02.06.2013 Views

SIMATIC PCS 7 Process Control System - Siemens

SIMATIC PCS 7 Process Control System - Siemens

SIMATIC PCS 7 Process Control System - Siemens

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

10<br />

Automation systems<br />

Safety-related automation systems<br />

■ Overview<br />

■ Design<br />

In general, two design versions are differentiated across all architectural<br />

levels of a system based on Safety Integrated for<br />

<strong>Process</strong> Automation:<br />

• Single-channel, non-redundant design<br />

• Redundant, fault-tolerant design<br />

These two design versions are highly variable and offer a wide<br />

scope for design with regard to different customer requirements.<br />

Standard (basic process control) and safety-related functions<br />

can be combined flexibly, not only in the area of distributed I/O.<br />

Single-channel,<br />

non-redundant configuration<br />

Design versions for safety-related systems<br />

10/24<br />

Distributed I/O and<br />

direct fieldbus interfacing<br />

PROFIBUS DP<br />

AS 412F/<br />

AS 414F/<br />

AS 417F<br />

F-modules<br />

ET 200M<br />

F- and standard modules<br />

Standard modules<br />

ET 200M<br />

ET 200M<br />

ET 200S<br />

F- and<br />

standard<br />

modules<br />

DP/PA Link<br />

PROFIBUS PA<br />

Distributed I/O<br />

PROFIBUS DP<br />

<strong>Siemens</strong> ST <strong>PCS</strong> 7 · Update November 2008<br />

© <strong>Siemens</strong> AG 2008<br />

Redundant, high-availability<br />

and fault-tolerant configuration<br />

AS 412FH/<br />

AS 414FH/<br />

AS 417FH<br />

F-modules<br />

Safety-related automation systems are used for critical applications<br />

where a fault could endanger life or result in damage to the<br />

plant or the environment. These F/FH systems frequently referred<br />

to as "fail-safe automation systems" detect both faults in<br />

the process and their own internal faults in association with the<br />

safety-related F modules of the ET 200 distributed I/O systems<br />

or fail-safe transmitters connected directly via the fieldbus. They<br />

automatically transfer the plant to a safe state in the event of a<br />

fault.<br />

Even at the controller level, they can be combined in one system<br />

or separated. In addition, there are numerous possibilities arising<br />

from the use of flexible modular redundancy.<br />

At the individual architectural levels (controller, fieldbus, distributed<br />

I/O) the configuration alternatives shown in the figure are<br />

available depending on the distributed I/O used (ET 200M and<br />

ET 200S remote I/O stations or PROFIBUS PA devices according<br />

to Profile 3.0).<br />

ET 200M<br />

F- and standard modules<br />

Standard modules<br />

ET 200M<br />

F- and standard modules<br />

Y-Link<br />

ET 200M<br />

ET 200M<br />

Module or channel<br />

redundancy over<br />

several separate<br />

stations<br />

ET 200S<br />

Direct fieldbus interfacing<br />

PROFIBUS DP<br />

Flexible Modular Redundancy<br />

at module or device level<br />

AS 412FH/<br />

AS 414FH/<br />

AS 417FH<br />

Active field<br />

splitter<br />

DP/PA Link<br />

PROFIBUS PA<br />

DP/PA Link<br />

with redundant<br />

DP/PA couplers<br />

PROFIBUS PA<br />

DP/PA Link<br />

with redundant<br />

DP/PA couplers<br />

Active field distributors<br />

PROFIBUS PA

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!