Bosch Plena Voice Alarm System Installation And Operation Manual page 156

156 en |
Clause / Requirement
a
b
14.4.2 If the program executes in one processor,
the execution of the routines in 14.4.1, it shall be
monitored by a monitoring device as in 14.4.4.
14.4.3 If the program executes in more than one
processor, the execution of the routines in 14.4.1
shall be monitored in each processor. A
monitoring device as in 14.4.4 shall be
associated with one or more processors, and at
least one such processor shall monitor the
functioning of any processor not associated with
such a monitoring device.
14.4.4 The monitoring device of 14.4.2 and
14.4.3 shall have a time-base independent of that
of the monitored system. The functioning of the
monitoring device, and the signaling of a fault
warning, shall not be prevented by a failure in
the execution of the program of the monitored
system.
14.4.5 In the event of a system fault as specified
in 14.4.1 a) or 14.6, those parts of the VACIE
affected shall enter a safe state not later than the
indication of the system fault. This safe state
shall not result in the false activation of
mandatory outputs.
14.5 The storage of programs and data
(see also Annex C)
9922 141 1037x (V2.16) | V0.6 | 2011.09
the VACIE shall indicate a system fault (as in
8.3);
the VACIE shall enter the fault warning
condition and indicate faults of affected
supervised functions (as in 8.2.4, 8.2.5, 8.2.6
and 8.3), where only these functions are
affected.
Installation and Operation manual
Compliance
Upon activation of a watchdog, a fault is
reported after restart of the failing
component indicating the failing unit and
processor. A system fault is indicated
when entering the fault condition.
Upon activation of a watchdog, a fault is
reported after restart of the failing
component indicating the failing unit and
processor.
All processors used in the Plena Voice
Alarm System are either guarded by a
hardware watchdog or are monitored by
a processor that is guarded by a
hardware watchdog.
All processors are either guarded by a
hardware watchdog or are monitored by
a processor that is guarded by a
hardware watchdog.
The controller is responsible for
monitoring all processors in the system.
Upon failure of one of the processors,
either due to a watchdog failure or due to
a communication failure a fault is
generated. Failure of the controller itself
will cause the system fault output
contact to be de-energized to indicate a
system fault.
All processors are either guarded by a
hardware watchdog or are monitored by
a processor that is guarded by a
hardware watchdog.
Additionally the correct operation of the
main processor of all system elements is
validated by adding execution checks on
relevant locations in the code. This to
assure that no important flow is excluded
from execution.
Upon restart of a unit other than the
Controller, the unit will be reinitialized
and reordered to its expected state.
Plena Voice Alarm System is compliant.
Plena Voice Alarm System
Signature
Bosch Security Systems B.V.