Orion 705-51AX-XXX SIL User Manual
SIL Certified Safety Manual for
Enhanced Model 705-51AX-XXX
Functional Safety Manual
Software v3.x
Guided Wave Radar
Level Transmitter
This manual complements and is intended to be used with the
®
Eclipse
(Bulletin 57-600 dated August 2005 or later).
Safety Function
Enhanced Model 705 Installation and Operating manual
The HART
Guided Wave Radar (GWR) transmitter will measure
level and transmit a signal proportional to that level
within the stated safety accuracy of ±2% of span or the
measured error published in I/O Manual 57- 600,
whichever is greater. In addition, when continuous,
automatic diagnostics detect that the transmitter cannot
perform this function, the output will be driven to the
customer-specified out-of-range signal (i.e., less than
3.8 mA or greater than 20.5 mA).
The Enhanced Model 705 is certified for use in low
demand level measurement applications.
Application
The Enhanced Model 705 Guided Wave Radar level
transmitter can be applied in most process or storage
vessels, bridles, and bypass chambers up to the probe’s
rated temperature and pressure. The Enhanced Model 705
can be used in liquids, slurries or solids to meet the safety
system requirements of IEC 61508/IEC 61511-1.
®
version of the Eclipse®Enhanced Model 705
Benefits
• Level protection to SIL 3 as certified by exida
Certification per IEC 61508/IEC 61511-1.
• Probe designs to +800° F (+427° C),
6250 psig (430 bar) and full vacuum
• Cryogenic applications to -320° F (-190° C)
• IS, XP and Non-Incendive approvals
• Ability to measure reliably to the very top of the vessel.
(Meets TÜV: WHG 19 overfill specifications when
used with Model 7xD, 7xG, 7xR, and 7xT probes).
Eclipse®Enhanced Model 705 Guided Wave Radar Level Transmitter
SIL Certified Safety Manual for Enhanced Model 705-51AX-XXX
Table of Contents
1.0 Introduction ...................................................................3
1.1 Theory of Operation.................................................3
1.2 Product Description..................................................3
1.3 Determining Safety Integrity Level (SIL) ..................3
2.0 Level Measuring System .................................................4
2.0.1 Digital Communication Protocols..................4
2.1 Applicable Models.....................................................4
2.2 Miscellaneous Electrical Considerations ....................5
2.2.1 Pollution Degree 2 .........................................5
2.2.2 Overvoltage....................................................5
3.0 Mean Time To Repair (MTTR).....................................5
4.0 Supplemental Documentation........................................5
5.0 Instructions ....................................................................6
5.1 Systematic Limitations ..............................................6
5.1.1 Application.....................................................6
5.1.2 Environmental................................................6
5.2 Skill Level of Personnel .............................................6
5.3 Necessary Tools.........................................................6
5.4 Storage ......................................................................7
5.5 Installation ................................................................7
5.6 Configuration ...........................................................7
5.6.1 General...........................................................7
5.6.2 SIS Configuration Requirements....................8
5.6.3 Write Protecting/Locking ..............................8
5.7 Site Acceptance Testing .............................................9
5.8 Maintenance ..............................................................9
5.8.1 Diagnostics and Response Times....................9
5.8.2 Troubleshooting ...........................................10
6.0 Recurrent Function Tests .............................................10
6.1 Proof Testing ...........................................................10
6.1.1 Introduction.................................................10
6.1.2 Interval.........................................................10
6.1.3 Recording Results.........................................10
6.1.4 Proof Test Procedure.....................................11
7.0 Report: Lifetime of Critical Components .....................12
8.0 Appendices ...................................................................12
8.1 Specific Model 705-5 values....................................12
8.2 PFD Chart..............................................................12
8.3 SSA, Safety System Assumptions.............................13
8.4 FMEDA Report : exida Management Summary ......14
57-651 Eclipse®SIL Certified Safety Manual for Enhanced Model 705-51AX-XXX
Table 1
Enhanced ECLIPSE Model Numbers
1 Transmitters:
Model 705, 705-51A*-*** (HART)
NOTE: All transmitters shipped
after August 18, 2010 (serial numbers
667050-01-001 and later) are certified.
2 Probes:
All ECLIPSE probes can be utilized.
Refer to I/O Manual 57-600 for
complete probe offering.
1.0 Introduction
1.1 Theory of Operation
Guided Wave Radar is based upon the principle of TDR
(Time Domain Reflectometry). TDR utilizes high frequency
pulses of electromagnetic energy transmitted down a probe.
When a pulse reaches a surface that has a higher dielectric
than the air/vapor in which it is traveling, the pulse is
reflected. An ultra high-speed timing circuit precisely measures
the transit time and provides an accurate level measurement.
1.2 Product Description
The Enhanced ECLIPSE Model 705 is a loop-powered,
24 VDC level transmitter using GWR technology.
For Safety Instrumented Systems usage, the 4–20 mA analog output is the safety variable. The analog output meets
the requirements of NAMUR NE 43 (3.8 mA to 20.5 mA
usable). The transmitter contains continuous self-diagnostics, and upon internal detection of a failure, is programmed
to send its output to a user-selected failure state, either low
or high. This failsafe state is defined as the Faulted Mode.
Table 1 shows the version of the ECLIPSE Enhanced
Model 705 transmitter that has been certified for SIL 2/3
protection.
Table 2
SIL vs. PFD
Integrity Level
AVG
Safety
(SIL)
4 ≥10-5to <10
3 ≥10-4to <10
2 ≥10-3to <10
1 ≥10-2to <10
Target Average
probability of failure
on demand (PFD
)
AVG
-4
-3
-2
-1
Table 3
Minimum hardware fault tolerance
Type B sensors, final elements and non-PE logic solvers
Hardware Fault
SFF
None: <60%
Low: 60% to <90% SIL 1 SIL 2 SIL 3
Medium: 90% to <99% SIL 2 SIL 3
High: ≥99% SIL 3
Tolerance (HFT)
0 1 2
Not
Allowed
SIL 1 SIL 2
The Enhanced ECLIPSE Model 705 is classified as a Type B
Device as defined by IEC61508.
1.3 Determining Safety Integrity Level (SIL)
Safety Instrumented System designers using the Enhanced
ECLIPSE Model 705 must verify their design per applicable
standards, including IEC 61511-1.
Three limits must be met to achieve a given SIL level:
1. The PFD
numbers for the entire Safety Instrumented
AVG
Function (SIF) must be calculated. Table 2 shows the relationship between the Safety Integrity Level (SIL) and the
Probability of Failure on Demand Average (PFD
AVG
2. Architecture constraints must be met for each subsystem.
Table 3 can be used to determine the achievable SIL as a
function of the Hardware Fault Tolerance (HFT) and the
Safe Failure Fraction (SFF) for each subsystem in a safety
system (Type B–complex components as per IEC 61508
Part 2) of which the level transmitter is just one component.
).
57-651 Eclipse®SIL Certified Safety Manual for Enhanced Model 705-51AX-XXX
3
3. All products chosen for use in the SIF must meet the
Actuator
PACTware™with
Eclipse®3.x DTM
HART Modem
Eclipse
®
Model 705
Logic
Unit
requirements of IEC 61508 for the given SIL Capability
level or be justified based on proven in use data collected for
each job.
The exSILentia tool from exida is recommended for design
verification. This automatically checks all three limits and
displays the results for any given design. The Enhanced
ECLIPSE Model 705 is in the exSILentia database. This
tool contains all needed failure rate, failure mode, SIL
Capability and common cause data as well as suggested
proof test methods.
2.0 Level Measuring System
Figure 1 shows the structure of a typical measurement
system incorporating the Enhanced Magnetrol
Model 705 Guided Wave Radar transmitter.
This SIL 2/3 certified device is only available with an analog
signal (4–20 mA) with HART digital communications.
The measurement signal used by the logic unit must be the
generated analog 4–20 mA signal proportional to level.
®
Figure 1
Typical System
For fault monitoring, the logic unit must recognize both a
high alarm (≥ 21.5 mA) and low alarm (≤ 3.6 mA).
NOTE: Care must be taken to ensure the loop continues to operate
properly under a high alarm condition if the logic unit or loop
contains intrinsic safety barriers.
The only unsafe mode is when the unit is reading an
incorrect level within the 4–20mA range: ±2% of span or
the measured error published in I/O Manual 57-600,
whichever is greater. MAGNETROL defines a safe failure
as one in which the 4–20 mA current is driven out of range
(i.e., less than 3.8 mA or greater than 20.5 mA).
2.0.1 Digital Communication Protocols
Although the Enhanced ECLIPSE Model 705 transmitter is
available with F
OUNDATION Fieldbus
™
and PROFIBUS digital communication outputs, HART is the only protocol
included in the present IEC 61508/61511 standard.
2.1 Applicable Models
4
This manual is only applicable to the following Enhanced
ECLIPSE Model 705 Guided Wave Transmitter:
705-51Ax-xxx (SIL 2, HFT 0)
57-651 Eclipse®SIL Certified Safety Manual for Enhanced Model 705-51AX-XXX
2.2 Miscellaneous Electrical Considerations
The following are miscellaneous electrical issues that must
be considered in any installation:
2.2.1 Pollution Degree 2
The Enhanced ECLIPSE Model 705 is designed for use in
Category II, Pollution Degree 2 installations.
The usual pollution degree used for equipment being evaluated to IEC/EN 61010 is a nonconductive pollution of the
sort where occasionally a temporary conductivity caused by
condensation is expected.
2.2.2 Overvoltage
The Enhanced ECLIPSE Model 705 has over-voltage protection per the necessary CE requirements. As this protection is
up to 1KV when considering Hi-pot, FastTransients and
Surge, no unsafe failure modes should exist up to this potential.
Overvoltage Category II is a local standard, covering appliances, portable equipment, etc., with smaller transient voltages than those characteristic of Overvoltage Category III.
(This category applies from the wall plug to the power-supply isolation barrier or transformer).
The typical industrial plant environment is Overvoltage
Category II, therefore, most equipment evaluated to the
requirements of IEC/EN 61010 is considered to belong in
this classification.
3.0 Mean Time To Repair (MTTR)
SIL determinations are based on a number of factors,
including the Mean Time To Repair (MTTR). The analysis
for the Enhanced ECLIPSE Model 705 is based on a
MTTR of 24 hours.
4.0 Supplemental Documentation
The Enhanced ECLIPSE Model 705 Installation and
Operating Manual (57-600) must be available and used for
installation of the level transmitter.
If the HART digital protocol will be used, the following
Electronic Device Description Files are also required:
Manufacturer Code 0x56
Model 705 3.x Device ID 0xE5, device revision 1,
DD revision 1.
For device installations in a classified area, the relevant safety
instructions and electrical codes must be followed.
57-651 Eclipse®SIL Certified Safety Manual for Enhanced Model 705-51AX-XXX
5
Loading...