1、单击此处编辑母版文本样式,第二级,第三级,第四级,第五级,单击此处编辑母版标题样式,SIS Application&Standard,SIS,应用及相关标准,1,Avoid Risks And Dangers In Your Plant By Applying Safety System,运用安全系统以规避风险和危险,高,风险,低,安全,Risk,风险,高,安全,低,风险,SIS,安全仪表系统,Definition of a Safety System,安全系统的定义,Safety systems are designed to,respond,to,conditions,of the pl
2、ant,which may be,hazardous,in themselves,or,if no action,were taken could,eventually,give,rise,to a,hazard.,They must generate the,correct,outputs to,prevent,the hazard or,mitigate,the consequences.,安全系统是设计为当,工厂本身发生危险情况,,或,,如果不采取行动就会最终导致风险增加,,在这些情况下,安全系统必须产生,及时、正确的输出,,来防止任何危险发生或减轻后果。,Some common nam
3、es used for Safety System:,安全系统的常用名称:,ESD Emergency Shutdown System,紧急停车系统,SIS Shutdown Interlock/Instrument System,停车连锁/仪表系统,IPS Instrument Protective System,仪表保护系统,FSSS Flue Safety Sing System,锅炉安全监视系统,FGS Fire&Gas Protective System,火和气保护系统,ITCC,Integrated Turbine&Compressor Control,综合透平压缩机控制,Safe
4、ty System,安全系统,Safety System Applications,安全系统应用范围,Boiler/Burner Management Systems,锅炉/燃烧管理系统,Continuous Production Units-Refining and Petrochemical Process,连续性生产过程-炼油厂和石油化工厂,Batch Processes,批量生产过程,On-and Offshore Oil&Gas Exploration and Production Facilities,岸上/海上油/气体勘探和生产,Compressor&turbine Monito
5、ring/Safeguard,压缩机和透平机监视/防护,Fire&Gas Detection,火和气体监测,Loading and Storage Facilities,装载/储存设备,Pipeline Safety Management Systems,管道安全管理系统,Two,Appraisement,Index,for Safety System,安全系统的两大评价指标,DependabilityCant refuse action,可靠性不能 拒动,UsabilityCant false action,可用性不能 误动,Safety Control System Theory,Stan
6、dards and Attestation,安全控制系统的理论、标准和认证,Theory:,理论,Markov Modeling Methodology,MTTF,MTTR,MTBF,Standards:,标准,IEC61508,IEC61511,ANSI/ISA S84,NFPA/UL98,DIN 19250,SIL,Attestation:,认证机构,TUV,ESD SYSTEM,TV Rheinland-TV certification ensures,per DIN and IEC standards,the functionality of SIS systems for criti
7、cal process applications requiring maximum safety and uninterrupted operation.The TRICON is certified for safety related applications according to:,SIL 1-3IEC 61508,Parts 1-7,Functional Safety:Safety Related Systems,IEC 61131,Part 2,Programmable Controllers-Part 2:Equipment Requirements and Tests“,A
8、K1-8DIN 19250,Control Technology;Fundamental Safety Aspects To Be Considered for Measurement and Control Equipment,DIN V VDE 0801,Principles for Computers in Safety Related Systems,The International Safety Standards,国际安全标准,Fire and Gas Systems,NFPA 72,National Fire Alarm Code,EN54-2,Fire Detection a
9、nd Fire Alarm Systems-Part 2:Control and Indicating Equipment“,Burner Management Systems,NFPA 8501/97,Standard for Single Burner Boiler Operation,NFPA 8502/99,Standard for the Prevention of Furnace Explosions/Implosions in Multiple Burner Boilers,DIN VDE 0116,Electric Equipment of Furnaces,The Inter
10、national Safety Standards,国际安全标准,The International Safety Standards,国际安全标准,TV(1984),DIN V 19250/VDE V 0801,(Germany),Risk classification 1989,风险等级1989,Safety system requirements,安全系统要求,Various national standards,各种国家标准,ANSI/ISA S84.01(USA)1996,Safety procedures,安全步骤,Safety Life Cycle,安全生命周期,Safety I
11、ntegrity Levels,安全整体要求等级,NFPA/UL1998,IEC 61508,IEC 61511,Overall Safety Life Cycle,安全生命,Safety plan,/,安全计划/管理,management,Safety Integrity Levels,安全整体要求等级,Safety system diagnostic,requirements,安全系统诊断要求,Safety system,architectures and,reliability figures,安全系统和可靠性数据,The International Safety Standards,国
12、际安全标准,IEC 61508,Safety Umbrella for the world?,Specification failures,设计技术规范不足,Design&Implementation,Failures,设计和执行出错,Installation&Commissioning,Failures,安装调试出错,Operation&Maintenance,failures,操作维护出错,Random Hardware,failures,硬/软件故障,Modification,failures,开车之后,在线修改出错,IEC 61508 Functional Safety:Safety-
13、Related Systems,IEC 61508,功能性安全:安全有关系统,Part 1:General requirements,一般要求,IS,通过表决,Part 2:Requirements for electrical/electronic/,programmable electronic systems,IS,通过表决,电子/电气/电子可编控制器,Part 3:Software requirements,软件要求,IS,通过表决,Part 4:Definitions and abbreviations,名称定义和缩写,IS,通过表决,Part 5:Examples of metho
14、ds for the determination of,IS,通过表决,safety integrity levels,列举如果制定安全等级方法,Part 6:Guidelines on the application of parts 2,3,IS,通过表决,对第二,三部分应用的说明,Part 7:Overview of techniques and measures,IS,通过表决,全面的技术和控制要求,Publication of ALL parts in June 2000,Safety Integrity Level,安全级别,4,SIL,IEC,61508,SIL,ISA,S84.
15、01,AK,DIN-V,19250,3,2,1,-,8,5,4,3,-,7,6,1,3,2,1,-,10,100,1,000,10,000,0.1,0.01,0.001,0.0001,90,99,99.9,99.99,RRF,A(s)in%,PFD,Probability to Fail Dangerous,危险可能性,Availability for Safety Functions,安全功能可提供性,Risk Reduction Factor,降低危险因素,2,Degree of consequence,最终导致的结果,S1,:Light injury&light damages for
16、environment,人员轻伤,设备损害,S2,:Death of 1 person,一人死亡,S3,:Death of more than 1 person,一人以上的死亡,S4,:Catastrophic result,灾难性后果,Presence in,hazardous area,人处于危险区的机率,A1,:Rarely to frequently,几乎很少,A2,:Frequently to continuously,经常性,Possibility of,failure prevention,排除故障可能性,G1,:Limited possibility,有限,G2,:Hardly
17、 possible,几乎不可能,Probability of,hazard occurrence,危险发生的概率,W1,:Very low,很低,W2,:Low,低,W3,:Relatively high,相对较高,NZRC pipeline safety solutions,安全级别参考设定,Necessary,Minimum risk,Reduction,IEC-61508,Safety Integrity,Level,No Safety Requirements,1,-,No Special Safety Requirements,SIL 1,2,3,4,5,6,7,8,SIL 2,SI
18、L 3,SIL 4,A single PES is not sufficient,1,2,3,4,5,6,7,8,1,2,3,4,5,6,7,_,1,2,3,4,5,6,_,_,S1,S2,S3,S4,A1,A2,A1,A2,G1,G2,G1,G2,P3,P2,P1,Risk Graph according to:DIN V 19250&IEC-1508,风险图根据,DIN V 19250&IEC-1508,Cross Reference Between SIS Class&Standards,SIS,等级和其他标准之间的对比参考,99.999,Percent,Availability,99.
19、99,99.90,99.00,90.00,0.00001,P.F.D.,(Probability of,Failure on Demand),0.0001,0.001,0.01,0.1,ANSI/ISA,S84.01,3,IEC 1508,TUV Class,(AK),Din V,19250,SIL,2,1,4,3,2,1,AK8,AK6,AK7,AK5,AK3,AK4,AK2,AK1,8,6,7,5,3,4,2,1,Lifecycle of the Safety System,安全系统的生命周期,Bold areas are ANSI/S84.01 concerns,S84 covers a
20、ll aspects of the SIS design:,-,R&D,-PHA,-Design,-Installation,-Operation and,Maintenance,-,Decommissioning,Conceptual,Process Design,Perform Process Hazard Analysis,&Risk Assessment,Apply non-SIS protection layers to prevent identified hazards or reduce risk.,SIS required?,Develop Safety,Requiremen
21、ts,Specification,YES,NO,Pre-Start-up Safety Review Assessment,SIS,Decommissioning,Perform SIS,Detail Design,Conceptual Process Design,Define target SIL,Modify,Decommission,Start,Perform SIS,Conceptual,Design,&Verify,it meets the SRS,SIS installation,commissioning,and pre-startup,acceptance test.,Est
22、ablish Operation,&Maintenance,Procedures,SIS start-up,operation,maintenance,periodic functional,testing.,Modify or,Decommission,SIS?,R&D,PHA,DESIGN,INSTALLATION,DECOMMISIONING,OPERATION&MAINTENANCE,Impact of Voting Schemes on Safety&Availability,表决结构在安全性和可用性上的冲突,Availability,Safety/Availability,TMR,
23、Safety,1,oo2/1oo2D,2,oo2,Proof-testing Interval,Increased Frequency,Integrity Level Vs Availability,安全等级和可用性要求,Availability Required,ISA S84,3,99.90-99.99%,99.00-99.90%,1,90.00-99.00%,2,Integrity Level,IEC,61508,4,99.99%,Definitions of Safety Layers,安全层的定义,SIL,Process Control System,过程控制系统,Process,e
24、quipment,过程设备,Alarms/operator,警报/操作员,E/E/PES Safety Related System,E/E/PES,安全有关系统,Mechanical Safety Layers,机械安全层,Hazop,Safety Integrity Levels-Chemical Industry Assessment,石化行业安全等级的评估,“4”-,Catastrophic Community Impact.,灾难性的社会影响,“3”-Employee and Community Protection.,人员和社会的保护,“2”-Major Property and
25、Production Protection.Possible injury to employee.,主要财产和生产的保护,对人员存在可能的伤害。,“1”-Minor Property and Production Protection.,次要财产和生产的保护,TUV,TUV stands for a rather long German name,Tecnischer Uberwachungs-Verein Rheinland,e.V,.,TUV,标准有一个很长的名字,Tecnischer,Uberwachungs-Verein,Rheinland,e.V,.,It is the only
26、independent third party agency in the world that certifies safety instrumented systems(SIS).,这是一个独立的第三方的机构,为安全仪表系统(,SIS,)进行认证。,TUV Rheinland is approved and authorized by law as a technical inspectorate,TUV,是经过法律批准的技术检查机构。,If the product is tested and meets the strict technical and performance requi
27、rements,it is approved and certified for Classes(AK)1-8.,如果产品经过测试,满足严格的技术和性能要求,它就获得,AK 1-8,级认证。,TUV,TUV has certified many different voting architectures in logic solvers e.g.1oo2,1oo2D,1oo3,2oo3 and 2oo3D.,在逻辑表决方面,,TUV,认证了很多不同的表决结构,例如:,1oo2,1oo2D,1oo3,2oo3 and 2oo3D,TUV will certify and approve the
28、 logic solver for the appropriate Class of safety service 1-7.,TUV,认证和批准逻辑表决器为适当的安全等级,1-7,级。,The safety system use request of TUV Standard asked,TUV,标准对安全系统的使用要求,TUV Certified Report:,www.tuv-,TUV,认证报告,System Safety Use Manually,系统安全使用手册,Same key request for safety system,TUV,对安全系统使用的一些关键要求:,Securit
29、y of the safety system,安全系统的安全性,Availability of the safety system,安全系统的可使用率,Execute time of the safety system,安全系统执行时间,The restrict for Self-diagnose,bestrow,rate and Self-diagnose time of the safety system,安全系统的自诊断覆盖率及自诊断时间性限制,Degrade run and time restrict of the safety system,安全系统的降级运行及时间的限制,Restr
30、ict request of TUV,TUV,的限制性要求,All products certified by TUV,must meet general and especial restrict request when it running.,所有经过,TUV,认证的产品,都有在运行时其应满足的“一般和特殊的限制”要求。,The common restrict of TUV requests clearly:All Class 5 and Class 6 Safety system cant run in single mode.,TUV,的“一般限制”非常明确的要求:所有,Class
31、5 and Class 6,级的安全系统不能以单通道的模式工作,Redundancy Safety System,冗余的安全系统,Advance the security and usability of the safety system,提高安全系统的可靠性、可用性,Achieve the restrict request that the safety standard requested to safety system,达到安全标准对安全控制系统的限制性要求,Markov Modeling Methodology,MTTF,:Mean Time To Failure,平均无故障时间,
32、MTTR,:Mean Time To Repair,平均修复时间,MTBF,:Mean Time Between Failure,平均故障间隔时间,MTBF =MTTF+MTTR,Failure Rate,:,=1/MTTF,故障率,Availability,=MTBF/(MTBF+MTTR),可用性,#MIL-HDBK-217E:Parts Count Reliability Prediction,EXAMPLE:,One Module containing two boards,Each having 20 of the same 2K by 8 static,RAMs,.,=0.14,2
33、0 RAM X 0.14=2.8 Failures Per Million Hours,2.8+2.8=5.6 Failures Per Million Hours,MTTF=1000000/5.6 Hours=178571 Hours,MTTF=20 Years,Markov Modeling Methodology,SINGLE SYSTEM,A:Availability is the probability that a system is operational at any,instant of time A=MTTF/MTBF,R:Reliability is defined as
34、 the probability of a system performing a,specific function without failure.R=Exp(-,t),Reliability is the probability that a system will work properly for,the time period required by the process being controlled.,REDUNDANT SYSTEM,A:,R:,C:Diagnostic Coverage represents the percentage of all faults a
35、system can,successfully detect and recover from.,Redundant system 90%-95%,TMR system 99%,Markov Modeling Methodology,Markov Modeling Methodology,Markov Modeling Methodology,FAIL SAFETY SYSTEM,In a system analysis,Controller failures can be classified as safe failures or dangerous failures.,-Dangerou
36、s failures are those in which the controller fails such that the process being controlled cannot shutdown safely.FD=1-FS,-A safety system must fail to a predetermined state and shutdown the process safely.FS,Markov Modeling Methodology,Partitioning of SIS Element Failures,Four Failure Rate Partitions,






