2. General information.................................................................................................................................. 3
4. System information................................................................................................................................... 13
5.1 Known issues............................................................................................................................................... 19
5.2 Instructions and constraints................................................................................................................... 19
6. Transport and storage............................................................................................................................... 24
1. IntroductionThis document includes system information and
safety requirements for the pressure transmitter
DST P92S, which have to be considered and
fullled within the overall safety application.
DIN EN 61000-4-5: 2007-06
DIN EN 61326-1
DIN 61326-2-3
DIN EN 610000-4-6: 2014
DIN EN 61326-1
DIN EN 61326-2-3
DIN EN 61000-4-8
DIN EN 61326-1
DIN EN 61326-2-3
DIN EN 61000-4-8
DIN EN 61326-3-1
DIN EN 61326-1
DIN EN 61326-2-3
Surge
Immunity
Power Frequency
Magnetic Fields
Power Frequency
Magnetic Fields
Unsymmetrical coupling (L-PE, N-PE, LN-PE):
Supply lines: ±0.5 kV; ±1 kV, ±2 kV
Signal lines: not required, cable length <30 m
Coupling: 12 Ω / 9 µF
Number of repeats: 5
Conducted disturbances
0.15 mHz – 80 MHz, 3 V, 80% AM sine wave 1 kHz
50 Hz / 60 Hz
30 A/m
60 sec. for each axis
50 Hz / 60 Hz
30 A/m
60 sec. for each axis
EMC (Automotive)
StandardTest DescriptionTest ParameterCurrent
variant
Articial network (AN):
150 kHz to 108 MHz, 1 m, 120 kHz bandwidth class 3
Ratiometric
voltage
variant
x-
xx
xx
xx
Ratiometric
voltage
variant
xx
CISPR 25/ECE R10Emission
ISO 11452-2: 2004-11Immunity
ISO 11452-4: 2011-12Immunity
ISO 7637-2: 2004-09Emission
ISO 7637-2: 2004-09Emission
Road vehicles, electrical
disturbance by conduction
ISO 7637-2: 2004-09
ISO 7637-2: 2004-09
ISO 7637-2: 2004-09
and coupling (data, signal), test
level 4
Test level 4 for 12 V and 24V
systems
Road vehicles, electrical
disturbance by conduction
and coupling (data, signal), test
level 4
Test level 4 for 12 V and 24V
systems
Road vehicles, electrical
disturbance by conduction
and coupling (data, signal), test
level 4
Test level 4 for 12 V and 24V
systems
Antenna measurement (RE):
160 kHz to 30 MHz, 1 m, 9 kHz bandwidth class 4
30MHz to 1 GHz, 1 m, 120 kHz bandwidth class 3
1 GHz to 2.5 GHz, 1 m, 120 kHz bandwidth class 5
Absorber lined chamber:
200 MHz to 2 GHz, 200 V/m
CW, AM (1 kHz/80%), PM (577 us duration, 217 Hz
repetition rate)
BCI:
20 MHz to 400 MHz, 200 mA, AM, (1 kHz, 80%)
Transient emissions on supply cables (12 V system)
Severity level:III: +75 V, -100 V
Transient emissions on supply cables (24 V system)
Severity level III: +150 V, -450 V
Pulse 1 (12 V system): -150 V, 5000 pulses
Severity level: IV
Pulse 1 (24 V system): -600 V, 5000 pulses
Severity level: IV
Pulse 2a (12 V system): +50 V, 5000 pulses
Severity level: IV
The DST P92S is designed for the operation
in working machinery and further suitable
application areas and qualied especially for use
under harsh conditions.
The pressure transmitter is a passive intelligent
sensor. Its basically function is to convert the
physical quantity “pressure” to an electrical signal.
Available output types:
Curent variant:
Current output signal. This variant provides two
opposing current outputs 4 – 20 mA and
20 – 4 mA.
Ratiometric voltage variant:
Ratiometric voltage output signal. This variant
provides two opposing ratiometric voltage
outputs 10% * VCC – 90% * C and
90% * VCC – 10% ' VCC
4.1 Functional safety classication
The DST P92S has the following functional safety classication and parameters:
The pressure transmitter DST P92S executes following safety function:
Safety functionSafety integrityError reactionDTI
safe conversion of the measured pressure into two
proportional redundant-opposing current signals
or ratiometric voltage signals
(0..100 %FS correspond to 4..20 mA or
0..100 %FS correspond to 10% * VCC .. 90% * VCC)
IEC 61508 / SIL-2
EN ISO 13849 / PLd
ISO 25119 / AgPld
“Fail safe”80 ms
Safety relevance:
1. Accuracy of the sum of the single current
2. Maximum conversion delay
NOTE
The outputs of the DST P92S are not
safe by temselves but in combination
with a redundant signal processing.
IC.PS.P21.2A.02 | 520B7782 | 17
Safety guide | DST P92S Pressure transmitter
4.7 Diagnosis
5. Safety requirements
The DST P92S uses several mechanisms to
detect faults in the electronic circuit. Those are
realized in a start-up and a cyclic diagnosis.
Cyclic Diagnosis
The cyclic diagnosis is made every 30-40ms and
includes:
• testing of the temperature sensor element
Start-Up Diagnosis
The start-up diagnosis is made once after
powering the DST P92S and includes internal
tests concerning e.g. the oscillator, the
watchdog or any memory. If the start-up
• testing of the pressure sensor concerning
drift, open circuit and short circuit
• testing of the sensor signal range
If the cyclic diagnosis detects a fault, the “Fail safe”
is entered as long as the fault is pending.
diagnosis detects a fault, the “Fail safe” is
entered. The DST P92S remains in the safe state.
The following diagram shows the pressure transmitter DST P92S is a typical application
Sensor_Y_DST P92S
NOTE
Information:
Safety requirements within this manual
are characterized by an identier like
SR_DST P92S_<index>. This can be
used to trace requirements that shall
be followed through the development
process of the application.
SR_DST P92S_001:
The current national and international
safety regulations, laws, and standards
for the whole safety lifecycle have to be
observed.
Qualication of sta
REQUIREMENT
SR_DST P92S_002:
The pressure transmitter DST P92S must
be installed and operated by trained,
qualied personnel only. The knowledge
and the technical implementation of
the safety information provided by
this manual are imperative for a safe
installation and operation.
Method statement
REQUIREMENT
SR_DST P92S_003:
Before setting the DST P92S into
operation for an application it is
necessary to read and follow the
instructions of this safety manual.
The limits of the technical data (see
“Technical Data” item 4.2) must be
complied within the application.
Proof test interval
REQUIREMENT
SR_DST P92S_004:
A proof test interval of the pressure
transmitter DST P92S must be initiated
and controlled every 7½ years.
As the DST P92S can not be recalibrated,
it has to be replaced, if the deviations
exceed the maximum tolerances.
Troubleshooting procedures
REQUIREMENT
SR_DST P92S_005:
A faulty transmitter must be replaced
immediately. There is no maintenance or
repair procedure provided for the
DST P92S
CE Conformity
REQUIREMENT
SR_DST P92S_014:
For CD conformity the following
restrictions have to be observed:
The length of the cables, which are
connected to pressure transmitter, must
not exceed 30 m.
The state fail safe of the pressure transmitter
DST P92S
Type of DST P92SSignalState fail safeM12DT04
Current variant
Ratiometric voltage
variant
The safe state is entered when the DST P92S
recognizes a fault condition.
Both outputs go into the safe state simultaneous.
Output SIG1Iout < 2 mAPin 4Pin 4
Output SIG2Iout < 2 mAPin 2Pin 3
Output SIG1Uout < 5% * VCCPin 4Pin 4
Output SIG2Uout < 5% * VCCPin 2Pin 3
NOTE
Specication:
The maximum time between a fault
occurrence and the safe state of the
DST P92S is 80 ms.
REQUIREMENT
SR_DST P92S_006:
The fault detection cycle of the
superordinate logic system must be long
enough to detect an error reliably.
IC.PS.P21.2A.02 | 520B7782 | 19
Safety guide | DST P92S Pressure transmitter
Example:
The following time diagram shows the DST P92S
in a typical “sensor-logic-actuator” application
e.g. with and electronic control unit.
DST P92S Operation Interval
DST P92S Safestate
Reset condition
NOTE
Specication:
If a fault condition isn’t pending
continously, the DST P92S will leave the
safe state earliest after 60 ms.
REQUIREMENT
SR_DST P92S_007:
The diagnostic test interval of the
superordinate logic system must be short
enough to detect the safe state reliably.
5.4 System
System overview
Restrictions
WARNING
The safe state may not be entered during
an over- or under-voltage condition or
during startup. Possibly occurring spikes
on the outputs have to be ignored.
REQUIREMENT
SR_DST P92S_022:
The superordinate logic system has
to consider non-functional operating
modes, which do not lead to a safe state.
SR_DST P92S_008:
Exceeding the maximum supply voltage
of the DST P92S may cause an unsafe
operation. Therefore the superordinate
logic system has to monitor the sensor
power supply.
DST P92S
REQUIREMENT
SR_DST P92S_018:
Take measures to avoid an overvoltage
condition at the DST P92S.
IC.PS.P21.2A.02 | 520B7782
Safety guide | DST P92S Pressure transmitter
REQUIREMENT
SR_DST P92S_009:
Running the DST P92S outside its
temperature limits may cause an unsafe
operation. Therefore the superordinate
logic system has to monitor the ambient
temperature.
REQUIREMENT
SR_DST P92S_019:
There have to be taken measures to
avoid an over- or under-temperature
condition at the DST P92S.
5.5 Pressure
The pressure is measured by a welded thin-lm
capsule, which converts the physical pressure
into an electrical signal by resistor full-bridge.
An additional temperature meander makes
itpossible to compensate the signal.
Functional diagram
REQUIREMENT
SR_DST P92S_021:
The chassis, in which the DST P92S is
mounted, has to be connected to the
power supply ground, to fulll the EMC
requirements.
SR_DST 92S_010:
Because the radius of the pressure
channel of the DST P92S is very small,
measures must be taken for the pressure
system to prevent its clogging.
REQUIREMENT
SR_DST P92S_011:
Running the DST P92S outside its
temperature limits may cause an unsafe
operation. Therefore, the superordinate
logic system has to monitor the pressure
medium temperature.
REQUIREMENT
SR_DST 92S_024:
The thread shall be made of stainless
steel and shall be free of lubricant.
RECOMMENDATION
Avoid to exceed the specied pressure
ranges of the used DSR P92S. For a
smooth operation the pressure system
should be able to provide a stable nonuctuating pressure.
The accuracy of the pressure
measurement is only guaranteed under
reference conditions, that means if
the medium temperature and the
ambient temperature is nearly the same.
Therefore measures should be taken to
eect this.
IC.PS.P21.2A.02 | 520B7782 | 21
Safety guide | DST P92S Pressure transmitter
WARNING
A drift of the measurement cell due to an
overpressure as well as an aging-related
drift can only be detected at the pressure
limits (0 %FS, 100 %FS) of the DST P92S.
5.6 Outputs
The outputs of the DST P92S are designed as
redundant inverted signals. The inverted signals
can be used to establish a redundant signal
processing for safety-related applications.
Signal diagram
Output signalRange of current variantRange of ratiometric voltage
variant
SIG14 – 20 mA10% * VCC – 90% * VCC
SIG220 – 4 mA90% * VCC – 10% * VCC
90% VCC /
20 mA
SIG2
10% VCC /
4 mA
REQUIREMENT
SR_DST P92S_012:
The superordinate logic system has to
provide safety-related input pairs, which
fulll the reservations of the
DST P92S outputs (see technical data
(see “Technical Data” item 4.2).
(Especially the requirements for the
minimum and maximum loading of the
current outputs have to be observed.)
REQUIREMENT
SR_DST P92S_020:
The superordinate logic system
has to process both output signals
simultaneously and to compare them in
a meaningful way.
SIG1
REQUIREMENT
SR_DST P92S_013:
The measured pressure is always
represented by output 1. Output 2 must
only be used for the safety function,
as it is not calibrated and temperature
compensated.
REQUIREMENT
SR_DST P92S_017
The superordinate logic system has to
check, if there is a short circuit between
the DST P92S outputs. Depending on the
applications, this must be done cyclically
or at start-up.
For signal processing the two output
values should be accumulated by
the application and be compared to
predened limits (e.g. 24 mA ± 3 %FS).
IC.PS.P21.2A.02 | 520B7782
Safety guide | DST P92S Pressure transmitter
Outputs of ratiometric voltage variant
With the ratiometric voltage variant the supply
and outout pins of the signal conditioning are
directly connected to the connector.
Output of current variant
With the current variant the signal conditioning
is supplied via a DC/DC converter and its outputs
are used to generate the current signals.
REQUIREMENT
SR_DST P92S_015:
A ratiometric voltage value of <7.5%*VCC
or >92.5%*VCC may be the result of
a damaged DST P92S. Therefore,, the
superordinate logic system must be able
to check the current range and react on
an invalid value.
REQUIREMENT
SR_DST P92S_025:
In case of an electronic ground loss
(GND), the two output signals have no
dened level. The superordinate logic
system must perform a plausibility check
of the two output signals (See SR_DST
P92S_020 and SR_DST_P92S_017).
SR_DST P92S_016:
A current value < 3.5 mA or > 20.5 mA
may be the result of a damaged
DST P92S. Therefore the superordinate
logic system must be able to check the
current range and react on an invalid
value.
RECOMMENDATION
To check, if there is a short circuit
between the DST P92S current outputs,
one of them could be additional loaded,
e.g. with a programmable pull-down
resistor. The other one should not
change its value.
RECOMMENDATION
If the inputs of superordinate logic
system do not provide suitable load
resistors as required in the technical
data (see “Technical Data” item 4.2 ),
an additional series resistance can
be connected to the wiring. (See
“Examples”)
IC.PS.P21.2A.02 | 520B7782 | 23
Safety guide | DST P92S Pressure transmitter
5.7 Decommissioning and disposal5.8 Security
NOTE
For the DST P92S there has nothing to be
considered regarding decommissioning.
The disposal of the DST P92S has to be
done according to national laws.
6. Transport and storage
7. MaintenanceThere is no main tenance or repair procedure
8. Mounting
Transport
Check the pressure transmitter for possible
transport damage.
Do not use damaged deivces.
provided for the DST P92S (See “Instructions
and Constraints” item 5.2).
Preconditions
• Provide an ESD suitable environment
• Provide a dry and clean environment
• The thread and all sealing faces of the
pressure transmitter must be undamaged
and clean
• Apply the force to screw the pressure
sensor only through the spanner ats
provided for this purpose
• Select a cable diameter that matches the
cable connector of the mating plug
• Protect the cable end from humidity.
Otherwise humidity can intrude into the
instrument
See Mechanical Dimensions r needed space.
WARNING
Danger of serious injury and/or damage
to the equipment, when used beyond
the specied operative range.
Ensure to select the right type of
pressure transmitter according to:
• pressure range
• measurement range
• specic measurement conditions
NOTE
For the DST P92S there has nothing to be
considered regarding security.
Storage
Store the pressure transmitter in its original
packaging.
Remove the packaging only immediately before
mounting. The packaging provides protection
during storage and transport.
Required tools
Torque wrench: Width across ats 22
How to mount
WARNING
Danger of serious injury from sudden
escaping pressurized media.
Before opening any connections, make
sure to:
• Disconnect energy source
• Prevent reconnection
• Depressurize the system, including
pressure accumulators, lower upheld
load or provide compression-resistant
support for upheld load, remove
resifual energy
• Test the system for absence of
pressure
• Prevent danger due to adjacent
systems components
1. Screw the DST P92S into your system by
hand. Do not damage the thread, otherwise
a sealing connection cannot be established.
2. Tighten the DST P92S with the torque
wrench and a maxmimal screwing-torque of
35 Nm
3. Connect the connector with opposite plug:
Make sure the sealing of the connector is
present. Make sure to latch the connector
into the opposite plug.
4. Attach the used cables for DST P92S with
a cable relief. No force must act on the
connector and cables. Do not bend the cable
with a radius smaller than 18 mm.
• The connected pressure transmitter must
be cleaned
• Apply the force to screw o the pressure
transmitter only through the spanner ats
provided for this purpose
Required tools
Wrench: Width across ats 22
How to dismount
WARNING
Danger of serious injury from sudden
escaping pressurized media.
Before opening any connections, make
sure to:
• Disconnect energy source
• Prevent reconnection
• Depressurize the system,
including pressure accumulators,
lower upheld load or provide
compression-resistant support for
upheld load, remove resifual energy
• Test the system for absence of
pressure
• Prevent danger due to adjacent
systems components
1. Make sure the system is depressurized.
2. Remove cable relief from the cables. Do not
damage the cables.
3. Disconnect the connetor from mating plug.
4. Screw of DST P92S from your system with
the wrench. Do not damage the threads.