kcd2-sr--ex- Pepperl+Fuchs, kcd2-sr--ex- Datasheet - Page 7

• Manufacturer Part Number: kcd2-sr--ex-
• Description: Process Automation
• Manufacturer: Pepperl+Fuchs

2.3
SAFETY MANUAL SIL KCD2-SR-(EX)*.(LB), HIC282*
Planning
•
•
•
•
•
•
Safety Function and Safe State
Safety Function 1-channel Devices
Safety Function 2-channel Devices
LB/SC Diagnosis
The input loop of all versions is supervised, if the line fault detection is active (mandatory, see
data sheet) The related safety function is defined as the outputs are low/de-energized (safe
state), if there is a line fault detected.
KCD2-SR-(Ex)1.LK
S1 position I (normal operation)
S2 position I (output II assigned to output I)
For the 1-channel device the output II will follow output I. In this case the safety function is
defined as both outputs are low/de-energized (safe state), if the input is in low condition.
S1 position II (inverse operation)
S2 position I (output II assigned to output I)
For the 1-channel device the output II will follow output I. In this case the safety function is
defined as both outputs are low/de-energized (safe state), if the input is in high condition.
KCD2-SR-(Ex)2
S1 position I (normal operation)
S2 position I (normal operation)
The safety function is defined as the output is low/de-energized (safe state), if the input is in
low condition.
S1 position II (inverse operation)
S2 position II (normal operation)
The safety function is defined as the output is low/de-energized (safe state), if the input is in
high condition.
The safety-related device is considered to be of type A components with a Hardware Fault
Tolerance of 0.
Since the circuit has a Hardware Fault Tolerance of 0 and it is a type A component, the
SFF must be > 60 % according to table 2 of IEC 61508-2 for SIL2 (sub)system.
Failure rate based on the Siemens SN29500 data base.
It was assumed that the appearance of a safe error (e. g. output in safe state) would be
repaired within 8 hours (e. g. remove sensor burnout).
During the absence of the device for repairing, measures have to be taken to ensure the
safety function (for example: substitution by an equivalent device).
For the calculation it was also assumed that the indication of a dangerous error (via fault
bus) would be detected within 1 hour by the logic solver (SPS).
HiC2821
SW1-1 position off (normal operation)
SW1-3 position on (output II assigned to
output I)
SW1-1 position on (inverse operation)
SW1-3 position on (output II assigned to
output I)
HiC2822
SW1-1 position off (normal operation)
SW1-3 position off (normal operation)
SW1-1 position on (inverse operation)
SW1-3 position on (inverse operation)
7