iec 61508 assessment - exida · 2017. 2. 9. · f12p, march 2007 . brochure, direct acting solenoid...

15
ida e ® Certification Services IEC 61508 Functional Safety Assessment Project: FP01, FP02, FP03, FP04, FP05, FP03P, FP06P, FP10P and FP15 Series Solenoid Valves Customer: Bifold Fluidpower Ltd. Middleton, Manchester United Kingdom Contract No.: Q06/01-17 Report No.: BIF 06/01-17 R002 Version V4, Revision R1, July 25, 2013 Gregory Sauk The document was prepared using best effort. The authors make no warranty of any kind and shall not be liable in any event for incidental or consequential damages in connection with the application of the document. © All rights reserved.

Upload: others

Post on 09-Oct-2020

1 views

Category:

Documents


0 download

TRANSCRIPT

idae®

Certification Services

IEC 61508 Functional Safety Assessment

Project: FP01, FP02, FP03, FP04, FP05,

FP03P, FP06P, FP10P and FP15 Series Solenoid Valves

Customer:

Bifold Fluidpower Ltd. Middleton, Manchester

United Kingdom

Contract No.: Q06/01-17 Report No.: BIF 06/01-17 R002

Version V4, Revision R1, July 25, 2013 Gregory Sauk

The document was prepared using best effort. The authors make no warranty of any kind and shall not be liable in any event for incidental or consequential damages in connection with the application of the document.

© All rights reserved.

© BIF 06-01-17 R002 V4R1 IEC 61508 Assessment.doc

Management Summary This report summarizes the results of the functional safety assessment according to IEC 61508 carried out on the:

FP01, FP02, FP03, FP04, FP05, FP03P, FP06P, FP10P and FP15 Series Solenoid Valves

Models included in this analysis are devices with a single Solenoid (up to 10W) and without manual overrides or reset options. Only De-energize to Trip applications have been evaluated.

The functional safety assessment performed by exida consisted of the following activities:

- exida assessed the development process used by Bifold Fluidpower Ltd. through an audit and creation of a detailed safety case against the requirements of IEC 61508.

- exida reviewed and assessed a detailed Failure Modes, Effects, and Diagnostic Analysis (FMEDA) of the devices to document the hardware architecture and failure behavior.

The functional safety assessment was performed to the requirements of IEC 61508, SIL 3. A full IEC 61508 Safety Case was prepared, using the exida SafetyCaseDB tool, and used as the primary audit tool. Hardware and software process requirements and all associated documentation were reviewed. Environmental test reports were reviewed. Also the user documentation (safety manual) was reviewed.

The results of the Functional Safety Assessment can be summarized by the following statements:

The FP01, FP02, FP03, FP04, FP05, FP03P, FP06P, FP10P and FP15 Series Solenoid Valves were found to meet the Systematic Capability requirements of IEC 61508 for up to SC 3 (SIL 3 Capable)

The FP01, FP02, FP03, FP04, FP05, FP03P, FP06P, FP10P and FP15 Valves were found to meet the Random Capability requirements for a Type A device of SIL 2@HFT=0, SIL 3@HFT=1 for all models using Route 2 H.

The manufacturer will be entitled to use the Functional Safety Logos.

exida

T-023 V2R3 www.exida.com Page 2 of 15

© BIF 06-01-17 R002 V4R1 IEC 61508 Assessment.doc exida

T-023 V2R3 www.exida.com Page 3 of 15

Table of Contents

Management Summary ................................................................................................... 2

1 Purpose and Scope ................................................................................................... 4

2 Project Management.................................................................................................. 5 2.1 exida...............................................................................................................................5 2.2 Roles of the parties involved...........................................................................................5 2.3 Standards and Literature used........................................................................................5 2.4 Reference documents.....................................................................................................5

2.4.1 Documentation provided by Bifold Fluidpower Ltd...............................................5 2.4.2 Documentation generated by exida.....................................................................7

3 Product Description ................................................................................................... 8

4 IEC 61508 Functional Safety Assessment................................................................. 9 4.1 Methodology ...................................................................................................................9 4.2 Assessment level ............................................................................................................9

5 Results of the IEC 61508 Functional Safety Assessment........................................ 10 5.1 Lifecycle Activities and Fault Avoidance Measures ......................................................10

5.1.1 Functional Safety Management .........................................................................10 5.1.2 Safety Requirements Specification and Architecture Design.............................11 5.1.3 Hardware Design ...............................................................................................11 5.1.4 Validation ...........................................................................................................11 5.1.5 Verification .........................................................................................................12 5.1.6 Proven In Use ....................................................................................................12 5.1.7 Modifications ......................................................................................................12 5.1.8 User documentation ...........................................................................................12

5.2 Hardware Assessment..................................................................................................13

6 Terms and Definitions.............................................................................................. 14

7 Status of the Document ........................................................................................... 15 7.1 Liability ..........................................................................................................................15 7.2 Releases .......................................................................................................................15 7.3 Future Enhancements...................................................................................................15 7.4 Release Signatures.......................................................................................................15

© BIF 06-01-17 R002 V4R1 IEC 61508 Assessment.doc exida

T-023 V2R3 www.exida.com Page 4 of 15

1 Purpose and Scope This document shall describe the results of the IEC 61508 functional safety assessment of the FP01, FP02, FP03, FP04, FP05, FP03P, FP06P, FP10P and FP15 Solenoid Valves. by exida according to the requirements of IEC 61508: ed2, 2010.

The results of this provides the safety instrumentation engineer with the required failure data as per IEC 61508 / IEC 61511 and confidence that sufficient attention has been given to systematic failures during the development process of the device.

© BIF 06-01-17 R002 V4R1 IEC 61508 Assessment.doc exida

T-023 V2R3 www.exida.com Page 5 of 15

2 Project Management

2.1 exida

exida is one of the world’s leading accredited Certification Bodies and knowledge companies specializing in automation system safety and availability with over 300 years of cumulative experience in functional safety. Founded by several of the world’s top reliability and safety experts from assessment organizations and manufacturers, exida is a global company with offices around the world. exida offers training, coaching, project oriented system consulting services, safety lifecycle engineering tools, detailed product assurance, cyber-security and functional safety certification and a collection of on-line safety and reliability resources. exida maintains the largest process equipment database of failure rates and failure modes with over 60 billion unit operating hours.

exida is the market leader for IEC 61508 certification for currently active marketed products.

2.2 Roles of the parties involved

Bifold Fluidpower Ltd. Manufacturer of the FP01, FP02, FP03, FP04, FP05, FP03P, FP06P, FP10P and FP15 Series Solenoid Valves

exida Performed the hardware assessment

exida Performed the IEC 61508 Functional Safety Assessment

Bifold Fluidpower Ltd. contracted exida in 2006 with the IEC 61508 Functional Safety Assessment of the above mentioned devices.

2.3 Standards and Literature used The services delivered by exida were performed based on the following standards / literature.

[N1] IEC 61508 (Parts 1 - 7): ed2, 2010

Functional Safety of Electrical/Electronic/Programmable Electronic Safety-Related Systems

2.4 Reference documents

2.4.1 Documentation provided by Bifold Fluidpower Ltd.

[D1] 200-KC0002, Rev 0, 10/11/2004

Schematic drawing, FP10P, FP10P(A)-S1-04-32-NU-+-XXVXC-87* **

[D2] A0194, Rev 4, 08/10/2004 Schematic drawing, Pilot Solenoid valve – Type FP01, General Arrangement – FP01/SX/M/32/NC/X - 9XX

[D3] A0463, Rev 0, 16/12/1997 Schematic drawing, FP15 Series In-line mount 3 way 2 position two state (FP01) solenoid operated control valve, General arrangement FP15/SX/0X/32/X – 97X

[D4] Model FP06P, F10P & F12P, March 2007

Brochure, Direct Acting Solenoid Valve Models FP06P, FP10P & FP12P

[D5] FP01, Issue 6, 23/02/05 Brochure, Solenoid Valve Model FP01

© BIF 06-01-17 R002 V4R1 IEC 61508 Assessment.doc exida

T-023 V2R3 www.exida.com Page 6 of 15

[D6] FP15 Solenoids, February 2007

Brochure, Solenoid Valve Model FP15

[D7] FP02 FP03 FP04 FP05 Catalogue BFD10 Oct 10.pdf, Oct 2010

Brochure, Solenoid Valve Models FP02, FP03, FP04 and FP05

[D8] AEAT/61508/LRSB/10738/A02, 25/11/2005

IEC 61508 Component Assessment, FP01 solenoid valve, AEA Technology

[D9] AEAT/61508/LRSB/10738/A03, 13/07/2005

IEC 61508 Component Assessment, FP10 solenoid valve, AEA Technology

[D10] AEAT/61508/LRSB/10738/A04, 25/11/2005

IEC 61508 Component Assessment, FP15 interface valve, AEA Technology

[D11] dfmeafp10_Final2.xls FP10 FMECA

[D12] 0-GA0156, Rev 0, 15/09/08 Solenoid Assembly and BOM drawing

[D13] A0897, Rev 0, 02/01/2010 FP01/SX/M/32/NC/X-7X, General Arrangement

[D14] A1014, Rev 0, 09/01/2012 General Arrangement FP0X/XX/M/32/X-03

[D15] 0-GA0157, Rev 0, 15/09/2008

FP03P Valve Assembly and BOM drawing

[D16] 0-GA0186, Rev 0, 28/11/2008

FP06P Valve Assembly and BOM drawing

[D17] 200-KS0001, Rev 0, 12/01/2005

FP10P Valve Assembly and BOM drawing

[D18] BCM04, Issue BCM04.2, 10/07/2000

Company Procedure – Design Control (this also includes all Design Control forms)

[D19] BOP 4.1, Issue 1, Apr 2008 Business Operating Procedure – Design Control / Design Projects

[D20] FP01.pdf Excerpts from Design File showing some of the documentation required and saved from the design and development process – FP01

[D21] fp06 & FP10P design file summary.pdf

Excerpts from Design File showing some of the documentation required and saved from the design and development process – FP10

[D22] FP15 - Design File Summary.pdf

Excerpts from Design File showing some of the documentation required and saved from the design and development process – FP15

[D23] PI.0080, Jan 7, 2008 Process Instruction for Assembly and Testing of FP01

[D24] PI.0110, May 23, 2007 Process Instruction for Assembly and Testing of FP10

[D25] PI.0132, Jan 29, 2008 Process Instruction for Assembly and Testing of FP15

[D26] FP01 OIM, Nov 2006 Installation, Operating and Maintenance Instructions FP01 Series Solenoid Valves

[D27] OP0143, Iss 2, Jan 14, 2013 Installation, Operating and Maintenance Instructions FP02 / FP03 / FP04 / FP05 Series Solenoid Valves

© BIF 06-01-17 R002 V4R1 IEC 61508 Assessment.doc exida

T-023 V2R3 www.exida.com Page 7 of 15

[D28] FP OIM, Nov 2006 Installation, Operating and Maintenance Instructions FP06P, FP10P and FP12P Series Solenoid Valves

[D29] FP15 OIM, Issue 11, July 2004

Installation, Operating and Maintenance Instructions All FP15 Seated Valves

[D30] SM.FP03P, Rev 04, June 21, 2009

FP03P Safety Manual

[D31] SM.FP06P, Rev 02, June 21, 2009

FP06P Safety Manual

[D32] SM.FP10P, Rev 02, June 21, 2009

FP10P Safety Manual

[D33] SM.FP01, Rev 01, June 27, 2008

FP01 Safety Manual

[D34] SM.FP02,3,4,5, Rev 04, July 25, 2013

FP02, FP03, FP04 and FP05 Safety Manual

[D35] SM.FP15, Rev 01, June 27, 2008

FP15 Safety Manual

[D36] FP01-3-6-10-15 Field Returns.xls

Field Return Information July 2008 – April 2011

[D37] Fp02,4&5 REturns data.xlsx Shipment and Field Return Information 2008 – April 2013

[D38] FP01-6-10-15 Design Changes.xls

List of design Changes since 2008

[D39] FP01-6-10-15 Design Changes 2.xls

Explanation of design Changes since 2008

2.4.2 Documentation generated by exida

[R1] Q11-07-001 Bifold FMEDA FP - Updated 7-7-2011

Failure Modes, Effects and Diagnostic Analysis,- FP01 and FP15 Solenoid Valves (internal document)

[R2] BIF 06-01-17 R001 V4R2 FMEDA FP01 03P 06P 10P 15 Valves, 7/24/2013

FMEDA report - FP01, FP02, FP03, FP04, FP05, FP03P, FP06P, FP10P and FP15 Valves

[R3] Bifold Safety Case.esc Bifold FP01, FP02, FP03, FP04, FP05, FP03P, FP06P, FP10P and FP15 Solenoid Valves IEC 61508 Compliance SafetyCaseDB (internal database)

[R4] Q11-07-001 Bifold FP Series PIU Spreadsheet.xls

PIU analysis, shipping, field return and modification listings.

[R5] Bifold FP02 04 05 PIU R3.xls, Rev 3, 7/10/2013

PIU analysis, shipping and field return data FP02, FP04 and FP05

[R6] BIF 06-01-17 R002 V4R1 IEC 61508 Assessment.doc, 7/25/2013

IEC 61508 Functional Safety Assessment for FP01, FP02, FP03, FP04, FP05, FP03P, FP06P, FP10P and FP15 Solenoid Valves (This document)

© BIF 06-01-17 R002 V4R1 IEC 61508 Assessment.doc exida

T-023 V2R3 www.exida.com Page 8 of 15

3 Product Description The Bifold Fluidpower Ltd. FP01, FP02, FP03, FP04, FP05, FP03P, FP06P, FP10P and FP15 Series Solenoid Valves are three-way, 3 port/2 position solenoid valves.

Table 1 gives an overview of the different versions that were considered in the FMEDA and IEC 61508 assessments of the Bifold FP Solenoid Valves. Models included in this assessment are devices with a single Solenoid (up to 10W) and without manual overrides or reset options. Only De-energize to Trip applications have been evaluated.

Table 1 Version overview

FP01, FP02, FP03, FP04 and FP05

3 Port, 2 Position Normally Closed Direct-Acting Solenoid Valve

FP03P 3 Port, 2 Position Normally Closed Direct-Acting Solenoid Valve

FP06P 3 Port, 2 Position Normally Closed Direct-Acting Solenoid Valve

FP10P 3 Port, 2 Position Normally Closed Direct-Acting Solenoid Valve

FP15 3 Port, 2 Position Normally Closed Pilot-Actuated Solenoid Valve

The FP01, FP02, FP03, FP04, FP05, FP03P, FP06P, FP10P and FP15 Series Solenoid Valves are classified as a Type A1 devices according to IEC 61508, having a hardware fault tolerance of 0.

1 Type A element: “Non-Complex” element (using discrete components); for details see 7.4.4.1.2 of IEC 61508-2, ed2, 2010.

© BIF 06-01-17 R002 V4R1 IEC 61508 Assessment.doc exida

T-023 V2R3 www.exida.com Page 9 of 15

4 IEC 61508 Functional Safety Assessment The IEC 61508 Functional Safety Assessment was performed based on the information received from Bifold Fluidpower Ltd. and is documented in the SafetyCase [R3].

4.1 Methodology

The full functional safety assessment includes an assessment of all fault avoidance and fault control measures during hardware and software development (if applicable) and demonstrates full compliance with IEC 61508 to the end-user. The assessment considers all requirements of IEC 61508. Any requirements that have been deemed not applicable have been marked as such in the full Safety Case report, e.g. software development requirements for a product with no software. The assessment also includes a review of existing manufacturing quality procedures to ensure compliance to the quality requirements of IEC 61508.

As part of the IEC 61508 functional safety assessment the following aspects have been reviewed:

Development process, including:

o Functional Safety Management, including training and competence recording, FSM planning, and configuration management

o Specification process, techniques and documentation

o Design process, techniques and documentation, including tools used

o Validation activities, including development test procedures, test plans and reports, production test procedures and documentation

o Verification activities and documentation

o Modification process and documentation

o Installation, operation, and maintenance requirements, including user documentation

o Manufacturing Quality System

Product design

o Hardware architecture and failure behavior, documented in a FMEDA

The review of the development procedures is described in section 5.1. The review of the product design is described in section 5.2.

4.2 Assessment level

The FP01, FP02, FP03, FP04, FP05, FP03P, FP06P, FP10P and FP15 Series Solenoid Valves have been assessed per IEC 61508 to the following levels:

Systematic Capability SC3 (SIL 3 capability) as the development procedures were assessed as suitable for use in applications with a maximum Safety Integrity Level of 3 (SIL 3) according to IEC 61508.

Architecture Constraint limitations of SIL 2 for a single device (using Route 2H) and SIL 3 for a single device where the SFF for the complete final element is >90% (if using Route 1H).

© BIF 06-01-17 R002 V4R1 IEC 61508 Assessment.doc exida

T-023 V2R3 www.exida.com Page 10 of 15

5 Results of the IEC 61508 Functional Safety Assessment

exida assessed the development process used by Bifold Fluidpower Ltd. for this development against the objectives of IEC 61508 parts 1 and 2. This assessment was performed on-site and is documented in the SafetyCase [R3].

The current development process is fully compliant with IEC 61508. However, portions of the FP01, FP02, FP03, FP04, FP05, FP03P, FP06P, FP10P and FP15 Valves were developed prior to the establishment of this IEC 61508 SIL 3 compliant development process. Consequently for the evaluation of systematic fault avoidance measures, proven in use claims were also considered in addition to the existing design documentation and additional documented safety analysis which showed the design integrity. The SafetyCase was created with project specific design documents. Future modifications to the FP01, FP02, FP03, FP04, FP05, FP03P, FP06P, FP10P and FP15 Valves must be made per the IEC 61508 SIL 3 compliant development process.

5.1 Lifecycle Activities and Fault Avoidance Measures

Bifold Fluidpower Ltd. has a defined product lifecycle process in place. This is documented in company procedures BCM04 and BOP 4.1. These are also part of Bifold’s Quality Management System which is ISO 9001 approved. The same process is used for modifications. No software is part of the design and therefore any requirements specific from IEC 61508 related to software and software development do not apply.

The assessment investigated the compliance with IEC 61508 of the processes, procedures and techniques as implemented for product design and development. The investigation was executed using subsets of the IEC 61508 requirements tailored to the SIL 3 work scope of the development team. The defined product lifecycle process was modified as a result of a previous audit which showed some areas for improvement. However, given the simple nature of the safety function and the extensive proven field experience for existing products Bifold Fluidpower was able to demonstrate that the objectives of the standard have been met. The result of the assessment can be summarized by the following observations:

The audited Bifold Fluidpower Ltd. development process complies with the relevant managerial requirements of IEC 61508 SIL 3.

5.1.1 Functional Safety Management

FSM Planning

Bifold Fluidpower Ltd. has a defined process in place for product design and development. Required activities are specified along with review and approval requirements. This is primarily documented in BCM04 [D18] and BOP 4.1 [D19]. Templates, forms and sample documents are provided. The same process is used for modifications. This process and procedures referenced herein fulfill the requirements of IEC 61508 with respect to functional safety management for a product with simple complexity and well defined safety functionality.

Version Control Bifold Fluidpower Ltd. Procedure IS 005 requires that all documents be version controlled. Document revisions were evident during the audit.

© BIF 06-01-17 R002 V4R1 IEC 61508 Assessment.doc exida

T-023 V2R3 www.exida.com Page 11 of 15

Training, Competency recording Personnel training records are kept per standard quality procedures. BOP 4.1 states that the Technical Director is responsible for ensuring that only qualified personnel and/or Subcontractors are used to perform the design and development tasks. Bifold Fluidpower Ltd. hired exida Consulting to provide analysis, training and supplemental functional safety expertise. Bifold Fluidpower Ltd. hired exida to be the independent assessor per IEC 61508.

5.1.2 Safety Requirements Specification and Architecture Design

For the FP01, FP02, FP03, FP04, FP05, FP03P, FP06P, FP10P and FP15 Valves, the simple safety functionality is the primary functionality of the product (Close / Open Valve). Therefore no special Safety Requirements Specification was needed. The normal functional requirements were sufficient. As the valve designs are relatively simple and are based upon standard designs with extensive field history, no semi-formal methods are needed. General design and testing methodology is documented and required as referenced in [D18] and [D23] to [D25]. This meets SIL 3.

Requirements from IEC 61508-2, Table B.1 that have been met by Bifold Fluidpower Ltd. include project management, documentation, structured specification, review of the specification, and checklists. This meets the requirements of SIL 3.

5.1.3 Hardware Design

The design process is documented in [D18] and [D19]. Items from IEC 61508-2, Table B.2 include observance of guidelines and standards (PED, API NACE, ATEX), project management, documentation (design outputs are documented per Procedure IS 005), structured design, modularization, use of well-tried components, and computer-aided design tools. This meets SIL 3.

5.1.4 Validation

Validation Testing is done via a documented plan created that links to the product’s requirements specifications and also includes compliance testing per application and agency standards. Bifold also maintains a set of standard tests (documented in DC/QR17) that are used to validate their designs. As the FP01, FP02, FP03, FP04, FP05, FP03P, FP06P, FP10P and FP15 Solenoid Valves are purely electro-mechanical devices with a simple safety function, there is no separate integration testing necessary. The FP01, FP02, FP03, FP04, FP05, FP03P, FP06P, FP10P and FP15 Valves perform only one Safety Function, which is extensively tested under various conditions during validation testing.

Items from IEC 61508-2, Table B.3 include functional testing, project management, documentation, and black-box testing (for the considered devices this is similar to functional testing). Field experience and statistical testing via regression testing are not applicable. This meets SIL 3.

Items from IEC 61508-2, Table B.5 included functional testing and functional testing under environmental conditions, project management, documentation, failure analysis (analysis on products that failed), expanded functional testing, black-box testing, and fault insertion testing. This meets SIL 3.

© BIF 06-01-17 R002 V4R1 IEC 61508 Assessment.doc exida

T-023 V2R3 www.exida.com Page 12 of 15

5.1.5 Verification

The development and verification activities are also defined in BCM04 and BOP 4.1 ([D18] and [D19]). For each design phase the objectives are stated, the required input and output documents are specified, and necessary review activities are determined. Verification activities also included a design FMEA and review, a third party FMEDA, and other reviews of the tests and test results. The results of these activities were documented and reviewed. This meets SIL 3.

5.1.6 Proven In Use

In addition to the Design Fault avoidance techniques listed above, a Proven in Use evaluation was carried out on the FP01, FP02, FP03, FP04, FP05, FP03P, FP06P, FP10P and FP15 Series Solenoid Valves during the certification renewal activity. Shipment records from July 2008 to April 2011were used to determine that the Bifold Solenoid Valves have >30 million operating hours and they have demonstrated a field failure rate less than the failure rates indicated in the FMEDA reports. This meets the requirements for Proven In Use for SIL 3.

5.1.7 Modifications

Any Modifications must go through Bifold’s Engineering Change procedure which is initiated with a Change Request Form (DC/QR3). All changes are first reviewed and if approved, the work follows the normal design process. This meets the requirements of IEC 61508 SIL 3.

Modifications were reviewed as part of a certification renewal activity. The modifications are documented in the Proven In Use Analysis Spreadsheet [R4].

5.1.8 User documentation

Bifold Fluidpower Ltd. has created Safety Manuals for the FP01, FP02, FP03, FP04, FP05, FP03P, FP06P, FP10P and FP15 Valves, see [D30] to [D35]. These safety manuals were assessed by exida. They contained all required information given the simplicity of the products. The FMEDA reports are available and they contain failure rate, failure mode, useful life and suggested proof test information. The combination of the Safety Manual and the FMEDA’s are considered to be in compliance with the requirements of IEC 61508.

Requirements from IEC 61508-2, Table B.4 that have been met by Bifold Fluidpower Ltd. include operation and maintenance instructions, user friendliness, maintenance friendliness, project management, documentation, limited operation possibilities (the products perform well-defined actions) and operation only by skilled operators (operators familiar with type of valve, although this is partly the responsibility of the end-user). This meets the requirements for SIL 3.

© BIF 06-01-17 R002 V4R1 IEC 61508 Assessment.doc exida

T-023 V2R3 www.exida.com Page 13 of 15

5.2 Hardware Assessment

To evaluate the hardware design of the FP01, FP02, FP03, FP04, FP05, FP03P, FP06P, FP10P and FP15 Valves, a Failure Modes, Effects, and Diagnostic Analysis was performed by exida Consulting for each component in the system. This is documented in [R1] and [R2].

A Failure Modes and Effects Analysis (FMEA) is a systematic way to identify and evaluate the effects of different component failure modes, to determine what could eliminate or reduce the chance of failure, and to document the system in consideration. An FMEDA (Failure Mode Effect and Diagnostic Analysis) is an FMEA extension. It combines standard FMEA techniques with extension to identify online diagnostics techniques and the failure modes relevant to safety instrumented system design.

From the FMEDA failure rates are derived for each important failure category. All failure rate analysis results and useful life limitations are listed in the FMEDA report [R2].

Note, if the Bifold FP Solenoid Valves is only one part of a final element, the SFF must be calculated for the entire final element combination if following the Route 1H hardware architectural constraints. It is the end users responsibility to confirm this for each particular application and to include all components of the final element in the calculations.

The failure rate data used for this analysis meets the exida criteria for Route 2H. Therefore all of the reviewed FP01, FP02, FP03, FP04, FP05, FP03P, FP06P, FP10P and FP15 Solenoid Valves meet the Route 2H hardware architectural constraints for up to SIL 2 at HFT=0 when the listed failure rates are used, and SIL 3 applications with a HFT=1.

The analysis shows that design of the Bifold FP Solenoid Valves can meet the hardware requirements of IEC 61508, SIL 3 depending on the complete final element design. The Hardware Fault Tolerance, PFDAVG, and Safe Failure Fraction (when not following Route 2H) requirements of the IEC 61508 must be verified for each specific design.

© BIF 06-01-17 R002 V4R1 IEC 61508 Assessment.doc exida

T-023 V2R3 www.exida.com Page 14 of 15

6 Terms and Definitions Automatic Diagnostics Tests performed on line internally by the device or, if specified, externally

by another device without manual intervention.

exida criteria A conservative approach to arriving at failure rates suitable for use in hardware evaluations utilizing the 2H Route in IEC 61508-2.

Fault tolerance Ability of a functional unit to continue to perform a required function in the presence of faults or errors (IEC 61508-4, 3.6.3)

FIT Failure In Time (1x10-9 failures per hour)

FMEDA Failure Mode Effect and Diagnostic Analysis

HFT Hardware Fault Tolerance

Low demand mode Mode, where the demand interval for operation made on a safety-related system is greater than twice the proof test interval.

PFDAVG Average Probability of Failure on Demand

PVST Partial Valve Stroke Test

It is assumed that the Partial Stroke Testing, when performed, is automatically performed at least an order of magnitude more frequent than the proof test, therefore the test can be assumed an automatic diagnostic. Because of the automatic diagnostic assumption the Partial Valve Stroke Testing also has an impact on the Safe Failure Fraction.

Random Capability The SIL limit imposed by the Architectural Constraints for each element.

SFF Safe Failure Fraction summarizes the fraction of failures, which lead to a safe state and the fraction of failures which will be detected by diagnostic measures and lead to a defined safety action.

SIF Safety Instrumented Function

SIL Safety Integrity Level

SIS Safety Instrumented System – Implementation of one or more Safety Instrumented Functions. A SIS is composed of any combination of sensor(s), logic solver(s), and final element(s).

Type A element “Non-Complex” element (using discrete components); for details see 7.4.4.1.2 of IEC 61508-2

© BIF 06-01-17 R002 V4R1 IEC 61508 Assessment.doc

7 Status of the Document

7.1 Liability

exida prepares reports based on methods advocated in International standards. exida accepts no liability whatsoever for the use of this report or for the correctness of the standards on which the general calculation methods are based.

7.2 Releases Version: V4

Revision: R1

Version History: V4, R1: Added FP02, FP03, FP04 and FP05; added 2H, July 25, 2013

V3, R1: Certification Renewal. S. Close, July 13, 2011

V2, R1: Added FP03P and FP06P; June 17, 2009

V1, R1: Released; June 13, 2008

V0, R1: Draft; June 2, 2008

Authors: Gregory Sauk

Review: Michael Medoff; June 13, 2008

Release status: Released

7.3 Future Enhancements At request of client.

7.4 Release Signatures

Steven F. Close, Safety Engineer

Gregory Sauk, Senior Safety Engineer

William M. Goble, Principal Partner

exida

T-023 V2R3 www.exida.com Page 15 of 15