液位传感器Liquiphant M S及Nivotester FTL325N水平限测系统(Ex ia

2024年8月5日发(作者：)

Functional safety manual

Liquiphant M/S with FEL58

and Nivotester FTL325N

Level Limit Measuring System

Application

Overfill protection or operating maximum detection of

all types of liquids in tanks to satisfy particular safety

systems requirements to IEC61508/IEC61511-1.

The measuring device fulfils the requirements

concerning

•For safety functions up to SIL 2

•Explosion protection by intrinsic safety or flameproof

enclosure

•EMC to EN 61326 and NAMUR Recommendation

NE 21

Your benefits

•For overfill protection up to SIL 2

–Independently assessed (Functional Assessment)

by to IEC61508/IEC61511-1

•Monitoring for corrosion on the tuning fork of the

sensor

•No calibration

•Fault message for circuit break and short-circuit

•Functional test of subsequent devices at the push of a

button

•Protected against outside vibration

•Easy commissioning

SD161F/00/EN/02.10

71110409

Table of contents

SIL declaration of conformity. . . . . . . . . . . . . . . . . . . .3

Introduction. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .4

General depiction of a safety system (protection function) . . . . . . . 4

Structure of the measuring system with

Liquiphant M/S (FEL58) and Nivotester FTL325N . . .5

Level limit measuring system . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5

Safety function . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5

Supplementary device documentation . . . . . . . . . . . . . . . . . . . . . . 6

Settings and installation instructions . . . . . . . . . . . . . .7

Installation instructions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7

Response in operation and failure. . . . . . . . . . . . . . . .8

Recurrent function tests of the measuring system. . . .8

Appendix. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .9

Specific values and wiring options for the measuring system

Liquiphant M/S (FEL58) and Nivotester FTL325N . . . . . . . . . . . . 9

Exida Management Summary . . . . . . . . . . . . . . . . . .16

Supplementary Documentation . . . . . . . . . . . . . . . . . . . . . . . . . . 19

2

SIL declaration of conformity

SIL-03001D_00_A2

3

Introduction

!

General depiction of

a safety system

(protection function)

Note!

For general informationen about SIL please refer to: /sil

Parameter tables for determining Safety Integrity Level (SIL)

The following tables are used to define the reachable SIL, the requirements pertaining to the “Average

Probability of Dangerous Failure on Demand” (PFD

avg

), the “Hardware Fault Tolerance” (HFT) and the “Safe

Failure Fraction” (SFF) of the safety system. The specific values for the Liquiphant M/S + Nivotester FTL325N

measuring system can be found in the Appendix.

Permitted probabilities of dangerous failures on demand of the complete safety related system dependent on

the SIL (e.g. exceeding a defined MAX level/switch point) (Source: IEC 61508, Part 1):

SIL

4

3

2

1

PFD

avg

≥ 10

−5

...< 10

−4

≥ 10

−4

...< 10

−3

≥ 10

−3

...< 10

−2

≥ 10

−2

...< 10

−1

The following table shows the achievable Safety Integrity Level (SIL) as a function of the probability fraction of

safety-oriented failures and the "hardware fault tolerance" of the complete safety system for type B systems

(complex components, not all faults are known or can be described).

SFFHFT

0 1(0)

1)

< 60 %

60 % ...< 90 %

90% ...<99%

99 %

1)

not allowed

SIL 1

SIL 2

SIL 3

SIL 1

SIL 2

SIL 3

2 (1)

1

SIL 2

SIL 3

In accordance with IEC 61511-1 (FDIS) (Section 11.4.4), the HFT can be reduced by one

(values in brackets) if the devices used fulfil the following conditions:

- the device is proven in use,

- only process-relevant parameters can be changed at the device (e.g. measuring range, ... ),

- changing the process-relevant parameters is protected (e.g. password, jumper, ... ),

- the safety function requires less than SIL 4.

All conditions apply to Liquiphant M/S + Nivotester FTL325N.

4

Structure of the measuring system with

Liquiphant M/S (FEL58) and Nivotester FTL325N

Level limit measuring systemThe measuring system's devices are displayed in the following diagram (example).

LiquiphantM/S

[Exia]

CH1

[Exia]

CH1CH2

FEL

Electronicinsert

CH3

FTL325N

FTL325N

CH1

CH1CH2CH3

Nivotester

FTL325N

(1and3channel)

SD161Fen02

Safety functionThe safety function applies to all settings in MAX safety (monitoring of the covered state) and use of the NO

contacts of the level relays.

The following settings are permitted for the safety function:

Device

Liquiphant

Setting

Density switch setting: 0.5

Density switch setting: 0.7

"MAX" safety

Nivotester

FTL325N-#3#3

Error current signal < 1.2 mA

As-delivered state

Density switch setting: 0.7

"MAX" safety

Error current signal < 1.2 mA

All settings except "ΔS function" Three-channel operation

(see Section Settings and installation instructions)

The DIL switch for failure indication

(short-circuit and cable break monitoring)

must be set into position ON.

Failure switch "ON"

Nivotester

FTL325N-#1#1

Error current signal < 1.2 mAError current signal < 1.2 mA

One-channel operation

The DIL switch for failure indication

(short-circuit and cable break monitoring)

must be set into position ON.

Failure switch "ON"

The level relay always works in quiescent current safety; i.e. the relay releases when:

•the switch point is exceeded (level exceeds response height)

•a fault occurs

•the mains voltage fails

In addition to the level relay, the alarm relay works in quiescent current safety and releases when:

•one of the following faults occurs:

–the sensor connection is interrupted

–the sensor connection short circuits

•the mains voltage fails

!

Note!

When the alarm relay releases, the level relay also releases.

5

Permitted combinations of Nivotester FTL325N with Liquiphant M/S for the safety function

The following combinations are permitted for the measuring system:

Nivotester

One-channel device

FTL325N-H###

FTL325N-P###

FTL325N-T###

FTL325N-W###

Three-channel device

FTL325N-H###

FTL325N-P###

FTL325N-T###

FTL325N-W###

FTL50-######8###*

FTL51-######8###*

FTL50H-######8###*

FTL51H-######8###*

FTL51C-######8####*

FTL70-######8####*

FTL71-######8####*

Liquiphant M + FEL58Liquiphant S + FEL58

Permitted device types (# = all device versions permitted); * 8 = FEL58

Safety function data

The mandatory settings and data for the safety function can be found in the Appendix (Page 9).

The measuring system reacts in ≤ 0.9 s.

!

Supplementary

device documentation

Note!

MTTR is set at eight hours.

Safety systems without a self-locking function must be monitored or set to an otherwise safe state after

carrying out the safety function within MTTR.

The following must be available for the measuring system:

Technical Information

Nivotester FTL325NFor all device types:

TI353F

Types FTL50, FTL51,

FTL50H, FTL51H:

TI328F

Operating Instructions

One-channel device FTL325N-#1#1: KA170F

Three-channel device FTL325N-#3#3: KA171F

Types FTL50, FTL51: KA143F

Types FTL50, FTL51: KA163F

(with aluminium housing/separate terminal

compartment)

Types FTL50H, FTL51H: KA144F

Types FTL50H, FTL51H: KA164F

(with aluminium housing/separate terminal

compartment)

Type FTL51C:

TI347F

Type FTL51C: KA162F

Type FTL51C: KA165F

(with aluminium housing/separate terminal

compartment)

Types FTL70, FTL71: KA172F

Types FTL70, FTL71: KA173F

(with aluminium housing/separate terminal

compartment)

Setting, configuration, remarks,

function tests

Liquiphant M

Liquiphant SFor all device types:

TI354F

Relevant contentsConnection data,

Installation instructions

6

Settings and installation instructions

Installation instructionsPlease refer to the Operating Instructions (KA) for information regarding the correct installation of

Liquiphant M/S + Nivotester FTL325N.

Since the application conditions have an effect on the safety of the measurement, pay attention to the notes in

the Technical Information (TI) and Operating Instructions (KA).

The ambient conditions for the Nivotester FTL325N must correspond to IP54 (in accordance with EN 60529).

Refer to the following documentation for instructions on setting the devices:

Device

Liquiphant M/S (FEL58)

Nivotester FTL325N-#1#1

Nivotester FTL325N-#3#3

Setting description in documentation:

KA143F, KA163F, KA144F, KA164F, KA162F,

KA165F, KA172F, KA173F, *

KA170F

KA171F

(* type-dependent, see table: Supplementary device documentation, Page 6)

Settings for Liquiphant M/S (FEL58):

•The density switch setting must be configured according to the density range of the medium.

•The setting of the safety mode has an effect on the function. The DIL switch must be set to MAX in a SIL

application.

Settings for Nivotester FTL325N-#3#3 (three-channel version):

SettingDescription

Channels 2+3 in

ΔS function

Ds

CH3

SD161Fxx03

"

Caution!

CH2

THIS SETTING IS NOT PERMITTED FOR THE

SAFETY FUNCTION

Channel 1, independent

CH1

CH2

CH3

SD161Fxx04

Channel 1 is permitted for the safety function.

The DIL switch for fault messaging

(short-circuit and cable break monitoring)

must be set into position ON.

CHANNELS 2 AND 3 IN THIS SETTING ARE NOT

PERMITTED FOR THE SAFETY FUNCTION

Ds

Channels 2+3 in

ΔS function

"

"

Caution!

Observe the following for the Nivotester FTL325N-####: The operator must use suitable measures

(e.g. current limiter, fuse) to ensure the relay contact characteristics are not exceeded:

•U ≤ 253 V AC 50/60 Hz , I ≤ 2 A, P ≤ 500 VA at cos ϕ ≥ 0.7 or

•U ≤ 40 V DC, I ≤ 2 A, P ≤ 80 W

Caution!

Changes to the measuring system and settings after start-up can impair the protection function!

7

Response in operation and failure

The response in operation and failure is described in the following documentation.

Device

Liquiphant M/S (FEL58)

Nivotester FTL325N-#1#1

Nivotester FTL325N-#3#3

Setting description in documentation:

KA143F, KA163F, KA144F, KA164F, KA162F,

KA165F, KA172F, KA173F, *

KA170F

KA171F

(* type-dependent, see table: Supplementary device documentation, Page 6)

Recurrent function tests of the measuring system

The operativeness of the overfill protection must be checked annually if the PFD

avg

values given in the

Appendix are used.

The check must be carried out in such a way that it is proven that the overfill protection functions perfectly in

interaction with all components. This is guaranteed when the response height is approached in a filling process.

If it is not practical to fill to the response height, suitable simulation of the level or of the physical measuring

effect must be used to make the level sensor respond. If the operativeness of the level sensor/transmitter can

be determined otherwise (exclusion of faults that impair function), the check can also be completed by

simulating the corresponding output signal.

In the case of recurrent tests, each permitted setting must be checked, especially whether all the alarm switches

are set to ON.

"

Caution!

Note the following points for the function test:

•Each individual channel must be by approaching the level.

•Relay contact switching can be checked by using a hand multimeter at the terminals or by observing the

overfill protection elements (e.g. horn, adjuster).

•In multi-channel devices, all channels which do not carry out a safety function must be included in the

recurrent function tests if faulty functioning cannot be detected by any other means.

•As a positive test result, a covered tuning fork must be detected and trigger the alarm for overfill protection.

•If fork covering is not detected during the recurrent test, the monitored process must be set to a

safe state by means of additional or other measures and/or kept in the safe state until the safety

system is repaired.

8

Appendix

Specific values and

wiring options for

the measuring system

Liquiphant M/S (FEL58)

and Nivotester FTL325N

The tables show the specific values and wiring options for the measuring system.

Note!

Note the following points on the tables below:

•The PFD

avg

values for multichannel systems already contain common cause failures for the associated wiring

scheme.

•The PFD

avg

values are only valid for the associated wiring scheme. Wiring schemes other than those shown

in the Appendix were not assessed and thus do not bear any information relevant to safety.

Using NC contacts instead of NO contacts requires further consideration of the installation means.

•The wiring scheme shows the number of devices (Liquiphant and Nivotester) and the limit relay contact

circuits (open, when the sensor signals covering).

•For every channel, which performs a safety function, the failure indication (cable break/short circuit) must

be switched on.

•With several devices in a wiring scheme, they all indicate the same displayed settings.

Warning!

For safety related use of the Liquiphant S for MAX detection, the following application errors must be excluded:

•Hydrogen diffusion at temperatures over 180 °C and over 64 bar.

#

9

1oo1 architecture (CONF 1)

Liquiphant (FEL58)

Settings

Evaluated NAMUR transmitter

Error current signal

< 1.2 mA

1) density 0.7 / 0.5

2) MAX safety

SD161Fxx05

SIL

HFT

SFF

PFD

avg

**

Wiring scheme

SIL 2

0

82.5 %

2.6 x 10

-4

CH1

SD161Fxx06

Ask the manufacturer in question for the NAMUR transmitter parameters

relevant to safety.

Recurrent test

e.g. approaching level

** TI (test interval) = annual

1oo1D structure

P

F

D

a

v

g

3,00E-03

2,50E-03

2,00E-03

1,50E-03

1,00E-03

5,00E-04

0,00E+00

0,0 2,0 4,0 6,0 8,0 10,0

Test interval

[years]

SD161Fen07

PFD

10

1oo1 architecture (CONF 2)

Liquiphant (FEL58)

Settings

Nivotester FTL325N-#1#1

Settings

(One-channel device)

1) density 0.7 / 0.5

2) MAX safety

Error current signal

< 1.2 mA

SD161Fxx05

SIL

HFT

SFF

PFD

avg

**

Wiring scheme

SIL 2

0

89.8 %

3.1 x 10

-4

CH1

CH1:

SD161Fxx08

Recurrent test

e.g. approaching level

** TI (test interval) = annual

1oo1D structure

P

F

D

a

v

g

3,50E-03

3,00E-03

2,50E-03

2,00E-03

1,50E-03

1,00E-03

5,00E-04

0,00E+00

0,0 2,0 4,0 6,0 8,0 10,0

Test interval

[years]

SD161Fen09

PFD

11

1oo1 architecture (CONF 3)

Liquiphant (FEL58)

Settings

Nivotester FTL325N-#3#3

Settings

(Three-channel device)

1) density 0.7 / 0.5

2) MAX safety

Error current signal

< 1.2 mA

SD161Fxx05

SIL

HFT

SFF

PFD

avg

**

Wiring scheme

SIL 2

0

89.5 %

3.5 x 10

-4

CH1

CH2

CH3

CH2orCH3:

SD161Fen10

Recurrent test

e.g. approaching level

** TI (test interval) = annual

1oo1D structure

P

F

D

a

v

g

4,00E-03

3,50E-03

3,00E-03

2,50E-03

2,00E-03

1,50E-03

1,00E-03

5,00E-04

0,00E+00

0,0 2,0 4,0 6,0 8,0 10,0

Test interval

[years]

SD161Fen11

PFD

12

1oo2 architecture (CONF 4)

Liquiphant (FEL58)

Settings

Nivotester FTL325N-#3#3

Settings

(Three-channel device)

1) density 0.7 / 0.5

2) MAX safety

Error current signal

< 1.2 mA

SD161Fxx12

SIL

HFT

SFF

PFD

avg

**

Wiring scheme

SIL 2

1

89.5 %

1.8 x 10

-5

CH1

CH2

CH3

CH1 + CH2 or CH1 + CH3:

SD161Fen13

Recurrent test

e.g. approaching level

** TI (test interval) = annual

1oo2D structure

P

F

D

a

v

g

2,50E-04

2,00E-04

1,50E-04

1,00E-04

5,00E-05

0,00E+00

0,0 2,0 4,0 6,0 8,0 10,0

Test interval

[years]

SD161Fen14

PFD

13

2oo3 architecture (CONF 5)

Liquiphant (FEL58)

Settings

Nivotester FTL325N-#3#3

Settings

(Three-channel device)

1) density 0.7 / 0.5

2) MAX safety

Error current signal

< 1.2 mA

SD161Fxx15

SIL

HFT

SFF

PFD

avg

**

Wiring scheme

CH1

CH2

CH3

SIL 2

1

89.9 %

2.0 x 10

-5

SPS

2oo3

SD161Fxx16

Recurrent test

e.g. approaching level

** TI (test interval) = annual

2oo3D structure

P

F

D

a

v

g

3,00E-04

2,50E-04

2,00E-04

1,50E-04

1,00E-04

5,00E-05

0,00E+00

0,0 2,0 4,0 6,0 8,0 10,0

Test interval

[years]

SD161Fen17

PFD

14

1oo1 architecture (CONF 6)

Liquiphant (FEL58)

Settings

Nivotester FTL325N-#3#3

Settings

(Three-channel device)

1) density 0.7 / 0.5

2) MAX safety

Error current signal

< 1.2 mA

Ds

SD161Fxx18

CH1

CH2

CH3

SIL

HFT

SFF

PFD

avg

**

Wiring scheme

SIL 2

0

89.8 %

3.1 x 10

-4

CH1

CH2

CH3

SIL

CH1:

SD161Fxx19

Recurrent test

e.g. approaching level

** TI (test interval) = annual

1oo1D structure

P

F

D

a

v

g

3,50E-03

3,00E-03

2,50E-03

2,00E-03

1,50E-03

1,00E-03

5,00E-04

0,00E+00

0,0 2,0 4,0 6,0 8,0 10,0

Test interval

[years]

SD161Fen09

PFD

15

Exida Management Summary

L00-FTL325Nx-01-06-xx-en-004

L00-FTL325Nx-01-06-xx-en-003

16

L00-FTL325Nx-01-06-xx-en-006

L00-FTL325Nx-01-06-xx-en-005

17

L00-FTL325Nx-01-06-xx-en-007

18

Supplementary

Documentation

Safety in the Process Industry – reducing risks with SIL

CP002Z/11

19

Instruments International

Endress+Hauser

Instruments International AG

Kaegenstrasse 2

4153 Reinach

Switzerland

Tel.+41 61 715 81 00

Fax+41 61 715 25 00

***************.com

SD161F/00/EN/02.10

71110409

FM+SGML 6.0 ProMoDo

71110409