Pepperl+Fuchs M-LB 5000 Series, Manual

Page 1: ...ISO9001 3 Functional Safety M LB Ex 5000 System Surge Protection Barriers PROCESS AUTOMATION MANUAL ...

Page 2: ...ivery for Products and Services of the Electrical Industry published by the Central Association of the Electrical Industry Zentralverband Elektrotechnik und Elektroindustrie ZVEI e V in its most recent version as well as the supplementary clause Expanded reservation of proprietorship Functional Safety M LB Ex 5000 System ...

Page 3: ...terfaces 8 2 3 Marking 8 2 4 Standards and Directives for Functional Safety 8 3 Planning 9 3 1 System Structure 9 3 2 Assumptions 10 3 3 Safety Function and Safe State 11 3 4 Characteristic Safety Values 13 3 5 Useful Lifetime 14 4 Mounting and Installation 15 4 1 Configuration 15 5 Operation 16 5 1 Proof Test 16 6 Maintenance and Repair 18 7 Application Examples 19 8 List of Abbreviations 24 ...

Page 4: ...hooting Dismounting Disposal The documentation consists of the following parts Present document Instruction manual Manual Datasheet Additionally the following parts may belong to the documentation if applicable EU type examination certificate EU declaration of conformity Attestation of conformity Certificates Control drawings FMEDA report Assessment report Additional documents For more information...

Page 5: ...d and understood the instruction manual and the further documentation Intended Use The device is only approved for appropriate and intended use Ignoring these instructions will void any warranty and absolve the manufacturer from any liability The device is developed manufactured and tested according to the relevant safety standards Use the device only for the application described with specified e...

Page 6: ... are displayed in descending order as follows Informative Symbols Action This symbol indicates a paragraph with instructions You are prompted to perform an action or a sequence of actions Danger This symbol indicates an imminent danger Non observance will result in personal injury or death Warning This symbol indicates a possible fault or danger Non observance may cause personal injury or serious ...

Page 7: ...n consists of a M LB Ex 52 protection module and a M LB Ex 50 SP base module The protection module limits induced transients of different causes e g lightning or switching operations The limitation is achieved by diverting the current to earth and limiting the signal circuit voltage during the duration of the overvoltage pulse The device has LEDs for the status indication If required this status i...

Page 8: ...fic standards and directives System specific standards and directives Note For corresponding connections see datasheet Pepperl Fuchs GmbH Lilienthalstraße 200 68307 Mannheim Germany Internet www pepperl fuchs com Protection modules M LB Ex 51 M LB Ex 52 Base modules M LB Ex 50 SP Up to SIL 3 Functional safety IEC EN 61508 part 1 7 edition 2010 Functional safety of electrical electronic programmabl...

Page 9: ... the demand rate for this safety loop is assumed to be higher than once per year The relevant safety parameters to be verified are the PFH value Probability of dangerous Failure per Hour Fault reaction time of the safety system the SFF value Safe Failure Fraction the HFT architecture Hardware Fault Tolerance 3 1 3 Safe Failure Fraction The safe failure fraction describes the ratio of all safe fail...

Page 10: ...type A device A SFF value for this device is not given since this value has to be calculated in conjunction with the connected field device as described in the following section The devices M LB Ex 5 13 and M LB Ex 5 14 do not withstand conducted RF immunity tests 10 V according to IEC EN 61000 4 6 The devices M LB Ex 5 13 M LB Ex 5 14 M LB Ex 5 43 and M LB Ex 5 44 do not withstand immunity tests ...

Page 11: ... circuit interrupt the energy transfer to the field and are counted as safe failures Analog input 4 mA 20 mA Lead breakage and short circuit are out of range and counted as safe failures Analog output 4 mA 20 mA Lead breakage and short circuit interrupt the energy transfer to the field and are counted as safe failures Resistance thermometer RTD Measurement current 200 µA i e KFD2 UT2 1 R 3137 Pt10...

Page 12: ...rs from the respective column to the numbers given for the safety loop They are already summarized for the respective application Safety Function The safety function of the surge protection barrier is to behave like a piece of copper wire passing through the process signal without being altered Reaction Time The reaction time is 1 ms Note The fault indication output is not safety relevant Note See...

Page 13: ...e safety loop See chapter 7 3 Devices M LB Ex 51 M LB Ex 52 M LB Ex 50 SP 2 wire 2 wire TC 3 wire 4 wire s 16 8 FIT 0 FIT 14 9 FIT 19 8 FIT du 1 1 FIT 17 8 FIT 8 4 FIT 15 2 FIT dd 0 FIT 0 FIT 0 FIT 0 FIT no effect 17 3 FIT 17 3 FIT 46 FIT 57 3 FIT total safety function 17 8 FIT 17 8 FIT 23 3 FIT 35 FIT MTBF 3 3 acc to SN29500 This value includes failures which are not part of the safety function M...

Page 14: ...or components that have this constant domain and that the validity of the calculation is limited to the useful lifetime of each component It is assumed that early failures are detected to a huge percentage during the installation and therefore the assumption of a constant failure rate during the useful lifetime is valid However according to IEC EN 61508 2 a useful lifetime based on general experie...

Page 15: ...y instructions in the instruction manual 2 Observe the information in the manual 3 Observe the requirements for the safety loop 4 Connect the device only to devices that are suitable for this safety application 5 Check the safety function to ensure the expected output behavior 4 1 Configuration A configuration of the device is not necessary and not possible ...

Page 16: ...g in accordance with the characteristic safety values See chapter 3 4 It is under the responsibility of the plant operator to define the type of proof test and the interval time period Equipment required 2 digital multimeter with an accuracy of 0 1 Variable power supply 0 V DC to 50 V DC and current limitation Proof Test Procedure 1 Put out of service the entire safety loop Protect the application...

Page 17: ...minal 3 and ground 1 V between terminal 4 and ground Leakage current below 5 A M LB Ex 5 41 1 15 V between terminals 3 and 4 Leakage current below 3 A M LB Ex 5 43 1 2 15 V between terminals 3 and 4 15 V between terminal 3 and ground Leakage current below 6 A M LB Ex 5 11 1 1 V between terminals 3 and 4 Leakage current below 5 A M LB Ex 5 13 1 2 1 V between terminals 3 and 4 1 V between terminal 3...

Page 18: ...eplaced If the safety loop does not work without the device shut down the application Do not restart the application without taking proper precautions Secure the application against accidental restart 3 Do not repair a defective device A defective device must only be repaired by the manufacturer 4 Replace a defective device only by a device of the same type Danger Danger to life from missing safet...

Page 19: ...fined assign a surge protection barrier to the field device Create a basic overview as shown below Figure 7 1 Example of a complete safety loop with assigned surge protection barriers In principle the performance values of the surge protection barriers have to be added to the performance values of the field device or the safety rated programmable logic controller SPLC By doing so it is assumed tha...

Page 20: ... to the surge protection barrier de energized 4 Required SIL level of the safety loop SIL 2 Figure 7 2 Sample configuration consisting of a surge protection barrier and an isolated barrier SIL level calculation of the safety loop SFF value of the safety loop is as demanded for type A components 60 As an optimum the combination of surge protection barrier and isolated barrier claims 10 of the overa...

Page 21: ...for the dangerous undetected failure rates of both devices du du isolated barrier to du surge protection barrier du 47 FIT 1 1 FIT 48 FIT Use these values for calculating the SFF and PFDavg for the combination of both devices SFF 1 du total SFF 1 48 FIT 272 FIT 82 PFDavg_1y 1 2 x du x 8760 h 5 PFDavg_1y 1 2 x 48 FIT x 8760 h 2 10 x 10 4 The following table summarizes the results of the calculation...

Page 22: ...ntroller SPLC output 3 Safe state of the field device allocated to the surge protection barrier de energized 4 Required SIL level of the safety loop SIL 2 The isolated barrier has the following performance values The corresponding surge protection barrier M LB Ex 5 has the following performance values Use these values for calculating the SFF and PFDavg for the combination of both devices Use for c...

Page 23: ...loop SIL 3 The isolated barrier KCD2 STC Ex1 has the following performance values The corresponding surge protection barrier M LB Ex 5 has the following performance values Use these values for calculating the SFF and PFDavg for the combination of both devices Use for calculation the PFDavg formula given in IEC 61508 see above The following table summarizes the results of the calculations The requi...

Page 24: ...ty function The no effect failure is not used for calculation of SFF not part Probability of failure of elements that are not in the safety control loop total safety function Safety function HFT Hardware Fault Tolerance MTBF Mean Time Between Failures MTTFd Mean Time To dangerous Failures MTTR Mean Time To Restoration PFDavg Average Probability of Failure on Demand PFH Average frequency of dangero...

Page 25: ...Functional Safety M LB Ex 5000 System Notes 2018 03 25 ...

Page 26: ...erl fuchs com Worldwide Headquarters Pepperl Fuchs GmbH 68307 Mannheim Germany Tel 49 621 776 0 E mail info de pepperl fuchs com For the Pepperl Fuchs representative closest to you check www pepperl fuchs com contact PROCESS AUTOMATION PROTECTING YOUR PROCESS DOCT 5661A 03 2018 ...