Management summary
This report summarizes the results of the hardware assessment with proven-in-use
consideration according to IEC 61508 / IEC 61511 carried out on the electromagnetic flow
measuring system PROMAG 50/53 with 4..20 mA HART® output and software version
02.00.00. The statements made in this report are also valid for further software versions as long
as the assessed IEC 61508 modification process is considered. Any changes are under the
responsibility of the manufacturer. Table 1 gives an overview of the different types that belong
to the considered electromagnetic flow measuring system PROMAG 50/53.
The hardware assessment consists of a Failure Modes, Effects and Diagnostics Analysis
(FMEDA). A FMEDA is one of the steps taken to achieve functional safety assessment of a
device per IEC 61508. From the FMEDA, failure rates are determined and consequently the
Safe Failure Fraction (SFF) is calculated for the device. For full assessment purposes all
requirements of IEC 61508 must be considered.
Table 1: Version overview
Version
V1
V2
V3
V4
V5
For safety applications only the 4..20 mA current output was considered. All other possible
output variants or electronics are not covered by this report. The different devices can be
equipped with or without display.
The failure rates used in this analysis are the basic failure rates from the Siemens standard
SN 29500.
According to table 2 of IEC 61508-1 the average PFD for systems operating in low demand
mode has to be t10
PFD
AVG
that 35% of the total SIF PFD
For a SIL 2 application operating in low demand mode the total PFD
be smaller than 1,00E-02, hence the maximum allowable PFD
would then be 3,50E-03.
exida.com
©
Stephan Aschenbrenner
12
Type
Commodul
50***-***********W
C03
50***-***********A
C03
50***-***********D
C03
53***-***********C
C05
53***-***********L
C05
53***-***********M
C05
53***-***********2
C05
53***-***********4
C05
53***-***********A
C06
53***-***********B
C06
53***-***********S
C07
53***-***********T
C07
-3
-2
to < 10
for SIL 2 safety functions. A generally accepted distribution of
values of a SIF over the sensor part, logic solver part, and final element part assumes
value is caused by the sensor part.
AVG
GmbH
Options
Current
Current + Frequency
Current + Frequency + Status output + Status
input
Current + Frequency + 2 * Relays
Current + 2 * Relays + Status input
Current + 2*Frequency + Status input
Current + Current2 + Frequency + Relay
Current + Frequency + Current input + Relay
Current + Frequency
Current + Frequency + 2 * Relays
Current active + Frequency passive
Current passive + Frequency passive
value of the SIF should
AVG
value for the sensor part
AVG
e+h 06-02-03 r039 v1 r1.doc, October 4, 2006
Proline Promag 50, 53
Page 2 of 4
SIL2-50-53-Manag-Summary-Page2
Endress+Hauser