1. Catalogs
  2. AUMA
  3. FUNCTIONAL SAFETY – SIL

FUNCTIONAL SAFETY – SIL

FUNCTIONAL SAFETY – SIL
1 / 28 PagesView full catalog

FUNCTIONAL SAFETY – SIL

Product catalog summary
Introduction
AUMA is a prominent manufacturer of electric actuators used in sectors like water supply, power plants, and refineries. The company emphasizes developing reliable products for safety systems up to Safety Integrity Level (SIL) 3.
Functional Safety Overview
Functional safety ensures systems perform safety functions to prevent hazards, governed by standards such as IEC 61508 and IEC 61511. SIL measures risk reduction, ranging from SIL 1 to SIL 4.
Standards on Functional Safety
IEC 61508 is crucial for electrical and electronic systems' functional safety, while IEC 61511 applies to the process industry. Other standards include IEC 62061 for machinery safety and EN ISO 13849 for control systems.
Achieving Functional Safety
Achieving functional safety involves risk analysis and implementing safety functions. This includes selecting components that meet SIL requirements, avoiding systematic faults, and verifying SIL through safety figures.
Safety Function and Safety-Instrumented System
Safety functions are protective actions activated during failures, implemented by Safety Instrumented Systems (SIS) comprising sensors, safety PLCs, and actuators.
Criteria for Risk Reduction
Risk reduction criteria include systematic capability, average probability of failure on demand, and architectural constraints. Systematic capability ensures components meet SIL requirements.
AUMA's Role
AUMA tests products for SIL classification, collaborating with independent authorities to ensure compliance with safety standards.
Hardware Fault Tolerance (HFT)
HFT is a system's ability to perform safety functions despite faults. Increasing HFT involves creating redundant system architectures.
Risk Reduction Criteria
The Average Probability of Failure on Demand (PFDavg) describes the mean probability of unavailability to perform safety functions, with defined ranges for each SIL level.
Modes of Operation
  • Low Demand Mode: Safety function requested maximum once a year, with varying PFD values by SIL level.
  • High Demand and Continuous Mode: Safety function requested more than once a year or continuously, using probability of failure per hour (PFH).
Architectural Constraints
IEC 61508 distinguishes between simple (Type A) and complex (Type B) devices, using Safe Failure Fraction (SFF) and HFT to determine SIL levels.
Failure Rates
Failure rates are classified as dangerous or safe, with diagnostic coverage examined. Safe failures initiate safety functions, while dangerous failures might prevent them.
Proof Tests
Safety functions must be periodically checked to reveal and eliminate failures, improving PFD values.
SIL Capability
SIL capability is determined by systematic capability, probability of failure on demand, and architectural constraints.
Improving SIL Capability
Redundancy and partial valve stroke tests (PVST) can increase SIL capability by detecting faults before impairing safety functions.
AUMA Products with SIL Classification
AUMA offers products for various SIL requirements, including actuators and gearboxes, classified up to SIL 3 with redundant architecture.
Safety Functions
AUMA actuators support safety functions like Safe OPENING/CLOSING, Safe STOP, and Safe end position feedback, combined with diagnostic measures like PVST.
Application Examples
Examples include overfill protection for oil tanks and lock systems, demonstrating safety functions like Safe CLOSING and Safe STOP.
Overview
The document details actuator controls focusing on safety functions compliant with IEC 61508 and ISO 13849 standards, covering models and their safety capabilities.
Specifications
Outlines actuator models like FQM, FQMEx, AC 01.2, and ACExC 01.2, highlighting SIL ratings for safe opening/closing and stopping functions.
Safety Functions
Key functions include Safe Opening/Closing (ESD), Safe Stop, and Safe End Position Feedback, with SIL modules ensuring these functions override standard operations during emergencies.
System Architecture
Actuators can be integrated into systems with separated SIS or combined with standard operations, emphasizing compliance with IEC 61511.
SIL Module
The SIL module is an additional board executing safety functions, classified as a type A device for SIL 2 and SIL 3 applications.
Configuration Options
The AC .2 actuator controls offer factory-preset configuration options for actuator seating and safety function execution.
Monitoring and Inputs/Outputs
The SIL module provides electromechanical monitoring with safe inputs and outputs for redundancy and fault signaling.
Fail Safe Units
The FQM fail-safe unit, certified for SIL 2 and SIL 3, provides mechanical solutions for emergencies using a constant force spring.
Assessment and Certification
Details assessment procedures for determining SIL capability, with certifications from TÜV Nord and exida.
Introduction
Discusses reliability and safety assessment using FMEDA in compliance with IEC 61508, highlighting experience data and systematic fault avoidance.
FMEDA Methodology
FMEDA calculates safety figures, examining failure scenarios and probabilities, assessing potential faults and diagnostic capabilities.
Hardware Assessment
Details hardware assessment of developments like AC .2 actuator controls and FQM fail-safe units, emphasizing testing and certification.
Functional Safety Management System
AUMA employs a Functional Safety Management system to minimize systematic faults, extending beyond quality management.
Determination of Safety Figures
Random faults are recorded to assess residual risk, with safety figures provided to customers.
Support and Documentation
AUMA offers expert assistance in selecting components for safety systems and provides comprehensive documentation on functional safety.
Contact Information
AUMA Riester GmbH & Co. KG is based in Germany, with subsidiaries in over 70 countries. Contact details are available on their website.
See more

Catalog excerpts

FUNCTIONAL SAFETY – SIL-1

Solutions for a world in motion FUNCTIONAL SAFETY - SIL Electric actuators for safety-related systems up to SIL 3

 Open the catalog to page 1
FUNCTIONAL SAFETY – SIL-2

AUMA, the globally leading manufacturer of electric actuators for the automation of industrial valves. AUMA actuators work reliably all around the globe for managing the flow of liquids or gases, powders or granulates. Their use sees them placed in sectors such as in water supply and waste water sector, in power plants, pipelines, refineries, and industrial plants of any kind. YOUR EXPERT PARTNER FOR ELECTRIC ACTUATORS Since 1964, the founding year of the company, we have focused on development, the manufacture, sales and service of electric actuators. Our products have become renowned global...

 Open the catalog to page 2
FUNCTIONAL SAFETY – SIL-3

AUMA AUTOMATES VALVES functional safety AUMA offers a broad portfolio of electric actuators qualified for safety-related systems up to SIL 3. Our products contribute to the safe operation of technical systems all around the globe. Internationally renowned test institutes have determined both safety figures and SIL capability for our products. Besides a basic introduction to the functional safety topic, this brochure will provide you with detailed information on the SIL capability of AUMA products. Further documents like certificates, inspection certificates, safety figures, or our comprehensive...

 Open the catalog to page 3
FUNCTIONAL SAFETY – SIL-4

Safety issues in modern industrial plants gain increasing importance, in particular for plants with high hazard potential within the oil & gas sector, the chemical industry or in power plants. Today, a clear trend to implement sophisticated safety systems intervening in case of failure can be noted, in particular to monitor processes leading to potential hazards for both persons and the environment. Such systems are used to shut down a plant in case of emergency, for example, to cut off the supply of hazardous substances, provide cooling or open overpressure valves. To reduce hazards emanating...

 Open the catalog to page 4
FUNCTIONAL SAFETY – SIL-5

AUMA'S ROLE WITHIN THIS CONTEXT SIL is a term closely linked to functional safety. SIL is the abbreviation for Safety Integrity Level and a measuring unit for risk reduction with safety functions. AUMA products are implemented as components into systems which perform safety functions. For this reason and in collaboration with independent test authorities such as TÜV and exida, we examined of which SIL our actuators, actuator controls and gearboxes are capable. The higher the potential hazards from processes or systems, the more demanding the requirements on reliability of safety functions. IEC...

 Open the catalog to page 5
FUNCTIONAL SAFETY – SIL-6

STANDARDS ON FUNCTIONAL SAFETY THE ORIGINS Industrial accidents with disastrous consequences such as the Seveso dioxin disaster in 1976, or the Indian Bhopal gas tragedy in 1984, put the worldwide standardisation processes with regard to the safety of technical systems into gear. This standard includes the application-specific implementation of IEC 61508 for the process industry, in particular the chemical and petrochemical industry. It defines the requirements for safety-related systems used in the process industry for risk reduction. It also uses safety integrity levels SIL 1 to SIL 4 as a...

 Open the catalog to page 6
FUNCTIONAL SAFETY – SIL-7

safety-related assessment_ First of all, the risks emanating from a system or process will have to be analysed to achieve functional safety. The standards IEC 61508 and 61511 supply a recognised method for risk evaluation. Differentiated safety-related assessments are used to identify the processes leading to actual hazardous events. Consequently, focus can be placed on taking risk reducing actions wherever truly needed. identification of hazardous processes Firstly, processes in plants that could lead to potential hazards for persons and the environment must be examined if they become out of...

 Open the catalog to page 7
FUNCTIONAL SAFETY – SIL-8

SAFETY FUNCTION AND SAFETY-INSTRUMENTED SYSTEM WHAT IS A SAFETY FUNCTION? WHAT IS A SAFETY INSTRUMENTED SYSTEM? Safety instrumented functions (SIF) are protective actions activated in case of failure to avoid damage of persons, environment and material assets. Functional safety is achieved if safety functions work reliably in case of failure. A safety function is implemented by the components of the Safety Instrumented System (SIS). Such a system generally consists of the following components: sensor, host safety PLC and actor. In the valve sector, the actor combines actuator and valve. A typical...

 Open the catalog to page 8
FUNCTIONAL SAFETY – SIL-9

CRITERIA FOR RISK REDUCTION When analysing the potential hazards of a process, the SIL to be met is determined for each safety instrumented function. International standards IEC 61508 and IEC 61511 define the three main criteria the safety instrumented function or the SIS has to comply with to meet the required risk reduction: SYSTEMATIC CAPABILITY >> Systematic capability >> Permitted average probability of failure on demand >> Architectural constraints >> The first method (Route 1S in the standard) requires that certain procedures are heeded during development, manufacture and maintenance etc....

 Open the catalog to page 9
FUNCTIONAL SAFETY – SIL-10

Safety integrity level Allowed PFD avg value (low demand) average probability of failure on demand (pfd and pfh) The PFDavg value (average Probability of dangerous Failure on Demand) describes the mean probability of the unavailability to perform the safety function. According to IEC 61508, an allowable range for the probability of failure is defined for each of the four safety integrity levels. SIL 1 represents the lowest level, SIL 4 being the highest level. The higher the safety level, the lower the probability for the failure of a safety function on demand. The extent of loss is not the only...

 Open the catalog to page 10
FUNCTIONAL SAFETY – SIL-11

Device type IEC 61508 distinguishes between simple and complex devices. The following parameters are required for the assessment of the different risk reduction criteria: > Simple type A elements Type A devices are "simple" units for which the failure behaviour of all components is completely known. They comprise e.g. relays, resistors and transistors, however no complex electronic components such as e.g. microcontrollers. > Complex type B devices Type B devices are "complex" units containing electronic components such as microcontrollers, microprocessors and ASICs. For these components and in...

 Open the catalog to page 11

All AUMA catalogs and technical brochures

  1. SAEx 07.2

    1  Page

*Prices are pre-tax. They exclude delivery charges and customs duties and do not include additional charges for installation or activation options. Prices are indicative only and may vary by country, with changes to the cost of raw materials and exchange rates.