Evaluation Process for the Hardware Safety Integrity Level

Authors: Sung Kyu Kim, Yong Soo Kim

Abstract:

Safety instrumented systems (SISs) are becoming increasingly complex and the proportion of programmable electronic parts is growing. The IEC 61508 global standard was established to ensure the functional safety of SISs, but it was expressed in highly macroscopic terms. This study introduces an evaluation process for hardware safety integrity levels through failure modes, effects, and diagnostic analysis (FMEDA).FMEDA is widely used to evaluate safety levels, and it provides the information on failure rates and failure mode distributions necessary to calculate a diagnostic coverage factor for a given component. In our evaluation process, the components of the SIS subsystem are first defined in terms of failure modes and effects. Then, the failure rate and failure mechanism distribution are assigned to each component. The safety mode and detectability of each failure mode are determined for each component. Finally, the hardware safety integrity level is evaluated based on the calculated results.

Keywords: Safety instrumented system; Safety integrity level; Failure modes, effects, and diagnostic analysis; IEC 61508.

Digital Object Identifier (DOI): doi.org/10.5281/zenodo.1061386

References:

[1] I. Yoshimura, and Y. Sato, "Safety achieved by the safe failure fraction (SFF) in IEC 61508," IEEE Trans. Reliability, vol. 57, no. 4, pp. 662-669, Dec. 2008.
[2] H. Guo and X. Yang, "A simple reliability block diagram method for safety integrity verification," Reliability Engineering and System Safety, vol. 92, no. 9, pp. 1267-1273, Sep. 2007.
[3] M. A. Lundteigen, M. Rausand, and I. B. Utne,"Integrating RAMS engineering and management with the safety life cycle of IEC 61508," Reliability Engineering and System Safety, vol. 94, no. 12, pp. 1894-1903, Dec. 2009.
[4] IEC 61508-4,"Functional safety of electrical/electronic/programmable electronic safety-related systems - Part 4: Definitions and abbreviations," 2nd ed., Apr. 2010.
[5] Y. Langeron, A. Barros, A. Grall andC. Bérenguer, "Combination of safety integrity levels (SILs): A study of IEC61508 merging rules," Journal of Loss Prevention in the Process Industries, vol. 21, no. 4, pp. 437-449, July 2008.
[6] H. Guo and X. Yang, "Automatic creation of Markov models for reliability assessment of safety instrumented systems," Reliability Engineering and System Safety, vol. 93, no. 6, pp. 829-837, June 2008.
[7] M. Sallak, C. Simon, and J.-F. Aubry, "A fuzzy probabilistic approach for determining safety integrity level," IEEE Trans.Fuzzy Systems, vol. 16, no. 1, pp. 239-248, Feb. 2008.
[8] IEC 61508-2,"Functional safety of electrical/electronic/programmable electronic safety-related systems-Part 2: Requirements for electrical/electronic/programmable electronic safety-relatedsystems," 2nd ed., Apr. 2010.
[9] M. A. Lundteigen and M. Rausand, "Architectural constraints in IEC 61508: do they have the intended effect?," Reliability Engineering and System Safety, vol. 94, no. 2, pp. 520-525, Feb. 2009.
[10] W.M. Goble and A.C. Brombacher, "Using a failure modes, effects and diagnostic analysis (FMEDA) to measure diagnostic coverage in programmable electronic systems," Reliability Engineering and System Safety, vol. 66, no. 2, pp. 145-148, Nov. 1999.
[11] M. Catelani, L. Ciani and V. Luongo, "The FMEDA approach to improve the safety assessment according to the IEC61508," Microelectronics Reliability, vol. 50, no. 9-11, pp. 1230-1235, Sep.-Nov. 2010.
[12] J. J. Sammarco, "Programmable electronic and hardwired emergency shutdown systems: Aquantified safety analysis," IEEE Trans. Industry Applications, vol. 43, no. 4, pp. 1061-1068, July-Aug. 2007.
[13] S. K. Kim and Y. S. Kim, "A study on FMEDA process for SIL certification - A case study of a flame scanner -," IE Interfaces, vol. 25, no. 4, pp.422-430, Dec. 2012.
[14] J. Beugin, D. Renaux and L. Cauffriez, "A SIL quantification approach based on an operating situation modelfor safety evaluation in complex guided transportation systems," Reliability Engineering and System Safety, vol. 92, no. 12, pp. 1684-1700, Dec. 2007.
[15] T. S. Mathews, M. Ramakrishnan, U. Parthasarathy, A. J. Arul and C. S. Kumar, "Functional reliability analysis of safety grade decay heat removal system of indian 500 MWe (PFBR)," Nuclear Engineering and Design, vol. 238, no. 9, pp. 2369-2376, Sep. 2008.
[16] A.C. Torres-Echeverría, S. Martorell and H. A. Thompson, "Modelling and optimization of proof testing policies for safety instrumented systems," Reliability Engineering and System Safety, vol. 94, no. 4, pp. 838-854, Apr. 2009.
[17] IEC 61508-1,"Functional safety of electrical/electronic/programmable electronic safety-related systems-Part 1: General requirements," 2nd ed., Apr. 2010.
[18] H. Jin, M. A. Lundteigen and M. Rausand, "Reliability performance of safety instrumented systems: A common approach for both low- and high-demand mode of operation," Reliability Engineering and System Safety, vol. 96, no. 3, pp. 365-373, March 2011.
[19] IEC 61508-6,"Functional safety of electrical/electronic/programmable electronic safety-related systems-Part 6: Guidelines on the application of IEC 61508-2 and IEC 61508-3," 2nd ed., Apr. 2010.