EESTI STANDARD EVS-EN :2010

Transcription

1 EESTI STANDARD EVS-EN :2010 Industrial communication networks - Profiles - Part 3: Functional safety fieldbuses - General rules and profile definitions

2 EESTI STANDARDI EESSÕNA Käesolev Eesti standard EVS-EN :2010 sisaldab Euroopa standardi EN :2010 ingliskeelset teksti. NATIONAL FOREWORD This Estonian standard EVS-EN :2010 consists of the English text of the European standard EN :2010. Standard on kinnitatud Eesti Standardikeskuse käskkirjaga ja jõustub sellekohase teate avaldamisel EVS Teatajas. This standard is ratified with the order of Estonian Centre for Standardisation dated and is endorsed with the notification published in the official bulletin of the Estonian national standardisation organisation. Euroopa standardimisorganisatsioonide poolt rahvuslikele liikmetele Euroopa standardi teksti kättesaadavaks tegemise kuupäev on Standard on kättesaadav Eesti standardiorganisatsioonist. Date of Availability of the European standard text The standard is available from Estonian standardisation organisation. ICS , Standardite reprodutseerimis- ja levitamisõigus kuulub Eesti Standardikeskusele Andmete paljundamine, taastekitamine, kopeerimine, salvestamine elektroonilisse süsteemi või edastamine ükskõik millises vormis või millisel teel on keelatud ilma Eesti Standardikeskuse poolt antud kirjaliku loata. Kui Teil on küsimusi standardite autorikaitse kohta, palun võtke ühendust Eesti Standardikeskusega: Aru 10 Tallinn Eesti; Telefon: ; E-post: Right to reproduce and distribute belongs to the Estonian Centre for Standardisation No part of this publication may be reproduced or utilized in any form or by any means, electronic or mechanical, including photocopying, without permission in writing from Estonian Centre for Standardisation. If you have any questions about standards copyright, please contact Estonian Centre for Standardisation: Aru str 10 Tallinn Estonia; Phone: ;

3 EUROPEAN STANDARD EN NORME EUROPÉENNE EUROPÄISCHE NORM August 2010 ICS ; Supersedes EN :2008 English version Industrial communication networks - Profiles - Part 3: Functional safety fieldbuses - General rules and profile definitions (IEC :2010) Réseaux de communication industriels - Partie 3: Bus de terrain à sécurité fonctionnelle - Règles générales et définitions des profils (CEI :2010) Industrielle Kommunikationsnetze - Profile - Teil 3: Funktional sichere Übertragung bei Feldbussen - Allgemeine Regeln und Profilfestlegungen (IEC :2010) This European Standard was approved by CENELEC on CENELEC members are bound to comply with the CEN/CENELEC Internal Regulations which stipulate the conditions for giving this European Standard the status of a national standard without any alteration. Up-to-date lists and bibliographical references concerning such national standards may be obtained on application to the Central Secretariat or to any CENELEC member. This European Standard exists in three official versions (English, French, German). A version in any other language made by translation under the responsibility of a CENELEC member into its own language and notified to the Central Secretariat has the same status as the official versions. CENELEC members are the national electrotechnical committees of Austria, Belgium, Bulgaria, Croatia, Cyprus, the Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, the Netherlands, Norway, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden, Switzerland and the United Kingdom. CENELEC European Committee for Electrotechnical Standardization Comité Européen de Normalisation Electrotechnique Europäisches Komitee für Elektrotechnische Normung Management Centre: Avenue Marnix 17, B Brussels 2010 CENELEC - All rights of exploitation in any form and by any means reserved worldwide for CENELEC members. Ref. No. EN :2010 E

4 EN : EVS-EN Foreword This European Standard supersedes EN :2008. The main technical changes with respect to EN :2008 are listed below: clarifications and additional explanations for requirements, updated references; updates of definitions and requirements in relation with the new edition of EN 61508; addition :2010This of a new informative Annex D providing an assessment guideline; updates in parts for CPF 1, CPF 2, CPF 3, CPF 6 (details provided in the parts); addition of new parts for CPF 8, CPF 12, CPF 13, CPF 14; document is The following dates were fixed: a latest date by which the EN has to be implemented preview Annex ZA has been added by CENELEC. generated by EVS The text of document 65C/591A/FDIS, future edition 2 of IEC , prepared by SC 65C, Industrial networks, of IEC TC 65, Industrial-process measurement, control and automation, was submitted to the IEC-CENELEC parallel vote and was approved by CENELEC as EN on in CPF parts, addition of an annex to provide information about test laboratories for testing and validating conformance of FSCP products. Attention is drawn to the possibility that some of the elements of this document may be the subject of patent rights. CEN and CENELEC shall not be held responsible for identifying any or all such patent rights. at national level by publication of an identical national standard or by endorsement (dop) latest date by which the national standards conflicting with the EN have to be withdrawn (dow)

5 - 3 - EN :2010 EVS-EN :2010 Endorsement notice The text of the International Standard IEC :2010 was approved by CENELEC as a European Standard without any modification. In the official version, for Bibliography, the following notes have to be added for the standards indicated: IEC NOTE Harmonized as EN IEC series NOTE Harmonized in EN series (partially modified). IEC :2010 IEC :2010 NOTE Harmonized as EN :2010 (not modified). NOTE Harmonized as EN :2010 (not modified). IEC :2010 IEC series NOTE Harmonized as EN :2010 (not modified). NOTE Harmonized in EN series (not modified). IEC NOTE Harmonized as EN IEC NOTE Harmonized as EN ISO NOTE Harmonized as EN ISO ISO NOTE Harmonized as EN ISO ISO NOTE Harmonized as EN ISO ISO NOTE Harmonized as EN ISO ISO NOTE Harmonized as EN ISO

6 EN : Annex ZA (normative) Normative references to international publications with their corresponding European publications The following referenced documents are indispensable for the application of this document. For dated references, only the edition cited applies. For undated references, the latest edition of the referenced document (including any amendments) applies. NOTE When an international publication has been modified by common modifications, indicated by (mod), the relevant EN/HD applies. EVS-EN :2010This Publication Year Title EN/HD Year IEC Programmable controllers - EN Part 2: Equipment requirements and tests IEC Series Industrial communication networks - EN Series Fieldbus specifications document IEC Electrical equipment for measurement, EN control and laboratory is use - EMC requirements a - Part 3-1: Immunity requirements for safetyrelated systems and for equipment intended to perform safety-related functions (functional safety) - General industrial applications IEC Electrical equipment for measurement, EN control and laboratory use - EMC requirements preview - Part 3-2: Immunity requirements for safetyrelated systems and for equipment intended to perform safety-related functions (functional safety) - Industrial applications with specified electromagnetic environment IEC Series Functional safety of EN Series electrical/electronic/programmable electronic safety-related systems generated IEC Functional safety of EN electrical/electronic/programmable electronic by safety-related systems - Part 1: General requirements IEC Functional safety of EN electrical/electronic/programmable electronic EVS safety-related systems - Part 2: Requirements for electrical/electronic/programmable electronic safety-related systems IEC Industrial communication networks - Profiles - Part 1: Fieldbus profiles EN IEC Industrial communication networks - Profiles - EN Part 2: Additional fieldbus profiles for real-time networks based on ISO/IEC

7 - 5 - EN :2010 EVS-EN :2010 Publication Year Title EN/HD Year IEC Industrial communication networks - Profiles - Part 3-1: Functional safety fieldbuses - Additional specifications for CPF 1 IEC Industrial communication networks - Profiles - Part 3-2: Functional safety fieldbuses - Additional specifications for CPF 2 IEC Industrial communication networks - Profiles - Part 3-3: Functional safety fieldbuses - Additional specifications for CPF 3 IEC Industrial communication networks - Profiles - Part 3-6: Functional safety fieldbuses - Additional specifications for CPF 6 IEC Industrial communication networks - Profiles - Part 3-8: Functional safety fieldbuses - Additional specifications for CPF 8 IEC Industrial communication networks - Profiles - Part 3-12: Functional safety fieldbuses - Additional specifications for CPF 12 IEC Industrial communication networks - Profiles - Part 3-13: Functional safety fieldbuses - Additional specifications for CPF 13 IEC Industrial communication networks - Profiles - Part 3-14: Functional safety fieldbuses - Additional specifications for CPF 14 IEC Series Industrial communication networks - Profiles - Part 5: Installation of fieldbuses - Installation profiles for CPF x IEC Industrial communication networks - Installation of communication networks in industrial premises IEC Railway applications - Communication, signalling and processing systems - Part 1: Safety-related communication in closed transmission systems IEC Series Industrial communication networks - Network and system security EN EN EN EN EN EN EN EN EN EN Series

8 EVS-EN : IEC:2010(E) CONTENTS FOREWORD Introduction General Patent declaration Scope Normative references Terms, definitions, symbols, abbreviated terms and conventions Terms and definitions Common terms and definitions CPF 1: Additional terms and definitions CPF 2: Additional terms and definitions CPF 3: Additional terms and definitions CPF 6: Additional terms and definitions CPF 8: Additional terms and definitions CPF 12: Additional terms and definitions CPF 13: Additional terms and definitions CPF 14: Additional terms and definitions Symbols and abbreviated terms Common symbols and abbreviated terms CPF 1: Additional symbols and abbreviated terms CPF 2: Additional symbols and abbreviated terms CPF 3: Additional symbols and abbreviated terms CPF 6: Additional symbols and abbreviated terms CPF 8: Additional symbols and abbreviated terms CPF 12: Additional symbols and abbreviated terms CPF 13: Additional symbols and abbreviated terms CPF 14: Additional symbols and abbreviated terms Conformance Basics of safety-related fieldbus systems Safety function decomposition Communication system General IEC fieldbuses Communication channel types Safety function response time Communication errors General Corruption Unintended repetition Incorrect sequence Loss Unacceptable delay Insertion Masquerade Addressing Deterministic remedial measures...24

9 EVS-EN IEC:2010(E) General Sequence number Time stamp Time expectation Connection authentication Feedback message Data integrity assurance Redundancy with cross checking Different data integrity assurance systems Relationships between errors and safety measures Data integrity considerations :2010This Calculation of the residual error rate Residual error rate and SIL Relationship between functional safety and security Boundary conditions and constraints Electrical safety Electromagnetic compatibility (EMC) Installation guidelines...30 document 5.10 Safety manual Safety policy...30 is 6 Communication Profile Family 1 (FOUNDATION a Fieldbus) Profiles for functional safety Functional Safety Communication Profile 1/ Technical overview Communication Profile Family 2 (CIP ) Profiles for functional safety Functional Safety Communication Profile 2/ preview 7.2 Technical overview Communication Profile Family 3 (PROFIBUS, PROFINET ) Profiles for functional safety Functional Safety Communication Profile 3/ Technical overview Communication Profile Family 6 (INTERBUS ) Profiles for functional safety Functional Safety Communication Profile 6/ generated 9.2 Technical overview Communication Profile Family 8 (CC-Link ) Profiles for functional by safety Functional Safety Communication Profile 8/ Technical overview Communication Profile Family 12 (EtherCAT ) Profiles for functional safety...39 EVS 11.1 Functional Safety Communication Profile 12/ Technical overview Communication Profile Family 13 (Ethernet POWERLINK ) Profiles for functional safety Functional Safety Communication Profile 13/ Technical overview Communication Profile Family 14 (EPA ) Profiles for functional safety Functional Safety Communication Profile 14/ Technical overview...42 Annex A (informative) Example functional safety communication models...43

10 EVS-EN : IEC:2010(E) A.1 General...43 A.2 Model A...43 A.3 Model B...43 A.4 Model C...44 A.5 Model D...44 Annex B (informative) A safety communication channel model using CRC-based error checking...46 B.1 Overview B.2 Channel model for calculations...46 B.3 Cyclic redundancy checking...47 B.3.1 General...47 B.3.2 Considerations concerning CRC polynomials...49 Annex C (informative) Structure of technology-specific parts...51 Annex D (informative) Assessment guideline...53 D.1 Overview D.2 Channel types...53 D.2.1 General...53 D.2.2 Black channel...53 D.2.3 White channel...53 D.3 Data integrity considerations for white channel approaches...54 D.3.1 General...54 D.3.2 Model B and C...54 D.3.3 Model A and D...55 D.4 Verification of safety measures...55 D.4.1 General...55 D.4.2 Implementation...56 D.4.3 "De-energize to trip" principle...56 D.4.4 Safe state...56 D.4.5 Transmission errors...56 D.4.6 Safety reaction and response times...56 D.4.7 Combination of measures...56 D.4.8 Absence of interference...57 D.4.9 Additional fault causes (white channel)...57 D.4.10 Reference test beds and operational conditions...57 D.4.11 Conformance tester...57 Bibliography...58 Table 1 Overview of the effectiveness of the various measures on the possible errors...27 Table 2 Definition of items used for calculation of the residual error rate...28 Table 3 Relationship of residual error rate to SIL level...29 Table 4 Overview of profile identifier usable for FSCP 6/ Table B.1 Example dependency d min and block length n...49 Table C.1 Common subclause structure for technology-specific parts...51

11 EVS-EN IEC:2010(E) 5 Figure 1 Relationships of IEC with other standards (machinery)...8 Figure 2 Relationships of IEC with other standards (process)...9 Figure 3 Safety communication as a part of a safety function...21 Figure 4 Example model of a functional safety communication system...22 Figure 5 Example of safety function response time components...23 Figure 6 Example application...29 Figure 7 Scope of FSCP 1/ Figure 8 Relationship of Safety Validators...33 Figure 9 Basic communication preconditions for FSCP 3/ Figure 10 Structure of a FSCP 3/1 safety PDU :2010This Figure 11 Safe communication modes...36 Figure 12 FSCP 6/7 communication preconditions...37 Figure 13 Basic FSCP 12/1 system...39 Figure 14 Producer consumer example...41 Figure 15 Client server example...41 Figure 16 FSCP 14/1 safety communication architecture...42 document Figure A.1 Model A is Figure A.2 Model B Figure A.3 Model C... a 44 Figure A.4 Model D Figure B.1 Communication channel with perturbation...46 Figure B.2 Binary symmetric channel (BSC)...47 Figure B.3 Example of a block with message and CRC bits (redundancy code)...48 preview Figure B.4 Block codes for error detection...48 Figure B.5 Proper and improper CRC polynomials...49 Figure D.1 Basic Markov model...55 generated by EVS

12 EVS-EN : IEC:2010(E) 0 Introduction 0.1 General The IEC fieldbus standard together with its companion standards IEC and IEC defines a set of communication protocols that enable distributed control of automation applications. Fieldbus technology is now considered well accepted and well proven. Thus many fieldbus enhancements are emerging, addressing not yet standardized areas such as real time, safety-related and security-related applications. This standard explains the relevant principles for functional safety communications with reference to IEC series and specifies several safety communication layers (profiles and corresponding protocols) based on the communication profiles and protocol layers of IEC , IEC and the IEC series. It does not cover electrical safety and intrinsic safety aspects. Figure 1 shows the relationships between this standard and relevant safety and fieldbus standards in a machinery environment. IEC Safety f. f. e.g. light curtains IEC Safety for PLC (under consideration) Product standards IEC Safety functions for drives ISO Safety requirements for robots ISO and ISO Safety of machinery Principles for design and risk assessment IEC Security (profile-specific) IEC Installation guide (profile-specific) IEC Security (common part) IEC Installation guide (common part) Design of safety-related electrical, electronic and programmable electronic control systems (SRECS) for machinery SIL based PL based Design objective Applicable standards IEC Functional safety communication profiles IEC Methodology EMC & FS IEC Test EMC & FS IEC Safety of electrical equipment US: NFPA 79 (2006) ISO , -2 Safety-related parts of machinery (SRPCS) Non-electrical Electrical IEC series / IEC , -2 Fieldbus for use in industrial control systems IEC series Functional safety (FS) (basic standard) IEC Functional safety for machinery (SRECS) (including EMC for industrial environment) Key (yellow) safety-related standards (blue) fieldbus-related standards (dashed yellow) this standard NOTE Subclauses (high complexity) and (low complexity) of IEC specify the relationship between PL (Category) and SIL. Figure 1 Relationships of IEC with other standards (machinery)

13 IEC:2010(E) 9 Figure 2 shows the relationships between this standard and relevant safety and fieldbus standards in a process environment. IEC Safety f. f. e.g. light curtains IEC Safety for PLC (under consideration) Product standards IEC Safety functions for drives ISO Safety requirements for robots IEC Security (profile-specific) IEC Installation guide (profile-specific) IEC Security (common part) IEC Installation guide (common part) See safety standards for machinery (Figure 1) Valid also in process industries, whenever applicable IEC Functional safety communication profiles IEC a) a) EMC and functional safety IEC series / IEC , -2 Fieldbus for use in industrial control systems IEC series Functional safety (FS) (basic standard) IEC series b) b) Functional safety Safety instrumented systems for the process industry sector US: ISA (3 parts = modified IEC 61511) DE: VDI 2180 Part 1-4 Key (yellow) safety-related standards (blue) fieldbus-related standards (dashed yellow) this standard EVS-EN :2010 a For specified electromagnetic environments; otherwise IEC b EN ratified. Figure 2 Relationships of IEC with other standards (process) Safety communication layers which are implemented as parts of safety-related systems according to IEC series provide the necessary confidence in the transportation of messages (information) between two or more participants on a fieldbus in a safety-related system, or sufficient confidence of safe behaviour in the event of fieldbus errors or failures. Safety communication layers specified in this standard do this in such a way that a fieldbus can be used for applications requiring functional safety up to the Safety Integrity Level (SIL) specified by its corresponding functional safety communication profile. The resulting SIL claim of a system depends on the implementation of the selected functional safety communication profile within this system implementation of a functional safety communication profile in a standard device is not sufficient to qualify it as a safety device.

14 EVS-EN : IEC:2010(E) This standard describes: basic principles for implementing the requirements of IEC series for safetyrelated data communications, including possible transmission faults, remedial measures and considerations affecting data integrity; individual description of functional safety profiles for several communication profile families in IEC and IEC ; safety layer extensions to the communication service and protocols sections of the IEC series. 0.2 Patent declaration The International Electrotechnical Commission (IEC) draws attention to the fact that it is claimed that compliance with this document may involve the use of patents concerning functional safety communication profiles for families 1, 2, 3, 6, 12, 13 and 14 given in IEC , IEC , IEC , IEC , IEC , IEC and IEC IEC takes no position concerning the evidence, validity and scope of these patent rights. The holders of these patent rights have assured IEC that they are willing to negotiate licences under reasonable and non-discriminatory terms and conditions with applicants throughout the world. In this respect, the statements of the holders of these patent rights are registered with IEC. NOTE Patent details and corresponding contact information are provided in IEC , IEC , IEC , IEC , IEC , IEC and IEC

15 IEC:2010(E) 11 INDUSTRIAL COMMUNICATION NETWORKS PROFILES Part 3: Functional safety fieldbuses General rules and profile definitions EVS-EN 1 Scope This part of the IEC series explains some common principles than can be used in the transmission :2010This of safety-relevant messages among participants within a distributed network using fieldbus technology in accordance with the requirements of IEC series 1 for functional safety. These principles can be used in various industrial applications such as process control, manufacturing automation and machinery. This part 2 and the IEC x parts specify several functional safety communication profiles based on the communication profiles and protocol layers of the fieldbus technologies in IEC , IEC and the IEC series. document is a preview generated by EVS NOTE 1 Other safety-related communication systems meeting the requirements of IEC series may exist that are not included in this standard. NOTE 2 It does not cover electrical safety and intrinsic safety aspects. Electrical safety relates to hazards such as electrical shock. Intrinsic safety relates to hazards associated with potentially explosive atmospheres. All systems are exposed to unauthorized access at some point of their life cycle. Additional measures need to be considered in any safety-related application to protect fieldbus systems against unauthorized access. The IEC series will address many of these issues; the relationship with the IEC series is detailed in a dedicated subclause of this part. NOTE 3 Additional profile specific requirements for security may also be specified in IEC [10]. NOTE 4 Implementation of a functional safety communication profile according to this part in a device is not sufficient to qualify it as a safety device, as defined in IEC series. NOTE 5 The resulting SIL claim of a system depends on the implementation of the selected functional safety communication profile within this system. 2 Normative references The following referenced documents are indispensable for the application of this document. For dated references, only the edition cited applies. For undated references, the latest edition of the referenced document (including any amendments) applies. IEC , Programmable controllers Part 2: Equipment requirements and tests IEC (all parts), Industrial communication networks Fieldbus specifications IEC , Electrical equipment for measurement, control and laboratory use EMC requirements Part 3-1: Immunity requirements for safety-related systems and for equipment intended to perform safety-related functions (functional safety) General industrial applications 1 In the following pages of this standard, IEC will be used for IEC series. 2 In the following pages of this standard, this part will be used for this part of the IEC series. 3 Proposed new work item under consideration.

16 EVS-EN : IEC:2010(E) IEC , Electrical equipment for measurement, control and laboratory use EMC requirements Part 3-2: Immunity requirements for safety-related systems and for equipment intended to perform safety-related functions (functional safety) Industrial applications with specified electromagnetic environment IEC (all parts), Functional safety of electrical/electronic/programmable electronic safety-related systems IEC :2010 4, Functional safety of electrical/electronic/programmable electronic safetyrelated systems Part 1: General requirements IEC , Functional safety of electrical/electronic/programmable electronic safety-related systems Part 2: Requirements for electrical/electronic/programmable electronic safetyrelated systems IEC , Industrial communication networks Profiles Part 1: Fieldbus profiles IEC , Industrial communication networks Profiles Part 2: Additional fieldbus profiles for real-time networks based on ISO/IEC IEC , Industrial communication networks Profiles Part 3-1: Functional safety fieldbuses Additional specifications for CPF 1 IEC , Industrial communication networks Profiles Part 3-2: Functional safety fieldbuses Additional specifications for CPF 2 IEC , Industrial communication networks Profiles Part 3-3: Functional safety fieldbuses Additional specifications for CPF 3 IEC , Industrial communication networks Profiles Part 3-6: Functional safety fieldbuses Additional specifications for CPF 6 IEC , Industrial communication networks Profiles Part 3-8: Functional safety fieldbuses Additional specifications for CPF 8 IEC , Industrial communication networks Profiles Part 3-12: Functional safety fieldbuses Additional specifications for CPF 12 IEC , Industrial communication networks Profiles Part 3-13: Functional safety fieldbuses Additional specifications for CPF 13 IEC , Industrial communication networks Profiles Part 3-14: Functional safety fieldbuses Additional specifications for CPF 14 IEC (all parts), Industrial communication networks Profiles Part 5: Installation of fieldbuses Installation profiles for CPF x IEC 61918, Industrial communication networks Installation of communication networks in industrial premises IEC :2002, Railway applications Communication, signalling and processing systems Part 1: Safety-related communication in closed transmission systems 4 To be published. 5 To be published.