ABB TTH300 Series Installation instructions

SIL-Safety Instructions

SM/TTX200/TTX300/SIL-EN

Temperature Transmitte

TTH200, TTR200, TTH300, TTF300, TTF350

Information about functional safety

Blinder Text

2 TTH200, TTR200, TTH300, TTF300, TTF350 SM/TTX200/TTX300/SIL-EN

Temperature Transmitter

TTH200, TTR200, TTH300, TTF300, TTF350

SIL-Safety Instructions

SM/TTX200/TTX300/SIL-EN

03.2010

Manufacturer:

ABB Automation Products GmbH

Borsigstraße 2

63755 Alzenau

Germany

Tel.: +49 551 905-534

Fax: +49 551 905-555

Customer service center

Phone: +49 180 5 222 580

Fax: +49 621 381 931-29031

[email protected]

Subject to changes without notice

This document is protected by copyright. It assists the user in safe and efficient operation of the device.

The contents of this document, whether whole or in part, may not be copied or reproduced without prior

approval by the copyright holder.

Contents

SM/TTX200/TTX300/SIL-EN TTH200, TTR200, TTH300, TTF300, TTF350 3

1Field of Application......................................................................................................................................4

2Acronyms and abbreviations......................................................................................................................4

3Relevant standards ......................................................................................................................................7

4Other applicable documents and papers...................................................................................................7

5Terms and definitions..................................................................................................................................8

6Safety function .............................................................................................................................................9

6.1 Measuring point for SIL 2 – Single configuration .........................................................................................10

6.2 Measuring point for SIL 3 – Dual configuration............................................................................................11

7Periodic checks ..........................................................................................................................................12

8Configuration..............................................................................................................................................13

9Safety engineering parameters.................................................................................................................16

10 Namur NE 93 ...............................................................................................................................................17

11 Management summary FMEDA – Failure modes, effects, and diagnostic analysis ...........................18

Field of Application

4 TTH200, TTR200, TTH300, TTF300, TTF350 SM/TTX200/TTX300/SIL-EN

1 Field of Application

Temperature monitoring of solids, fluids and gases of all types in containers and pipes

according to the special safety engineering requirements of IEC 61508.

The operating limits are defined in the data sheets and operating instructions for the separate

models. In case of questions, please contact your ABB partner.

2 Acronyms and abbreviations

Acronym /

Abbrevia-

tion

English Description

HFT Hardware Fault

Tolerance

Hardware error tolerance of the unit.

Ability of a functional unit (hardware) to continue to

perform a required function when faults or errors are

prevailing.

MTBF Mean Time

Between Failures

Mean Time Between Failures

MTTR Mean Time To

Repair

Mean time between the occurrence of an error in a unit

or system and its repair.

PFD Probability of

Failure on Demand

Probability of hazardous failures for a safety function on

demand

PFDAVG Average Probability

of Failure on

Demand

Average probability of hazardous failures for a safety

function on demand

λDDangerous Rate of hazardous failures (per hour) affecting a channel

of a subsystem, corresponds to 0.5 λ(assuming 50%

hazardous failures and 50% non-hazardous failures)

λDD Dangerous

Detected

Rate of detected hazardous failures (per hour) affecting

a channel of a subsystem. (This is the total rate of

hazardous failures within one channel of a subsystem.)

λDU Dangerous

Undetected

Rate of undetected hazardous failures (per hour)

affecting a channel of a subsystem. (This is the total rate

of undetected hazardous failures within a subsystem.)

λSD Safe Detected Rate of detected non-hazardous failures (per hour)

affecting a channel of a subsystem. (This is the total rate

of detected non-hazardous failures within one channel of

a subsystem.)

λSU Safe Undetected Rate of undetected non-hazardous failures (per hour)

affecting a channel of a subsystem. (This is the total rate

of undetected non-hazardous failures within one channel

of a subsystem.)

Acronyms and abbreviations

SM/TTX200/TTX300/SIL-EN TTH200, TTR200, TTH300, TTF300, TTF350 5

Acronym /

Abbrevia-

tion

English Description

SIL Safety Integrity

Level

The international standard IEC 61508 defines four

discrete Safety Integrity Levels (SIL 1 to SIL 4). Each

level corresponds to a range of probability for the failure

of a safety function. The higher the Safety Integrity Level

of the safety-related systems, the lower the probability

that they will not perform the required safety function.

SFF Safe Failure

Fraction

Proportion of non-hazardous failures; in other words, the

proportion of failures without the potential to put the

safety-related system in a hazardous or impermissible

state.

Low

Demand

Mode

Low Demand Mode

of operation

Measurement type with low request rate. Measurement

type for which the request rate for the safety-related

system is not more than once a year and not greater

than twice the frequency of the retest.

DCS Distributed Control

System

Control system used in industrial applications to monitor

and control decentralized units.

HMI Human Machine

Interface

In this case, the HMI is a combined module consisting of

an LCD display with or without a local keyboard.

DTM Device Type

Manager

A DTM is a software module that supports specific

functions for accessing device parameters, the setup

and the operation of devices, and diagnostics. The DTM

is not executable software. It requires an FDT container

program in order to be activated.

LRV Lower Range Value Lower measuring range limit

URV Upper Range Value Upper measuring range limit

Multidrop Multidrop-Modus In multidrop mode, up to 15 field devices are connected

in parallel to a single wire pair. The analog current signal

simply serves to supply power to the devices in two-wire

technology with a fixed current of ≤4 mA.

Acronyms and abbreviations

6 TTH200, TTR200, TTH300, TTF300, TTF350 SM/TTX200/TTX300/SIL-EN

Acronym /

Abbrevia-

tion

English Description

closed coupled Short connecting lead to the temperature sensor, less

than 1 m (39.37 inches) in length and connecting lead

laid with mechanical protection.

extension wire Long connecting lead to the temperature sensor, more

than 1 m (39.37 inches) in length or connecting lead laid

without mechanical protection.

low stress Low to medium load according to data sheet

specification (sensor exposed to temperature and

mechanical load)

high stress High load according to data sheet specification (sensor

exposed to temperature and mechanical load)

Single

Configuration

Single configuration, i.e. use of one transmitter per

measuring point. This results in an HFT = 0 (1oo1

architecture) for corresponding SIL2.

Dual Configuration Dual configuration, i.e. use of two transmitters per

measuring point. In this configuration the two current

signals 4 … 20 mA have to be evaluated accordingly by

the downstream logics unit

(a DCS, for example). This results in an HFT = 1 (1oo2

architecture) for corresponding SIL3.

Relevant standards

SM/TTX200/TTX300/SIL-EN TTH200, TTR200, TTH300, TTF300, TTF350 7

3 Relevant standards

Standard Designation

IEC 61508, Part 1 to 7 Functional safety of electrical/electronic/programmable electronic

safety-related systems

4 Other applicable documents and papers

Please comply with the following documents in addition to observing the SIL safety instructions:

Product designation Document name Document type

TTH200 DS/TTH200 Data sheet

TTH200 OI/TTH200 Operating instructions

TTH200 CI/TTH200 Commissioning instructions

TTR200 DS/TTR200 Data sheet

TTR200 OI/TTR200 Operating instructions

TTR200 CI/TTR200 Commissioning instructions

TTH300 DS/TTH300 Data sheet

TTH300 OI/TTH300 Operating instructions

TTH300 CI/TTH300 Commissioning instructions

TTF300 DS/TTF300 Data sheet

TTF300 OI/TTF300 Operating instructions

TTF300 CI/TTF300 Commissioning instructions

TTF350 DS/TTF350 Data sheet

TTF350 OI/TTF350 Operating instructions

TTF350 CI/TTF350 Commissioning instructions

The documents can be downloaded in the available languages from the ABB website at

"www.abb.com/temperature".

In addition, the user of this device is responsible for ensuring compliance with applicable legal

regulations and standards.

Terms and definitions

8 TTH200, TTR200, TTH300, TTF300, TTF350 SM/TTX200/TTX300/SIL-EN

5 Terms and definitions

Terms Definitions

Dangerous failure A failure that has the potential to place the safety-related system in

a dangerous state or render the system inoperative.

Safety-related system A safety-related system carries out the safety functions that are

required to achieve or maintain a safe state, e.g., for a system.

Example: A pressure meter, a logics unit (e.g., limit transmitter) and

a valve constitute a safety-related system.

Safety-related

functions

A specified function that is carried out by a safety-related system

with the goal, under consideration of a defined dangerous incident,

of achieving or maintaining a safe state for the system. Example:

limit temperature monitoring.

Safety function

SM/TTX200/TTX300/SIL-EN TTH200, TTR200, TTH300, TTF300, TTF350 9

6 Safety function

TTH200-.H, TTR200-.H, TTH300-.H, TTF300-.H, and TTF350-.H transmitters generate a linear

temperature unit signal of 4 ... 20 mA. All safety functions refer strictly to the analog output

signal.

The entire valid range for the output signal must be configured between min. 3.8 mA and max.

20.5 mA (factory setting).

Warning!

In safety mode, HART communication occurs only when write protection is activated. The

HART master must comply with the safety requirements of the customer application.

Alarm behavior and current output

When a critical error is detected, the configured alarm current is generated and fed to a

downstream logics unit (a DCS, for example), which checks for overshoots of a defined

maximum value. There are two selectable modes for this alarm current:

• HIGH ALARM (high alarm, maximum alarm current); this is the factory setting

• LOW ALARM (low alarm, minimum alarm current)

The low alarm current can be configured in a range from 3.5 … 4.0 mA. The factory setting is

3.6 mA.

The high alarm current can be configured in a range from 20.0 … 23.6 mA. The factory setting

is 22 mA.

In the following cases, a detected error is displayed independently of the configured alarm

current within the low alarm range:

• Runtime errors

• Memory error (non-volatile data, RAM, ROM)

After switching on or restarting the transmitter electronics unit, the minimum low alarm time

(LOW alarm, startup time) is 10 to 15 seconds.

Warning!

To ensure accurate error monitoring, the following conditions must be fulfilled:

• The low alarm must be configured to a value ≤3.6 mA.

• The high alarm must be configured to a value ≥21 mA.

• The DCS must identify the configured high and low alarms as malfunctions, and the alarm

must be configured accordingly.

Warning!

To ensure reliable functioning of the current output, the terminal voltage at the device must be

between 11 V and 42 V DC (non-hazardous-area design) and 11 V and 30 V DC (hazardous

area design).

Safety function

10 TTH200, TTR200, TTH300, TTF300, TTF350 SM/TTX200/TTX300/SIL-EN

The DCS power supply for the transmitter must be capable of providing the required voltage

level even when the current output is running with the configured high alarm.

The device does not meet safety requirements under the following conditions:

• During configuration

• When write protection is deactivated

• When HART multidrop mode is activated

• During a simulation

• When the safety function is being checked

Warning!

The device's safety function includes the basic device TTH200-.H, TTR200-.H, TTH300-.H,

TTF300-.H, and TTF350-.H with connected sensor, inclusive of the housing and the process

connections used. The information in the corresponding documentation must be taken into

consideration.

Overall safety accuracy

The value defined for the overall accuracy of the safety function for this device is ± 2 % of the

measuring range.

The basic accuracy depends on the sensor model and is specified in the corresponding data

sheets.

Switch-on time and safety operating mode

After switching on the device, all safety-relevant errors are detected after 2 minutes in low

demand mode.

6.1 Measuring point for SIL 2 – Single configuration

One transmitter DCS for SIL2

A00132

Fig. 1

A Sensor

B Transmitter

C DCS

D 4 ... 20 mA measurement circuit

E Interface for LCD indicator

Other manuals for TTH300 Series

This manual suits for next models

Table of contents

Popular Transmitter manuals by other brands

NIVELCO

NIVELCO EasyTREK SCA-300 Series Programming manual

Honeywell

Honeywell 5816WMBR installation instructions

Kamstrup

Kamstrup READy MTU Installation and operation guide

Omega

Omega ZW Series user guide

Alinco

Alinco DJ-V17T Service manual

Dejero

Dejero EnGo 3x manual

Rosemount

Rosemount 4600 Reference manual

Speaka Professional

Speaka Professional 2342740 operating instructions

trubomat

trubomat GAB 1000 instruction manual

Teledyne Analytical Instruments

Teledyne Analytical Instruments LXT-380 instructions

Rondish

Rondish UT-11 quick start guide

MG 10JRE instruction manual

Burkert

Burkert 8177 operating instructions

Firetide

Firetide HotPort 3203 Hardware installation guide

Tele Radio

Tele Radio T9-02 User instructions

Rotronic

Rotronic HygroFlex HF3 Series user guide

Jamara

Jamara FCX6 Pro Tel Instruction

Excalibur

Excalibur SoundMaster FM Transmitter 144 owner's manual