1、 IEC 62061 Edition 1.0 2012-11 INTERNATIONAL STANDARD NORME INTERNATIONALE Safety of machinery Functional safety of safety-related electrical, electronic and programmable electronic control systems Scurit des machines Scurit fonctionnelle des systmes de commande lectriques, lectroniques et lectroniq
2、ues programmables relatifs la scurit IEC62061:2005/A1:2012AMENDMENT 1 AMENDEMENT 1 THIS PUBLICATION IS COPYRIGHT PROTECTED Copyright 2012 IEC, Geneva, Switzerland All rights reserved. Unless otherwise specified, no part of this publication may be reproduced or utilized in any form or by any means, e
3、lectronic or mechanical, including photocopying and microfilm, without permission in writing from either IEC or IECs member National Committee in the country of the requester. If you have any questions about IEC copyright or have an enquiry about obtaining additional rights to this publication, plea
4、se contact the address below or your local IEC member National Committee for further information. Droits de reproduction rservs. Sauf indication contraire, aucune partie de cette publication ne peut tre reproduite ni utilise sous quelque forme que ce soit et par aucun procd, lectronique ou mcanique,
5、 y compris la photocopie et les microfilms, sans laccord crit de la CEI ou du Comit national de la CEI du pays du demandeur. Si vous avez des questions sur le copyright de la CEI ou si vous dsirez obtenir des droits supplmentaires sur cette publication, utilisez les coordonnes ci-aprs ou contactez l
6、e Comit national de la CEI de votre pays de rsidence. IEC Central Office Tel.: +41 22 919 02 11 3, rue de Varemb Fax: +41 22 919 03 00 CH-1211 Geneva 20 infoiec.ch Switzerland www.iec.ch About the IEC The International Electrotechnical Commission (IEC) is the leading global organization that prepare
7、s and publishes International Standards for all electrical, electronic and related technologies. About IEC publications The technical content of IEC publications is kept under constant review by the IEC. Please make sure that you have the latest edition, a corrigenda or an amendment might have been
8、published. Useful links: IEC publications search - www.iec.ch/searchpub The advanced search enables you to find IEC publications by a variety of criteria (reference number, text, technical committee,). It also gives information on projects, replaced and withdrawn publications. IEC Just Published - w
9、ebstore.iec.ch/justpublished Stay up to date on all new IEC publications. Just Published details all new publications released. Available on-line and also once a month by email. Electropedia - www.electropedia.org The worlds leading online dictionary of electronic and electrical terms containing mor
10、e than 30 000 terms and definitions in English and French, with equivalent terms in additional languages. Also known as the International Electrotechnical Vocabulary (IEV) on-line. Customer Service Centre - webstore.iec.ch/csc If you wish to give us your feedback on this publication or need further
11、assistance, please contact the Customer Service Centre: csciec.ch. A propos de la CEI La Commission Electrotechnique Internationale (CEI) est la premire organisation mondiale qui labore et publie des Normes internationales pour tout ce qui a trait llectricit, llectronique et aux technologies apparen
12、tes. A propos des publications CEI Le contenu technique des publications de la CEI est constamment revu. Veuillez vous assurer que vous possdez ldition la plus rcente, un corrigendum ou amendement peut avoir t publi. Liens utiles: Recherche de publications CEI - www.iec.ch/searchpub La recherche ava
13、nce vous permet de trouver des publications CEI en utilisant diffrents critres (numro de rfrence, texte, comit dtudes,). Elle donne aussi des informations sur les projets et les publications remplaces ou retires. Just Published CEI - webstore.iec.ch/justpublished Restez inform sur les nouvelles publ
14、ications de la CEI. Just Published dtaille les nouvelles publications parues. Disponible en ligne et aussi une fois par mois par email. Electropedia - www.electropedia.org Le premier dictionnaire en ligne au monde de termes lectroniques et lectriques. Il contient plus de 30 000 termes et dfinitions
15、en anglais et en franais, ainsi que les termes quivalents dans les langues additionnelles. Egalement appel Vocabulaire Electrotechnique International (VEI) en ligne. Service Clients - webstore.iec.ch/csc Si vous dsirez nous donner des commentaires sur cette publication ou si vous avez des questions
16、contactez-nous: csciec.ch. IEC 62061 Edition 1.0 2012-11 INTERNATIONAL STANDARD NORME INTERNATIONALE Safety of machinery Functional safety of safety-related electrical, electronic and programmable electronic control systems Scurit des machines Scurit fonctionnelle des systmes de commande lectriques,
17、 lectroniques et lectroniques programmables relatifs la scurit INTERNATIONAL ELECTROTECHNICAL COMMISSION COMMISSION ELECTROTECHNIQUE INTERNATIONALE J ICS 13.110; 25.040.99; 29.020 PRICE CODE CODE PRIX ISBN 978-2-83220-441-2 AMENDMENT 1 AMENDEMENT 1 Registered trademark of the International Electrote
18、chnical Commission Marque dpose de la Commission Electrotechnique Internationale Warning! Make sure that you obtained this publication from an authorized distributor. Attention! Veuillez vous assurer que vous avez obtenu cette publication via un distributeur agr. 2 62061 Amend. 1 IEC:2012 FOREWORD T
19、his amendment has been prepared by IEC technical committee 44: Safety of machinery Electrotechnical aspects. The text of this amendment is based on the following documents: CDV Report on voting 44/655/CDV 44/663/RVC Full information on the voting for the approval of this amendment can be found in th
20、e report on voting indicated in the above table. The committee has decided that the contents of this amendment and the base publication will remain unchanged until the stability date indicated on the IEC web site under “http:/webstore.iec.ch“ in the data related to the specific publication. At this
21、date, the publication will be reconfirmed, withdrawn, replaced by a revised edition, or amended. _ INTRODUCTION Delete the tenth paragraph of this clause. Delete the following text below Figure 1: Information on the recommended application of IEC 62061 and ISO 13849-1 (under revision) Replace the te
22、xt of the paragraph above Table 1 by the following: IEC 62061 and ISO 13849-1 specify requirements for the design and implementation of safety-related control systems of machinery. The use of either of these standards, in accordance with their scopes, can be presumed to fulfil the relevant essential
23、 safety requirements. IEC/TR 62061-1 provides guidance on the application of IEC 62061 and ISO 13849-1 in the design of safety-related control systems for machinery. Delete the note above Table 1. Delete Table 1. 1 Scope Replace the text of Note 2 by the following: NOTE 2 In this standard, it is pre
24、sumed that the design of complex programmable electronic subsystems or subsystem elements conforms to the relevant requirements of IEC 61508 and uses Route 1H(see IEC 61508-2:2010, 7.4.4.2). It is considered that Route 2H(see IEC 61508-2:2010, 7.4.4.3) is not suitable for 62061 Amend. 1 IEC:2012 3 g
25、eneral machinery. Therefore, this standard does not deal with Route 2H. This standard provides a methodology for the use, rather than development, of such subsystems and subsystem elements as part of a SRECS. 2 Normative references Replace the references to ISO 12100-1:2003 and ISO 12100-2:2003 by t
26、he following new reference: ISO 12100:2010, Safety of machinery General principles for design Risk assessment and risk reduction Replace the existing reference to ISO 13849-1 by the following new reference: ISO 13849-1:2006, Safety of machinery Safety-related parts of control systems Part 1: General
27、 principles for design 3.2.5 subsystem Replace definition 3.2.5 by the following new definition: 3.2.5 subsystem entity of the top-level architectural design of the SRECS where a dangerous failure of any subsystem will result in a dangerous failure of a safety-related control function IEC 61508-4, 3
28、.4.4 modified NOTE 1 A complete subsystem can be made up from a number of identifiable and separate subsystem elements, which when put together implement the function blocks allocated to the subsystem. NOTE 2 This differs from common language where “subsystem” may mean any sub-divided part of an ent
29、ity, the term “subsystem” is used in this standard within a strongly defined hierarchy of terminology: “subsystem” is the first level subdivision of a system. The parts resulting from further subdivision of a subsystem are called “subsystem elements”. 3.2.7 low complexity component Replace the refer
30、ence above Note 1 by the following new reference: IEC 61508-4, 3.4.3 modified 3.2.9 functional safety Replace the reference by the following new reference: IEC 61508-4, 3.1.12 modified 3.2.10 hazard (from machinery) Replace the reference by the following new reference: ISO 12100, 3.6 modified 3.2.11
31、 hazardous situation Replace the reference by the following new reference: ISO 12100, 3.10 modified 4 62061 Amend. 1 IEC:2012 3.2.12 protective measure Replace the reference by the following new reference: ISO 12100, 3.19 modified 3.2.13 risk Replace the reference by the following new reference: ISO
32、 12100, 3.12 3.2.15 safety function Replace the reference by the following new reference: ISO 12100, 3.30 3.2.19 safety integrity Replace the reference by the following new reference: IEC 61508-4, 3.5.4 modified 3.2.20 hardware safety integrity Replace the reference by the following new reference: I
33、EC 61508-4, 3.5.7 modified 3.2.21 software safety integrity Replace the reference by the following new reference: IEC 61508-4, 3.5.5 modified 3.2.22 systematic safety integrity Replace the reference by the following new reference: IEC 61508-4, 3.5.6 modified 3.2.23 Safety Integrity Level SIL Replace
34、 the reference by the following new reference: IEC 61508-4, 3.5.8 modified 3.2.26 low demand mode Replace the first paragraph by the following new paragraph: mode of operation in which the frequency of demands on a SRECS is no greater than one per year 3.2.27 high demand or continuous mode Replace t
35、he first paragraph by the following new paragraph: 62061 Amend. 1 IEC:2012 5 mode of operation in which the frequency of demands on a SRECS is greater than one per year or the SRCF retains the machine in a safe state as part of normal operation Replace the reference by the following new reference: I
36、EC 61508-4, 3.5.16 modified 3.2.28 Probability of dangerous Failure per Hour PFHDReplace definition 3.2.28 by the following new definition: 3.2.28 Probability of dangerous Failure per Hour PFHDaverage probability of a dangerous failure per hour of a safety related system/subsystem to perform the spe
37、cified safety function over a given period of time NOTE PFHDshould not be confused with probability of dangerous failure on demand (PFD). 3.2.29 target failure value Replace the reference by the following new reference: IEC 61508-4, 3.5.17 modified 3.2.35 architecture Replace the reference by the fo
38、llowing new reference: IEC 61508-4, 3.3.4 modified 3.2.37 proof test Replace the first paragraph by the following new paragraph: periodic test performed to detect dangerous hidden failures and degradation in a SRECS and its subsystems so that, if necessary, the SRECS and its subsystems can be restor
39、ed to an “as new” condition or as close as practical to this condition 3.2.38 diagnostic coverage Replace the first paragraph by the following new paragraph: fraction of dangerous failures detected by automatic on-line diagnostic tests Add, at the end of this subclause, new Note 2 as follows: NOTE 2
40、 The fraction of detected dangerous failures is computed to be the rate of dangerous failures that are detected by automatic on-line diagnostic tests divided by the rate of total dangerous failures. and number the existing note as Note 1. 3.2.40 dangerous failure Delete the reference “IEC 61508-4, 3
41、.6.7 modified”. 3.2.41 safe failure Delete the reference “IEC 61508-4, 3.6.8 modified”. 6 62061 Amend. 1 IEC:2012 3.2.43 Common Cause Failure CCF Replace, in the first paragraph, the word “coincident” by “concurrent”. 5.2.3 Functional requirements specification for SRCFs Replace the existing text of
42、 this subclause (including 5.2.3.1 and 5.2.3.2) by the following: The functional requirements specification for SRCFs shall describe details of each SRCF to be performed including, as applicable: the condition(s) (e.g. operating mode) of the machine in which the SRCF shall be active or disabled; the
43、 priority of those functions that can be simultaneously active and that can cause conflicting action; the frequency of operation of each SRCF; the required response time of each SRCF; the interface(s) of the SRCFs to other machine functions; the required response times (e.g. input and output devices
44、); a description of each SRCF; a description of fault reaction function(s) and any constraints on, for example, re-starting or continued operation of the machine in cases where the initial fault reaction is to stop the machine; a description of the operating environment (e.g. temperature, humidity,
45、dust, chemical substances, mechanical vibration and shock); tests and any associated facilities (e.g. test equipment, test access ports); rate of operating cycles, duty cycle, and/or utilisation category, for electromechanical devices intended for use in the SRCF. NOTE 1 In addition to the requireme
46、nts of IEC 61000-6-2, when a SRECS is intended for use in an industrial environment, electromagnetic (EM) immunity levels are given in IEC 61326-3-1. SRECS intended for use in another EM environment (e.g. residential) should have immunity levels based on those specified in different EMC standards (e
47、.g., for a residential environment, IEC 61000-6-1). NOTE 2 When specifying EM immunity levels it is necessary to consider whether the levels used in different EMC standards cover cases which can occur in a SRECS application even with a low probability of occurrence. NOTE 3 EM immunity performance cr
48、iterion for functional safety of a SRECS is given in 6.4.3. 6.4 Requirements for systematic safety integrity of the SRECS Delete the note. 6.4.2 Requirements for the control of systematic faults Replace Note 2 by the following: NOTE 2 Further information can be found in IEC 61784-3 and IEC 61508-2.
49、6.4.3 Electromagnetic (EM) immunity Replace, in this subclause, “Annex E” by “IEC 61326-3-1”. 62061 Amend. 1 IEC:2012 7 Replace, in the note of this subclause, “Annex E” by “IEC 61326-3-1”. 6.6.3.1 General Replace the last sentence of this subclause by the following: The SIL that can be achieved by the SRECS is less than or equal to the lowest SILCLs of any of t