Safety Concepts

Honeywell Confidential
Safety Concepts Copyright © 2014 Honeywell International Inc. Safety Concepts
1 12/16/2016
Introduction Honeywell
• Module Description:
– This module is part of the overview section of the Safety Manager training
courses
– It will describe the Safety Concept of Safety Manager

• Job Importance:
– This module is important for everyone who is involved with Safety manager

Honeywell Confidential
Safety Concepts Copyright © 2014 Honeywell International Inc. Safety Concepts
2 12/16/2016
Topics Honeywell
• Why use a Safety Instrumented System for safe-guarding?

• How does Safety Manager provide reliability?

• What is Fault Tolerance for safety?

• What is Fault Tolerance for Availability?

Honeywell Confidential
Safety Concepts Copyright © 2014 Honeywell International Inc. Safety Concepts
3 12/16/2016
SIS for Safe-guarding Honeywell
• Achieving risk reduction

Mechanical Safety Layers

Safety Instrumented System

Alarms / operator
Safety Manager
Process Control System

Process
equipment

Honeywell Confidential
Safety Concepts Copyright © 2014 Honeywell International Inc. Safety Concepts
4 12/16/2016
Can a General Purpose PLC be used for Safeguarding? Honeywell

Process Signal Safety Action

Demand Instrumented Safe Status
for safety System

But what if…?!

Dangerous
State

Honeywell Confidential
Safety Concepts Copyright © 2014 Honeywell International Inc. Safety Concepts
5 12/16/2016
ESD Systems Honeywell

• Shutdown systems use normally energized mode of operation

Level_01
Logic “1” Valve_01
L1
at normal
process Inlet pipe
condition L2
Logic “1”
Level_02 at normal
process condition

Liquid

Logic Solver

Controller
I O

Honeywell Confidential
Safety Concepts Copyright © 2014 Honeywell International Inc. Safety Concepts
6 12/16/2016
Digital Output of General Purpose PLC Honeywell

What can
+ 24 Vdc
go wrong?
CPU SHORT CIRCUIT
Normally energized
=
Dangerous State

LEAD BREAKAGE
= LOAD,
Nuisance trip e.g. SOV

0 Vdc

A general purpose PLC is not reliable!

Honeywell Confidential
Safety Concepts Copyright © 2014 Honeywell International Inc. Safety Concepts
7 12/16/2016
Topics Honeywell
• Why use a Safety Instrumented System for safe-guarding?

• How does Safety Manager provide reliability?

• What is Fault Tolerance for safety?

• What is Fault Tolerance for Availability?

Honeywell Confidential
Safety Concepts Copyright © 2014 Honeywell International Inc. Safety Concepts
8 12/16/2016
How Safety Manager is Reliable Honeywell

• Digital Output Safety Manager + 24 Vdc

CPU
STATUS

LOAD,
e.g. SOV
0 Vdc
Diagnostics!

Honeywell Confidential
Safety Concepts Copyright © 2014 Honeywell International Inc. Safety Concepts
9 12/16/2016
Diagnostics within Safety Manager (System) Honeywell

• Memory check on processor and communication modules

• Voting on processor level (1oo2D)
• Independent Watchdog
• System Cycle Time check
• Walking bit tests on data-busses
• System temperature check
• Voltage monitoring
• Etc, etc, etc …………

• Remember
Hardware of Safety Manager which contains diagnostic
capabilities is called Safe!

Honeywell Confidential
Safety Concepts Copyright © 2014 Honeywell International Inc. Safety Concepts
10 12/16/2016
Diagnostics within Safety Manager (Field) Honeywell
• Loop monitoring available for AI, DI, AO, DO
• Short / open in field wiring and out-of range transmitter
• Reaction on loop fault is configurable / programmable

Honeywell Confidential
Safety Concepts Copyright © 2014 Honeywell International Inc. Safety Concepts
11 12/16/2016
Topics Honeywell
• Why use a Safety Instrumented System for safe-guarding?

• How does Safety Manager provide reliability?

• What is Fault Tolerance for safety?

• What is Fault Tolerance for Availability?

Honeywell Confidential
Safety Concepts Copyright © 2014 Honeywell International Inc. Safety Concepts
12 12/16/2016
Fault Tolerance for Safety Honeywell

• Digital Output Safety Manager

+ 24 Vdc

“0” de-
de-energized

CPU STATUS
Short circuit
STATUS
Defect

LOAD,
e.g. SOV
0 Vdc

Honeywell Confidential
Safety Concepts Copyright © 2014 Honeywell International Inc. Safety Concepts
13 12/16/2016
Fault Tolerance for Safety (Cont’d) Honeywell

+ 24 Vdc SMOD

“0” de-
de-energized

CPU STATUS
Short circuit

STATUS
Defect

LOAD,
e.g. SOV

0 Vdc
Honeywell Confidential
Safety Concepts Copyright © 2014 Honeywell International Inc. Safety Concepts
14 12/16/2016
Fault Tolerance for Safety (Cont’d) Honeywell
+ 24 Vdc
“0” de-
de-energize

Secondary means
of de-
de-energization &
via watchdog

CPU STATUS

STATUS

LOAD,
e.g. SOV
0 Vdc

Honeywell Confidential
Safety Concepts Copyright © 2014 Honeywell International Inc. Safety Concepts
15 12/16/2016
Topics Honeywell
• Why use a Safety Instrumented System for safe-guarding?

• How does Safety Manager provide reliability?

• What is Fault Tolerance for safety?

• What is Fault Tolerance for Availability?

Honeywell Confidential
Safety Concepts Copyright © 2014 Honeywell International Inc. Safety Concepts
16 12/16/2016
Fault Tolerance for Availability Honeywell

• Fault tolerance for availability via redundant hardware

“0” de-
de-energized “1” energized

Secondary means
of de-
de-energization & &

CPU STATUS STATUS

STATUS STATUS

“1” energized LOAD,

e.g. SOV

0 Vdc
Honeywell Confidential
Safety Concepts Copyright © 2014 Honeywell International Inc. Safety Concepts
17 12/16/2016
Summary Honeywell
• Safety Instrumented Systems are used for safeguarding because of their
reliability

• Safety Manager is reliable for safety

• Safety Manager is Fault Tolerant for safety

• Safety Manager is Fault Tolerant for availability

Honeywell Confidential
Safety Concepts Copyright © 2014 Honeywell International Inc. Safety Concepts
18 12/16/2016
Test Questions : Question 1 Honeywell
• What is a key aspect of the reliability of Safety Manager?

a) Risk reduction

b) Diagnostics coverage of 99,9% and higher

c) The Safety Manager architecture

d) None of the above

Honeywell Confidential
Safety Concepts Copyright © 2014 Honeywell International Inc. Safety Concepts
19 12/16/2016
Test Questions : Question 2 Honeywell
• Why is Safety Manager fault tolerant for availability?

a) Due to the Secondary Means Of De-energization

b) Safety Manager can handle process demands for safety

c) Answers a & b are both true

d) Due to the Redundant hardware

Honeywell Confidential
Safety Concepts Copyright © 2014 Honeywell International Inc. Safety Concepts
20 12/16/2016
Test Questions : Question 3 Honeywell
• Why is normally energized mode of operation used for shutdown
systems?

a) Logic “1” is used in the application

b) Lead breakage and loss of power, results in a safe condition

c) Field instruments are energized at normal process condition

d) None of the above

Honeywell Confidential
Safety Concepts Copyright © 2014 Honeywell International Inc. Safety Concepts
21 12/16/2016
Test Questions : Question 4 Honeywell
• What is Fault Tolerance for Safety?

a) If a fault is detected, Safety Manager can still drive to the safe state

b) Redundant hardware

c) Shutting down the process

d) Answers a & c are both true

Honeywell Confidential
Safety Concepts Copyright © 2014 Honeywell International Inc. Safety Concepts
22 12/16/2016
Test Questions : Question 5 Honeywell
• Why can a general purpose PLC NOT be used for safeguarding?

a) It can’t be used for normally energized technique

b) It isn’t fault tolerant for Availability

c) It is too expensive

d) It doesn’t contain diagnostics and isn’t Fault tolerant for safety

Honeywell Confidential
Safety Concepts Copyright © 2014 Honeywell International Inc. Safety Concepts
23 12/16/2016
Conclusion Honeywell

Describe Safety Concept for Safety Manager

Completion
Certificate

Proceed to the next lesson in your course material

Honeywell Confidential
Safety Concepts Copyright © 2014 Honeywell International Inc. Safety Concepts
24 12/16/2016