GB/T 21109.1-2022Functional safety of safety instrumented systems in the process industry sector - Part 1: Framework, definitions, system, hardware and application programming requirements (English PDF)

foreword

This document is in accordance with the provisions of GB/T 1.1-2020 "Guidelines for Standardization Work Part 1.Structure and Drafting Rules for Standardization Documents"

drafting.

This document is part 1 of GB/T 21109 "Functional Safety of Safety Instrumented Systems in the Process Industry". GB/T 21109 has

The following parts were released.

--- Part 1.Framework, definition, system, hardware and application programming requirements;

--- Part 2.Application Guidelines for GB/T 21109.1;

--- Part 3.Guidelines for determining the required safety integrity level.

This document replaces GB/T 21109.1-2007 "Functional safety of safety instrumented systems in the process industry - Part 1.Framework, definition

Definition, system, hardware and software requirements", compared with GB/T 21109.1-2007, except for structural adjustment and editorial changes, the main technical changes

as follows.

--- Added the management requirements for personnel in functional safety management (see 5.2.2.3);

--- Added requirements for functional safety management system (see 5.2.5.2);

--- Increased the SIS designed and implemented according to the specifications, standards or practices before the publication of this document, and put forward requirements for users (see 5.2.5.4);

--- Added new requirements for functional safety assessment, audit and revision (see 5.2.6);

--- Increased safety life cycle structure and planning requirements (see 6.2);

--- Increased application SIS security life cycle requirements (see 6.3);

--- Increased verification requirements (see 7.2);

--- Added requirements for SIS security risk assessment (see 8.2.4);

---Delete "additional requirements for safety integrity level 4", increase risk reduction requirements >10000 or average frequency of dangerous failures

Rate < 10-8/h inspection requirements and protection layer allocation requirements;

--- Added the requirements for the allocation of protection layers when the BPCS is not prepared to comply with this document (see 9.3.4);

--- Increased the relevant requirements of the application security requirements specification (see 10.3.3~10.3.6);

--- Added the safety manual requirements and SIF communication requirements in the SIS design and engineering requirements (see 11.2);

--- Increased the relevant requirements in the case of SIS bypass (see 16.2.3, 16.2.4, 16.2.7, 16.2.11);

--- Added the relevant requirements for SIS spare parts (see 16.2.12);

--- Increased review requirements for hazard and risk analysis, allocation and design of personnel responsible for performing operations and maintenance (see 16.2.13);

---Changed the behavior requirements of SIS in the case of power failure, expanded it to power source (including power supply, air, hydraulic source or pneumatic source)

SIS behavior requirements in case of failure (see 11.2.11, 11.2.11 of the.2007 edition);

--- Changed the system behavior requirements when a fault is detected (see 11.3, 11.3 of the.2007 edition);

--- Changed hardware failure margin requirements (see 11.4, 11.4 of the.2007 edition);

--- Changed the equipment selection requirements (see 11.5, 11.5 of the.2007 edition);

--- Changed the failure probability of SIF, changed it to the quantification of random failure and supplemented the relevant requirements of random failure quantification (see 11.9,

Introduction

In the process industry, safety instrumented systems used to perform safety instrumented functions have been used for many years. To enable the instrument to be used effectively for safety

instrument functionality, and above all that instrument meets certain minimum standards and performance levels.

GB/T 21109 describes the application of safety instrumented systems in the process industry. GB/T 21109 also emphasizes the need to implement a process hazard and

Risk assessment (H

Consider the contribution of other security systems. A safety instrumented system includes everything from sensors to final elements necessary to perform a safety instrumented function

equipment.

GB/T 21109 includes the following parts.

--- Part 1.Framework, definition, system, hardware and application programming requirements. The purpose is to propose safety instrumented system (SIS) specifications, design

design, installation, operation and maintenance requirements to ensure that the system enables the process to reach or maintain a safe state.

--- Part 2.Application Guidelines for GB/T 21109.1.The purpose is to provide safety instrumented functions as defined in GB/T 21109.1

Guidelines for the specification, design, installation, operation and maintenance of safety instrumented systems and their associated safety instrumented systems.

--- Part 3.Guidelines for determining the required safety integrity level. The purpose is to determine the safety integrity level of the safety instrumented function

of various methods.

GB/T 21109 contains two concepts as the basis of application. safety life cycle and safety integrity level.

GB/T 21109 is aimed at safety instrumented systems based on the use of electrical (E)/electronic (E)/programmable electronic (PE) technology. in logical solution

In the case of calculators using other technologies, the basic principles of GB/T 21109 need to be applied to ensure the fulfillment of functional safety requirements. GB/T 21109

It also covers sensors and final elements of safety instrumented systems, regardless of their technology. GB/T 21109 frame in GB/T 20438

The range of racks is dedicated to the process sector.

In order to achieve the above minimum principles, GB/T 21109 proposes the method of SIS security life cycle activities. adopt this method so that the

Use a sound and consistent technical strategy.

In most cases, inherently safe process design can achieve safety well. But in some cases this is not possible or not

practical. If necessary, one or more protective systems can also be combined to reduce the identified residual risks. Protection systems can rely on different

Technology (chemical, mechanical, hydraulic, pneumatic, electrical, electronic, programmable electronics). To facilitate this method, GB/T 21109

Require.

--- Perform hazard and risk assessments to determine overall safety requirements;

--- Assign safety requirements to safety instrumented systems;

--- Work within a framework that is applicable to all instrumentation measures to achieve functional safety;

--- Describes in detail how to use certain activities (such as safety management), these activities are applicable to all methods to achieve functional safety.

GB/T 21109 for safety instrumented systems in the process industry.

---Include all SIS safety life cycle stages from initial concept, design, implementation, operation and maintenance until decommissioning;

--- It can make existing or new country-specific process industry standards consistent with GB/T 21109.

GB/T 21109 is committed to achieving a high degree of consistency in the process industry (such as basic principles, terms, information, etc.). This will bring security and

The benefits are both economical. The overall framework of GB/T 21109 is shown in Figure 1.

In terms of authority, the management authority (such as national, provincial, autonomous region, etc.) has established process safety design, process safety management or other

Where specified, these requirements take precedence over those defined in GB/T 21109.

Figure 1 The overall framework of GB/T 21109

Functional safety of safety instrumented systems in the process industry

Part 1.Frameworks, definitions, systems, hardware and applications

programming requirements

1 Scope

This document gives the specification, design, installation, operation and maintenance requirements for a safety instrumented system (SIS) to ensure that the system enables the process to

to or remain in a safe state. This document is the application standard of GB/T 20438 (all parts) in the process field.

This document.

a) Specifies the requirements to achieve functional safety, but does not specify the responsible party for the implementation of these requirements (such as. designer, supplier, owner/operator);

companies, contractors). Responsibilities are assigned to different parties according to the security plan, project planning and management, and national regulations.

b) It is suitable for integrating equipment meeting the requirements of GB/T 20438.1~20438.3-2017 or 11.5 of this document into the process

In the overall system of the domain application, but not for the manufacturer who wishes to declare that the equipment is suitable for the SIS of the process domain (see

GB/T 20438.2-2017 and GB/T 20438.3-2017).

c) Define the relationship between IEC 61511 and IEC 61508 (see Figure 2 and Figure 3).

d) Applies to applications developed for systems with limited variable languages, or where fixed program language devices are used, but does not apply

Manufacturers, SIS designers, integrators and users who develop embedded software (system software) or use fully variable languages (see

GB/T 20438.3-2017).

e) Suitable for many industries in the process field, such as chemical, oil and gas, paper, pharmaceutical, food and beverage and non-nuclear energy

generate electricity.

Note 1.Some applications in the process field may also need to meet some additional requirements.

f) describes the relationship between SIF and other instrument functions (see Figure 4);

g) identify the functional and safety integrity requirements of the SIF, taking into account the risk reduction achieved by other means;

h) specifies the lifecycle requirements for system architecture and hardware configuration, application programming, and system integration;

i) specifies the application programming requirements for SIS users and integrators;

j) Applicable to the use of single or multiple SIFs to achieve functional safety for the protection of personnel, the public, and the environment;

k) can be applied to non-safety applications, for example, asset protection;

l) defines the implementation requirements for the SIF, which is part of an overall deployment to achieve functional safety;

m) use the SIS Safety Lifecycle (see Figure 7) and define the necessary steps to determine the SIS functional requirements and safety integrity requirements;

series of events;

n) It stipulates that hazard and risk assessment should be carried out when defining the safety functional requirements and safety integrity level (SIL) of each SIF;

Note 2.Figure 9 outlines risk reduction measures.

o) The average probability of failure on demand (required mode) and the average frequency of dangerous failure (required mode and continuous mode) corresponding to SIL have been established.

formula) target value;

p) specifies minimum requirements for hardware fault margin (HFT);

q) specifies the measures and techniques required to achieve a specific SIL;

r) defines the highest functional safety performance level (SIL4) that can be achieved when implementing a SIF according to this document;

s) defines the minimum functional safety performance level (SIL1), below which this document does not apply;

t) provides a framework for determining the SIL, but does not specify the SIL required for a particular application (should be based on application-specific understanding and overall

risk reduction objectives to determine);