Additionally, the following parts may belong to the documentation, if applicable: • EU-type examination certificate • EU declaration of conformity • Attestation of conformity • Certificates • Control drawings • FMEDA report • Assessment report • Additional documents For more information about Pepperl+Fuchs products with functional safety, see www.pepperl-fuchs.com/sil.
Functional Safety HiC2853R1, HiC2853R4 Introduction Safety Information Target Group, Personnel Responsibility for planning, assembly, commissioning, operation, maintenance, and dismounting lies with the plant operator. Only appropriately trained and qualified personnel may carry out mounting, installation, commissioning, operation, maintenance, and dismounting of the product. The personnel must have read and understood the instruction manual and the further documentation.
Functional Safety HiC2853R1, HiC2853R4 Introduction Symbols Used This document contains symbols for the identification of warning messages and of informative messages. Warning Messages You will find warning messages, whenever dangers may arise from your actions. It is mandatory that you observe these warning messages for your personal safety and in order to avoid property damage.
The device has the following interfaces: • Safety relevant interfaces: input, output I, output II • Non-safety relevant interfaces: power supply, fault output Note For corresponding connections see datasheet. Marking Pepperl+Fuchs Group Lilienthalstraße 200, 68307 Mannheim, Germany Internet: www.pepperl-fuchs.com HiC2853R1, HiC2853R4 Up to SIL 3...
Functional Safety HiC2853R1, HiC2853R4 Planning Planning System Structure 3.1.1 Low Demand Mode of Operation If there are two control loops, one for the standard operation and another one for the functional safety, then usually the demand rate for the safety loop is assumed to be less than once per year.
Functional Safety HiC2853R1, HiC2853R4 Planning Assumptions The following assumptions have been made during the FMEDA: • Failure rates are constant, wear is not considered. • Failure rate based on the Siemens standard SN 29500. • The safety-related device is considered to be of type A device with a hardware fault tolerance of 0.
Functional Safety HiC2853R1, HiC2853R4 Planning Safety Function and Safe State Safe State The safe state is reached when the input goes to the low current state (I < 2.1 mA) or the fault state (I > 5.9 mA). Safety Function The safe state for the resistive transistor output (output I) is high impedant.
Functional Safety HiC2853R1, HiC2853R4 Planning Characteristic Safety Values HiC2853R1 Parameters Characteristic values Assessment type and documentation Full assessment Device type Demand mode Low demand mode or high demand mode Safety function Signal transfer via electronic Signal transfer via resistive output transistor output 186 FIT 145 FIT...
Page 14
Functional Safety HiC2853R1, HiC2853R4 Planning HiC2853R4 Parameters Characteristic values Assessment type and documentation Full assessment Device type Demand mode Low demand mode or high demand mode Safety function Signal transfer via electronic Signal transfer via resistive output transistor output 187 FIT 146 FIT ...
As noted in DIN EN 61508-2:2011 note N3, appropriate measures taken by the manufacturer and plant operator can extend the useful lifetime. Our experience has shown that the useful lifetime of a Pepperl+Fuchs product can be higher if the ambient conditions support a long life time, for example if the ambient temperature is significantly below the maximum ambient temperature.
Functional Safety HiC2853R1, HiC2853R4 Mounting and Installation Mounting and Installation Mounting and Installing the Device Observe the safety instructions in the instruction manual. Observe the information in the manual. Observe the requirements for the safety loop. Connect the device only to devices that are suitable for this safety application. Check the safety function to ensure the expected output behavior.
Functional Safety HiC2853R1, HiC2853R4 Operation Operation Danger! Danger to life from missing safety function If the safety loop is put out of service, the safety function is no longer guaranteed. • Do not deactivate the device. • Do not bypass the safety function. •...
Page 18
Functional Safety HiC2853R1, HiC2853R4 Operation Proof Test Procedure Prepare a test set-up, see figures below. Verify the output values as given in table below. Simulate the sensor state by a potentiometer of 4.7 k. The threshold must be between 2.1 mA and 2.8 mA.
Page 19
Functional Safety HiC2853R1, HiC2853R4 Operation HiC2853R1 Multimeter ( I ) Multimeter ( I ) 24 V 220 Ω 150 kΩ 2 kΩ/0.5 W Multimeter 1.3 kΩ/0.5 W 24 V DC 1a, 1b Power 2a, 2b Supply Fault supply Termination Board Zone 0, 1, 2 Zone 2 Div.
Report all failures in the safety function that are due to functional limitations or a loss of device function – especially in the case of possible dangerous failures. In these cases, contact your local sales partner or the Pepperl+Fuchs technical sales support (service line).
Functional Safety HiC2853R1, HiC2853R4 List of Abbreviations List of Abbreviations Emergency Shutdown Failure In Time in 10 Failure Mode, Effects, and Diagnostics Analysis FMEDA Probability of safe failure Probability of dangerous detected failure Probability of dangerous undetected failure ...