity of exclusions . 65
D.2.2 Tin whisker growth . 65
D.2.3 Short-circuits on PWB-mounted parts . 65
D.3 Fault models . 66
D.3.1 Conductors/cables . 66
D.3.2 Printed wiring boards/assemblies . 66
D.3.3 Terminal block . 66
D.3.4 Multi-pin connector . 67
D.3.5 Electromechanical devices . 67
D.3.6 Transformers . 68
D.3.7 Inductances . 68
D.3.8 Resistors . 68
D.3.9 Resistor Networks . 68
D.3.10 Potentiometers . 68
D.3.11 Capacitors . 68
D.3.12 Discrete semiconductors . 68
D.3.13 Signal Isolation components . 69
D.3.14 Non-programmable integrated circuits . 69
D.3.15 Programmable and/or complex integrated circuits . 69
D.3.16 Motion and position feedback sensors . 70
Annex E (normative) Electromagnetic (EM) immunity requirement for PDS(SR) . 74
E.1 General . 74
E.2 Immunity requirements – low frequency disturbances . 74
E.3 Immunity requirements – high frequency disturbances . 77
Annex F (informative) Estimation of PFD value for low demand with given PFH
avg
value . 81
F.1 General . 81
F.2 Estimation of PFD value for low demand with given PFH value . 81
avg
Bibliography . 82

Figure 1 – Installation and functional parts of a PDS(SR) . 10
Figure 2 – Safety function consisting of safety sub-functions . 19

---------------------- Page: 12 ----------------------

SIST EN 61800-5-2:2017
IEC 61800-5-2:2016 © IEC 2016 – 5 –
Figure 3 – PDS(SR) development lifecycle . 24
Figure B.1 – Example PDS(SR) . 51
Figure B.2 – Subsystems of the PDS(SR) . 52
Figure B.3 – Function blocks of subsystem A/B . 53
Figure B.4 – Reliability model (Markov) of subsystem A/B . 56
Figure B.5 – Function blocks of subsystem PS/VM . 58
Figure B.6 – Reliability model (Markov) of subsystem PS/VM . 60

Table 1 – Alphabetical list of terms and definitions . 12
Table 2 – Example for determining the SIL from hardware and software independence . 30
Table 3 – Safety integrity levels: target failure measures for a PDS(SR) safety sub-
function . 32
Table 4 – Maximum allowable safety integrity level for a safety sub-function carried
out by a type A safety-related subsystem .
...