功能安全技术与应用知识讲座第一讲什么是功能安全

功能安全的概念源于国际电工委员会的一个标准——IEC61508.该标准的全称是:《E/E/PE安全相关系统的功能安全》.该标准由7个分标准构成,共有700页的篇幅,分别是: 《IEC61508.1整体安全生命周期》; 《IEC61508.2 E/E/PE安全相关系统的安全生命周期》; 《IEC61508.3安全相关软件的安全生命周期》; 《IEC61508.4术语和概念》; 《IEC61508.5确定安全完整性的方法示例》; 《IEC61508.6 IEC61508.2和IEC61508.3的应用指南》; 《IEC61508.7技术和措施概览》.     

汽车工业中的功能安全研究

介绍了汽车工业中的电气/电子/可编程电子系统,分析了早期汽车生命周期过程、汽车开发和安全的集成过程以及汽车功能安全生命周期的组成,研究了从IEC61508功能安全转变为适用于汽车工业的安全标准的过程,阐述了汽车功能安全中的一些重要概念,给出了汽车功能安全分析的几种方法及其优缺点。     

IEC和IEEE联合发布新的核电站设备状态监测国际标准

2012年9月19日．国际电工委员会（简称“IEC”）和美国电气和电子工程师协会（简称“IEEE”）联合发布了全新的核电站电力设备状态监测国际标准。该标准属于IEC／IEEE 62582系列标准中的新导则和监测方法，将有助于确保核电站电力设备的安全。同时还发布了三部附属标准，上述标准的发布实施对完成电力设备状态监测评估提供了详细的技术规定。     

重大危险源设备可靠性分级探讨

重大危险源的安全管理是我国安全管理的一项重要课题和任务,如何从宏观到微观,从定性到定量,科学化、制度化、规范化地监督管理,是我们研究的要点之一.从设备可靠性分级入手,是一种新的尝试.考虑到重大危险源的安全以"无故障"为目的,在此选用故障率作为分级指标.基于"故障类型和影响分析"中故障类型分级方法和"电气、电子、可编程电子安全相关系统的功能安全"IEC61508,对重大危险源的可靠性进行分级探讨,提出了设备设施可靠性分级和控制系统可靠性分级方法,希望将我国重大危险源的安全管理工作推向一个新的高度.     

中国安全生产科学研究院重大危险源监控与事故应急技术实验室国家安监总局安全生产重点实验室

（1）电子电气类产品的环境可靠性及电磁兼容性检测，标准涵盖：环境试验类GB／T2423，IP等级GB4208，电磁兼容类GB17625、GB／T17626、GB9254等；     

功能安全技术与应用知识讲座第四讲基本概念安全相关系统——故障错误与失效

这一讲,将讨论安全相关系统的故障、错误与失效的基本理念.上一讲介绍的是安全相关系统的行为和要求的基本概念. 安全相关系统的3大支柱:一是安全功能.针对特定的危险事件,为达到或保持被保护对象的安全状态,由E/E/PE安全相关系统或其他风险降低措施实现的功能.安全状态是指达到安全时被保护对象的状态.二是安全完整性.在规定的时间段内,在规定的条件下,安全相关系统成功执行所规定安全功能的概率.安全完整性分为SLI1、SLI2、SIL3、SIL4这4个等级.三是故障安全原则.当安全相关系统失效时,被保护的对象应按预定顺序达到安全状态.     

首都经济贸易大学安全生产培训中心 首经贸安培[2009]1号 关于举办安全文化标准实施培训班的通知

《企业安全文化建设导则》（标准号：AQ／T9004-2008）和《企业安全文化建设评价准则》（标准号：AQ／T9005—2008）是我国首次出台与企业安全文化建设相关的标准，已于2009年1月1日正式实施。国家安全生产监督管理总局2008年11月11日第25次局长办公会议在审议安全生产标准时提出要求，把安全生产标准的宣传贯彻实施作为2009年重点工作，提高标准化工作有效性，促进安全生产工作根本好转。     

2011年国际电工委员会／报警与电子安防系统技术委员会（IEC/TC79）年会在京召开

近期，2011年国际电工委员会／报警与电子安防系统技术委员会（IEC／TC79）年会在公安部第一研究所召开。本次会议由中国国家标准化管理委员会（SAC）承办，公安部第一研究所和SAC／TC100共同协办。来自欧洲、美洲、亚洲等15个国家的40名代表参加了会议，以SAC／TC100副主任委员陈朝武为团长的中国代表团共七人参加了会议，来自中国、韩国的12名技术人员列席。     

重钢焦化废水处理系统技术改造

重钢焦化废水处理系统于2004年6月正式改造完成。针对焦化废水的水质特性。形成了HSB高效微生物技术＋（O-A／O）处理工艺的废水处理系统。经过一年多的系统调试。使系统出水9项指标（除COD不能稳定达到一级）稳定达到了国家一级环保标准。对该系统技术改造的实际过程进行研讨，以求在焦化废水的治理经验上进行一些实质性的探索。     

关注安全平安是福--广西玉柴机器股份有限公司安全生产工作汇报

安全工作责任重于泰山。我公司的安全生产工作在各级领导的共同关注和全体员工的努力下．坚持“安全第一，预防为主”的方针．紧紧围绕公司（年度安全生产管理实施方案）和《安全生产责任书》的要求，建立并保持推行《职业健康安全管理体系》（GB／T28001-2001标准）和《环境管理体系》：ISO14001：2004标准），     

Functional safety concept for hazardous systems and new challenges

Selected issues associated with the functional safety analysis according to the international standards IEC 61508 and IEC 61511 are presented. Determining the safety integrity level (SIL) of electric/electronic/programmable electronic (E/E/PE) safety-related systems is outlined. The importance of quantitative probabilistic modeling of these systems in verifying SIL is emphasized. Some aspects concerning the functional safety analysis of systems for detecting the combustible or toxic gases in relation to a CENELEC draft standard prEN 50402 are shortly discussed. Basic principles of methodology for the functional safety assessment of protective systems for potentially explosive atmospheres proposed in a CEN draft standard prEN 15233 are addressed.     

Procedure for assessing hardware safety integrity in legacy systems

Functional safety is related to the safety functions of a safety-related system that uses electrical/electronic/programmable (E/E/PE) devices such as sensors, logic solvers, and final elements. A legacy system is a safety-related system which offers safety functions but which was not designed to comply with the IEC 61508 standard. This paper presents a procedure for assessing the hardware safety integrity of a legacy system so as to confirm its functional safety. The procedure defines the systematic relationship between the safety function and hardware system using a function-structure map (FSM) and assesses the hardware safety integrity centered on the safety function. The proposed procedure is applied to a boiler control system of a fossil-fuel power plant.     

Risk and system integrity concepts for safety-related control systems

This paper provides an overview of the concepts of “risk” and “safety-integrity” in relation to safety-related electrical/electronic/programmable electronic systems. The paper is an abridged version of Annex A of the emerging International Electrotechnical Commission (IEC) Standard; “Functional safety of electrical/electronic/programmable electronic systems”. Although based on Annex A, the authors have deviated in a few instances, from the strict wording of Annex A in order to more properly represent their own views. Where this occurs, a note in the text has been added to alert the reader of the deviation. The concepts of risk (including tolerable risk; safety integrity; safety-related system; System and Software Integrity Levels) are discussed.     

The dynamic flowgraph methodology as a safety analysis tool: programmable electronic system design and verification

The objective of this paper is to demonstrate the use of the Dynamic Flowgraph Methodology (DFM) during the design and verification of programmable electronic safety-related systems. The safety system consists of hardware as well as software. This paper explains and demonstrates the use of DFM, and how DFM can be used to verify the hardware and application software design. DFM is used not only to analyze newly developed software but also to verify existing software. The outcome of the design verification of the safety system is used to define the necessary diagnostic capabilities that are essential to guarantee the correct functioning of the safety functions.     

电子安全监控系统(PES)失效与控制

随着电子安全监控系统(PES)的日益广泛应用,其系统自身的安全保护已成为安全科技最前沿的问题之一.本文论述了PES在安全系统中的主要应用领域,分析了PES出现故障和失误的原因主要分为硬件故障、系统失误和管理缺陷三大类,提出了建立PES安全保护系统的技术路线和提高系统可靠性的技术措施.建议我国从标准化的角度深入开展电子安全监控系统的安全性研究.     

Certification of Highly Complex Safety-Related Systems

The BIA has now 15 years of experience with the certification of complex electronic systems for safety-related applications in the machinery sector. Using the example of machining centres, this presentation will show the systematic procedure for verifying and validating control systems using Application Specific Integrated Circuits (ASICs) and microcomputers for safety functions.

One section will describe the control structure of machining centres with control systems using “ integrated safety.” A diverse redundant architecture combined with crossmonitoring and forced dynamisation is explained. In the main section the steps of the systematic certification procedure are explained showing some results of the certification of drilling machines. Specification reviews, design reviews with test case specification, statistical analysis, and walk-throughs are the analytical measures in the testing process. Systematic tests based on the test case specification, Electro Magnetic Interference (EMI) and environmental testing, and site acceptance tests on the machines are the testing measures for validation.

A complex software driven system is always undergoing modification. Most of the changes are not safety-relevant but this has to be proven. A systematic procedure for certifying software modifications is presented in the last section of the paper.     

Dependability assessment of network-based safety-related system

Advances in electronic integration and radio communication have led to the emergence of a new kind of safety systems, i.e. Wireless Sensor Network (WSN). This network-based safety-related system is becoming more and more present in the domain of safety due to its easy deployment. It does not need a wire infrastructure and its range of applications is wide. Usually, such a system is composed of various nodes (sensors) collaborating to monitor a targeted phenomenon. In most cases, nodes are battery powered and this is the weakness of the system makes it necessary to design an energy saving policy. The present paper gives a dependability viewpoint of such a system. A modeling framework is suggested integrating the interdependency of the components. Stochastic Petri nets are used to implement this model and two heuristics to schedule component activity. The first is based on the proposed importance measures, the second on a multi-objective genetic algorithm. The aim is to conserve energy and so to extend WSN dependability.     

An evaluation approach using a HARA and FMEDA for the hardware SIL

Safety instrumented systems (SIS) are becoming increasingly complex, and form a growing proportion of programmable electronic parts. The IEC 61508 global standard was established to ensure the functional safety of SIS; however, it was expressed in highly macroscopic terms. The safety integrity level (SIL) is a criterion describing whether a component meets the safety requirements of a SIS. The safety requirements give a target SIL for the expected risks using hazard analysis and risk assessment (HARA). The SIL must correspond to the safety requirements. This study introduces an evaluation process for determining the hardware SIL through failure modes, effects, and diagnostic analysis (FMEDA). First, the components of the SIS subsystem are defined in terms of failure modes and effects, and then the failure rate and failure mechanism distribution are assigned to each component. The safety mode and detectability of each failure mode are determined for each component and, finally, the hardware SIL is evaluated. We perform a case study to evaluate the hardware SIL of the flame scanner system using HARA and FMEDA, where the safety requirement of the flame scanner was determined using the risk graph method. We verified that the hardware SIL of the flame scanner corresponded to the safety requirement.     

The effect of workers' visibility on effectiveness of intervention programs: supervisory-based safety interventions

INTRODUCTION: This paper discusses an organizational change intervention program targeting safety behaviors and addresses important considerations concerning the planning of organizational change. Using layout of the plant as a proxy for ease of daily leader-member interaction, the effect of workers' visibility on the effectiveness of supervisory-based safety (SBS) interventions is examined. Through a reinforcement-learning framework, it is suggested that visibility can affect supervisors' incentive to interact with subordinates regarding safety-related issues. METHOD: Data were collected during SBS intervention studies in five manufacturing companies. RESULTS: Results suggest a reinforcement cycle model whereby increased visibility generates more frequent exchanges between supervisors and employees, resulting in improved safety behavior among employees. In turn, employees' safer behavior reinforces continued supervisory safety-related interaction. CONCLUSION AND IMPACT ON INDUSTRY: Visibility is an important moderator in supervisory based safety interventions, and can serve to increase workplace safety. Implications of these findings for safety are discussed.