0% found this document useful (0 votes)

646 views24 pages

en Safety Manual VEGASWING 61 63 Contactless Electronic Switch With SIL

Vega Radar Transmitter

Uploaded by

triminhdang_phar6701

We take content rights seriously. If you suspect this is your content, claim it here.

Available Formats

Download as PDF, TXT or read online on Scribd

0% found this document useful (0 votes)

646 views24 pages

en Safety Manual VEGASWING 61 63 Contactless Electronic Switch With SIL

Vega Radar Transmitter

Uploaded by

triminhdang_phar6701

We take content rights seriously. If you suspect this is your content, claim it here.

Available Formats

Download as PDF, TXT or read online on Scribd

You are on page 1/ 24

Safety Manual

VEGASWING 61, 63
Contactless electronic switch
With SIL qualification

Document ID: 52081

Contents

Contents
1 Document language

2 Scope
2.1 Instrument version............................................................................................................. 4
2.2 Area of application............................................................................................................ 4
2.3 SIL conformity................................................................................................................... 4
3 Planning
3.1 Safety function.................................................................................................................. 5
3.2 Safe state.......................................................................................................................... 5
3.3 Prerequisites for operation................................................................................................ 5
4 Safety-related characteristics
4.1 Key figures acc. to IEC61508............................................................................................ 6
4.2 Figures according to ISO13849-1..................................................................................... 6
4.3 Supplementary information............................................................................................... 7
5 Setup
5.1 General information........................................................................................................... 8
5.2 Adjustment instructions..................................................................................................... 8
6 Diagnostics and servicing
6.1 Behaviour in case of failure............................................................................................... 9
6.2 Repair............................................................................................................................... 9
7 Proof test
7.1 General information......................................................................................................... 10
7.2 Test 1 - without filling/emptying or dismounting the sensor.............................................. 10
7.3 Test 2 - with filling/emptying or dismounting the sensor................................................... 10
8 Appendix A - Test report

9 Appendix B - Term definitions

10 Supplement C - SIL conformity

52081-EN-160421

Editing status: 2016-04-15

2 VEGASWING 61, 63 Contactless electronic switch

1 Document language

1 Document language
DE Das vorliegende Safety Manual fr Funktionale Sicherheit ist verfgbar in den Sprachen
Deutsch, Englisch, Franzsisch und Russisch.
EN The current Safety Manual for Functional Safety is available in German, English, French and
Russian language.
FR Le prsent Safety Manual de scurit fonctionnelle est disponible dans les langues suivantes:
allemand, anglais, franais et russe.
RU Safety Manual
, , .
52081-EN-160421

VEGASWING 61, 63 Contactless electronic switch 3

2 Scope

2 Scope
2.1 Instrument version
This safety manual applies to point level sensors
VEGASWING 61 with SIL qualification
VEGASWING 63 with SIL qualification
Electronics module:
Contactless electronic switch

2.2 Area of application

The instrument can be used for level detection of liquids in a safety-
related system according to IEC61508 in the modes low demand
mode or high demand mode:
Up to SIL2 in single-channel architecture
Up to SIL3 in a multiple-channel architecture (systematic suitability
SC3)
The following interface can be used to output the measured value:
Contactless electronic switch

2.3 SIL conformity

The SIL conformity was independently judged by exida Certification
S.A. according to IEC61508.1)

52081-EN-160421

1)
Verification documents see appendix.

4 VEGASWING 61, 63 Contactless electronic switch

3 Planning

3 Planning
3.1 Safety function
Safety function To monitor a limit level, the sensor detects via the conditions "Vibrat-
ing element uncovered" or "Vibrating element covered" a limiting
value defined by the mounting location.
The detected status is signalled on the output with "Contactless
electronic switch non-conductive" or "Contactless electronic switch
conductive".

3.2 Safe state

Safe state The safe state of the output signal is independent of the mode ad-
justed on the sensor.
Mode Overflow protection Dry run protection
(mode max.) (mode min.)
Vibrating element covered uncovered
Non-conductive Non-conductive
Output current
(<10mA) (<10mA)

Fault signals in case of Contactless electronic switch:

malfunction
Non-conductive

3.3 Prerequisites for operation

Instructions and restric- The measuring system should be used appropriately taking pres-
tions sure, temperature, density and chemical properties of the medium
into account. The application-specific limits must be observed.
The specifications according to the operating instructions manual,
particularly the current load on the output circuits, must be kept
within the specified limits
When used as dry run protection, buildup on the vibrating system
should be avoided (probably shorter proof test intervals will be
necessary)
The instructions in chapter "Safety-related characteristics", para-
graph "Supplementary information" must be noted
All parts of the measuring chain must correspond to the planned
"Safety Integrity Level (SIL)"
52081-EN-160421

VEGASWING 61, 63 Contactless electronic switch 5

4 Safety-related characteristics

4 Safety-related characteristics
4.1 Key figures acc. to IEC61508
Parameter Value
Safety Integrity Level SIL2 in single-channel architecture
SIL3 in multiple channel architecture2)
Hardware error tolerance HFT=0
Instrument type Type A
Mode Low demand mode, High demand mode
SFF >60%
MTBF = MTTF + MTTR3) 3.33x106h (381years)
Fault reaction time 4)
<1.5s

Failure rates
S DD DU H L AD AU
162FIT 0FIT 34FIT 0FIT 0FIT 0FIT 1FIT

PFDAVG 0.028x10-2 (T1 = 1 year)

PFDAVG 0.082x10 -2
(T1 = 5 years)
PFDAVG 0.149x10-2 (T1 = 10 years)
PFH 0.034x10-6 1/h

Proof Test Coverag (PTC)

Remaining failure rate of danger-
Test type5) PTC
ous undetected failures
Test 1 19FIT 44%
Test 2 2FIT 95%

4.2 Figures according to ISO13849-1

Derived from the safety-related characteristics, the following figures
result according to ISO13849-1 (machine safety):6)
Parameter Value
MTTFd 3358years
DC 0%
Performance Level 3.40x10-8 1/h (corresponds to "e")
52081-EN-160421

2)
Homogeneous redundancy possible.
3)
Including errors outside the safety function.
4)
Time between the occurrence of the event and the output of a fault signal.
5)
See section "Proof test".
6)
ISO13849-1 was not part of the certification of the instrument.

6 VEGASWING 61, 63 Contactless electronic switch

4 Safety-related characteristics

4.3 Supplementary information

Determination of the The failure rates of the instruments were determined by an FMEDA
failure rates according to IEC61508. The calculations are based on failure rates of
the components according to SN29500:
All figures refer to an average ambient temperature of 40C (104F)
during the operating time. For higher temperatures, the values should
be corrected:
Continuous application temperature >50C (122F) by factor 1.3
Continuous application temperature >60C (140F) by factor 2.5
Similar factors apply if frequent temperature fluctations are expected.
Assumptions of the The failure rates are constant. Take note of the useful service life of
FMEDA the components according to IEC61508-2.
Multiple failures are not taken into account
Wear on mechanical parts is not taken into account
Failure rates of external power supplies are not taken into account
The environmental conditions correspond to an average industrial
environment

Calculation of PFDAVG The values for PFDAVG specified above were calculated as follows for a
1oo1 architecture:
PTC DU T1 (1 PTC) DU LT
PFDAVG = + DD x MTTR +
2 2
Parameters used:
T1 = Proof Test Interval
PTC = 90%
LT = 10 years
MTTR = 24h

Configuration of the pro- A connected control and processing unit must have the following
cessing unit properties:
The failure signals of the measuring system are judged according
to the idle current principle
"fail low" and "fail high" signals are interpreted as a failure, where-
upon the safe state must be taken on
If this is not the case, the respective percentages of the failure rates
must be assigned to the dangerous failures and the values stated in
chapter Safety-related characteristics redetermined!

Multiple channel archi- Due to the systematic suitability SC3, this instrument can also be
tecture used in multiple channel systems up to SIL3, also with a homogene-
ously redundant configuration.
The safety-related characteristics must be calculated especially for
the selected structure of the measuring chain using the stated failure
52081-EN-160421

rates. In doing this, a suitable Common Cause Factor (CCF) must be

considered (see IEC61508-6, appendix D).

VEGASWING 61, 63 Contactless electronic switch 7

5 Setup

5 Setup
5.1 General information
Mounting and installation Take note of the mounting and installation instructions in the operating
instructions manual.
Setup must be carried out under process conditions.

5.2 Adjustment instructions

Adjustment elements The adjustment elements must be set according to the specified
safety function:
Slide switch for changeover of the mode (min./max.)
Slide switch for changeover of the sensitivity
The function of the adjustment elements is described in the operating
instructions manual.
Please note! During adjustment process, the safety function must be considered
as unreliable!
If necessary, you must take other measures to maintain the safety
function.
With regard to the switch on/swich off delay it must be ensured that
the sum of all switching delays from the transducer to the actuator is
adapted to the process safety time!
The instrument must be protected against inadvertent or unauthorized
adjustment!

52081-EN-160421

8 VEGASWING 61, 63 Contactless electronic switch

6 Diagnostics and servicing

6.1 Behaviour in case of failure
Internal diagnosis The instrument is permanently monitored by an internal diagnostic
system. If a malfunction is detected, the respective output signals
change to the safe status (see section "Safe status").
The fault reaction time is specified in chapter "Safety-relevant charac-
teristics".
If failures are detected, the entire measuring system must be shut
down and the process held in a safe state by other measures.
The manufacturer must be informed of the occurrence of a dangerous
undetected failure (incl. fault description).

6.2 Repair
Electronics exchange The procedure is described in the operating instructions manual. Note
the instructions for setup.
52081-EN-160421

VEGASWING 61, 63 Contactless electronic switch 9

7 Proof test

7 Proof test
7.1 General information
Objective To identify possible dangerous, undetected failures, the safety func-
tion must be checked by a proof test at adequate intervals. It is the
user's responsibility to choose the type of testing. The time intervals
are determined by the selected PFDAVG (see chapter "Safety-related
characteristics").
For documentation of these tests, the test protocol in the appendix
can be used.
If one of the tests proves negative, the entire measuring system must
be switched out of service and the process held in a safe state by
means of other measures.
In a multiple channel architecture this applies separately to each
channel.
Preparation Determine safety function (mode, switching points)
If necessary, remove the instruments from the safety chain and
maintain the safety function by other means

Unsafe device Warning:

status During the function test, the safety function must be treated as unreli-
able. Take into account that the function test influences downstream
connected devices.
If necessary, you must take other measures to maintain the safety
function.
After the function test, the status specified for the safety function must
be restored.

7.2 Test 1 - without filling/emptying or

dismounting the sensor
Conditions Instrument can remain in installed condition
Output signal corresponds to the level (covered or uncovered
vibrating element)
Procedure 1. Carry out a restart (switch the instrument off and then on again)
2. Push the min./max. switch on the sensor

Expected result to 1: Output signal corresponds to the level

to 2: Output signal changes status

Proof Test Coverage See Safety-related characteristics

7.3 Test 2 - with filling/emptying or dismounting

the sensor
52081-EN-160421

Conditions Alternative 1: the instrument remains mounted; the condition

"Vibrating element uncovered"/"Vibrating element covered" can be
changed by filling or emptying to the switching point.

10 VEGASWING 61, 63 Contactless electronic switch

7 Proof test

Alternative 2: the instrument is dismounted; the condition "Vibrat-

ing element uncovered"/"Vibrating element covered" can be
changed by dipping the instrument into the original medium
Output signal corresponds to the level (covered or uncovered
vibrating element)

Procedure Filling or emptying up to the switching point or immersion into the

original medium and assessing the corresponding switching status by
a current measurement

Expected result Current value of the output signal corresponds to the modified level
(<10mA or 10400mA)

Proof Test Coverage See Safety-related characteristics

52081-EN-160421

VEGASWING 61, 63 Contactless electronic switch 11

8 Appendix A - Test report

Identification
Company/Tester
Plant/Instrument TAG
Meas. loop TAG
Instrument type/Order code
Instrument serial number
Date, setup
Date, last function test

Test reason Test scope

() Setup () without filling or dismounting the sensor
() Proof test () with filling or dismounting the sensor

Mode Sensitivity
() Overflow protection () 0.7g/cm (0.025lbs/in)
() Dry run protection () 0.5g/cm (0.018lbs/in)

Test result
Test step Level Expected measured Real value Test result
value

Confirmation

Date: Signature:
52081-EN-160421

12 VEGASWING 61, 63 Contactless electronic switch

9 Appendix B - Term definitions

Abbreviations
SIL Safety Integrity Level (SIL1, SIL2, SIL3, SIL4)
SC Systematic Capability (SC1, SC2, SC3, SC4)
HFT Hardware Fault Tolerance
SFF Safe Failure Fraction
PFDAVG Average Probability of dangerous Failure on Demand
PFH Average frequency of a dangerous failure per hour (Ed.2)
FMEDA Failure Mode, Effects and Diagnostics Analysis
FIT Failure In Time (1FIT = 1 failure/109h)
SD Rate for safe detected failure
SU Rate for safe undetected failure
S S = SD + SU
DD Rate for dangerous detected failure
DU Rate for dangerous undetected failure
H Rate for failure, who causes a high output current (>21mA)
L Rate for failure, who causes a low output current (3.6mA)
AD Rate for diagnostic failure (detected)
AU Rate for diagnostic failure (undetected)
DC Diagnostic Coverage
PTC Proof Test Coverage
T1 Proof Test Interval
LT Useful Life Time
MTBF Mean Time Between Failure
MTTF Mean Time To Failure
MTTR Mean Time To Restoration (Ed.2)
MRT Mean Repair Time
MTTFd Mean Time To dangerous Failure (ISO13849-1)
PL Performance Level (ISO13849-1)
52081-EN-160421