Sitting on the tube during a commute few of us would think about the importance of safety redundancy in automation systems unless it is specified as part of a project we are working on. Automated Safety Instrumented Systems (SISs) however are becoming increasingly prevalent, as they can be used to prevent or mitigate hazardous events in a range of different situations. By taking a process to a safe state when given conditions are breached SISs can offer different levels of protection, thus it is important to know what Safety Integrity Level (SIL) your intended application needs to meet.

Barry Weller, Product Manager at Mitsubishi Electric, looks at what SILs are and how to determine your application safety requirements.

SILs are measures of performance or dependability for systems featuring safety functions. According to the IEC (or EN) 61508 standards on "Functional safety of electrical / electronic / programmable electronic safety-related systems", there are four SIL bands. The higher the SIL number, the higher the required protection is.

The SIL requirements of a given application can be determined in different ways. IEC 61508 describes both quantitative and qualitative methods to define which SIL is required. Common approaches include risk graphs or matrices, fault tree analysis or layers of protection analysis.

As the SIL level increases, system costs as well as the overall system complexity tend to increase. Therefore, choosing to implement high SIL 3 and SIL 4 solutions is not always necessary and the lowest appropriate SIL for the application should be given consideration.

It should be remembered that the SIL level will ultimately be applied and refer to the total system configuration. The design of the overall system architecture and redundancy at the device level are all factors that affect the SIL rating. It is often the case that a large majority of systems that require a SIL level to be applied rarely need certification above SIL 2. This of course will depend on the application and risk.

SISs need to be fault tolerant

The most important aspect that SIL 2 SISs need to address is the uninterrupted control and regulation of relevant machinery, known as "equipment under control", by a safety controller. This helps to avoid any risky downtime. As a result, control systems must feature redundant CPUs and power supplies, redundant network communications infrastructures and processing units. In this way, in the case of equipment failure, the system can maintain its availability and continue to operate safely.

For example, tunnel ventilation, as used in road or rail tunnels must operate when called upon during static traffic conditions or in emergency situations. Redundant control systems provide high availability and instant switchover essential to ensure continuous and safe operations. This can be achieved by means of a proprietary SIL compliant PLC platform coupled with a fast and reliable redundant communications network.

Mitsubishi Electric's latest SIL 2-certified solution, MELSEC iQ-R PLC series for example, is characterised by a modular structure. Therefore, it can be easily paired with additional CPUs and power supply modules to ensure system redundancy. In addition, redundant Ethernet communications can be set up providing a single IP address for both control and standby systems.

By choosing Mitsubishi Electric's PLCs for SIL 2 applications, users can also benefit from optimum system responsiveness, thanks to the high-speed CPUs. Performance across the network can also be enhanced by using CC-Link IE network technology, which features network redundancy and 1 Gbit/s network speeds.

Optimal operational performance is also fundamental. Therefore, solutions that combine process control and process safety, such as the MELSEC iQ-R for SIL 2, are becoming increasingly popular. These SISs regulate the proper running of Equipment Under Control (EUC) by collecting and processing relevant data in both normal and emergency conditions. Based on the results obtained, the process and safety controllers communicate with EUC to obtain pre-set safe conditions.

Furthermore, by selecting Mitsubishi Electric's solutions, end users can slash their total cost of ownership (TCO). The iQ-R PLC series Process Automation Controller (PAC) offers the same level of reliability and functionality typically offered by more costly Distributed Control Systems (DCS). This is a clear example of how the world of equipment safety is continuously advancing, providing more reliable, available and flexible solutions, so staying up-to-date is essential to futureproof automation system integration practices.

Image captions:

Image 1: Due to its modular structure, the Mitsubishi Electric SIL 2-certified MELSEC iQ-R PLC series can be paired with additional CPUs and power supply modules to ensure system redundancy.
[Source: Mitsubishi Electric Europe B.V.]

Image 2: Redundant control systems provide high availability and instant switchover essential to ensure continuous and safe operations for tunnel ventilation.
[Source: Mitsubishi Electric Europe B.V.]

The image(s) distributed with this press release are for Editorial use only and are subject to copyright. The image(s) may only be used to accompany the press release mentioned here, no other use is permitted.

All third party trademarks and/or registered trademarks are the property of their respective owners and are acknowledged.

Note to Editor: if you would like the text in another language please contact Carolin Heel at DMA Europa

carolin@dmaeuropa.com.

About Mitsubishi Electric

With nearly 100 years of experience in providing reliable, high-quality products, Mitsubishi Electric Corporation (TOKYO: 6503) is a recognized world leader in the manufacture, marketing and sales of electrical and electronic equipment used in information processing and communications, space development and satellite communications, consumer electronics, industrial technology, energy, transportation and building equipment. Embracing the spirit of its corporate statement, Changes for the Better, and its environmental statement, Eco Changes, Mitsubishi Electric endeavors to be a global, leading green company, enriching society with technology. The company recorded consolidated group sales of approximately 40.7 billion dollars* in the fiscal year that ended on March 31, 2019.

Mitsubishi Electric Europe, Industrial Automation – UK Branch is located in Hatfield, United Kingdom. It is a part of the European Factory Automation Business Group based in Ratingen, Germany which in turn is part of Mitsubishi Electric Europe B.V., a wholly owned subsidiary of Mitsubishi Electric Corporation, Japan.

The role of Industrial Automation – UK Branch is to manage sales, service and support across its network of local branches and distributors throughout the United Kingdom.

1. * At an exchange rate of 111 Yen = 1 US Dollars, last updated 31.03.2019 (Source: Tokyo Foreign Exchange Market)

---