Device States; Safety Characteristic Values - Siemens SITRANS P Operating Instructions Manual

Functional Safety
10.1 Safety concept
Two SITRANS P devices are required for multi-channel operation for SIL 3. Operation with one
device is not permitted.
Note
Switching-off of system at high monitoring accuracy
The two transmitters are connected to the process at different positions. Actual differences in
pressure ≥ the total tolerance (safety function) can occur when the process is started up or if
there are other pressure variations. A difference in pressure ≥ the total tolerance (safety
function) will shut down the system.
● Match the monitoring accuracy of the automation system to the process.
● Mount the two transmitters exposed to equal conditions.
10.1.3.1

Device states

The following table provides a definition of the states of the device:
Device state
Normal mode (4-20 mA)
Detected failure (safe state)
Dangerous state
10.1.3.2

Safety characteristic values

You can find the safety characteristic values in the SIL Declaration of Conformity.
Note
Useful lifetime
Constant failure rates are assumed for the calculation of PFD/SFF. This assumption is valid for
environmental conditions that are typical for an industrial environment, corresponding to IEC
60654-1 class C (weatherproof locations) with an average long-term temperature of 40°C. After
14 years, however, the failure rates may increase.
162
Description
The safe current output outputs
the measured value within the
defined safety accuracy.
The safe current output is
≤ 3.6 mA or > 21.5 mA (specified
as failure signal).
A dangerous state exists when a
current output is in the range
4-20 mA and deviates from the
correct process value by more
than the specified safety accura‐
cy (Page 160) for more than 2
seconds.
Operating Instructions, 11/2019, A5E44852162-AC
Error class
-
(λ ) Rate of dangerous detec‐
DD
ted errors
(λ ) Rate of dangerous undetec‐
DU
ted errors
SITRANS P320/P420 with 4 to 20 mA/HART