《【BS英國標(biāo)準(zhǔn)】BS EN 61508-3-2002 Functional safety of electricalelectronic programmable electronic safety-related systems — Part 3 Software requirements.doc》由會員分享，可在線閱讀，更多相關(guān)《【BS英國標(biāo)準(zhǔn)】BS EN 61508-3-2002 Functional safety of electricalelectronic programmable electronic safety-related systems — Part 3 Software requirements.doc（53頁珍藏版）》請在裝配圖網(wǎng)上搜索。
1、BRITISH STANDARD BS EN61508-3:2002Incorporating Corrigendum No.1 to BS IEC 61508-3:1998 and Amendment No.1 to BS IEC61508-3:1998Licensed Copy: Institute Of Technology Tallaght, Institute of Technology, Mon Jun 11 16:24:03 GMT+00:00 2007, Uncontrolled Copy, (c) BSIFunctional safety ofelectrical/elect
2、ronic/ programmable electronicsafety-related systems Part 3: Software requirementsThe European Standard EN 61508-3:2001 has the status of aBritish StandardICS 25.040.40; 29.020; 35.080 (renumbers theBS IEC asBS EN 61508-3:2002)BS EN 61508-3:2002National forewordThis British Standard is the official
3、English language version ofEN 61508-3:2001. It is identical with IEC 61508-3:1998 including corrigendumApril 1999.The UK participation in its preparation was entrusted to Technical Committee GEL/65, Measurement and control, to Subcommittee GEL/65/1, System considerations, which has the responsibilit
4、y to:aid enquirers to understand the text;present to the responsible international/European committee any enquiries on the interpretation, or proposals for change, and keep the UK interests informed;monitor related international and European developments and promulgate them in the UK.A list of organ
5、izations represented on this committee can be obtained on request to its secretary.Cross-referencesThe British Standards which implement international or European publications referred to in this document may be found in the BSI Standards Catalogue under the section entitled “International Standards
6、 Correspondence Index”, or by using the “Find” facility of the BSI Standards Electronic Catalogue.A British Standard does not purport to include all the necessary provisions of a contract. Users of British Standards are responsible for their correct application.Compliance with a British Standard doe
7、s not of itself confer immunity from legal obligations.Licensed Copy: Institute Of Technology Tallaght, Institute of Technology, Mon Jun 11 16:24:03 GMT+00:00 2007, Uncontrolled Copy, (c) BSIThis British Standard, having been prepared under the direction of the Electrotechnical Sector Committee, was
8、 published under the authority of the Standards Committee and comes into effecton 15 June 1999 BSI 15 March 2002ISBN 0 580 32720 5Summary of pagesThis document comprises a front cover, an inside front cover, the EN title page, pages 2 to 49 and a back cover.The BSI copyright date displayed in this d
9、ocument indicates when the document was last issued.Amd. No.DateComments10630Corrigendum No.1August 1999Incorporation of IEC CorrigendumApril 19991378115 March 2002Implementation of the European StandardAmendments issued since publicationEUROPEAN STANDARDEN 61508-3NORME EUROPENNEEUROPISCHE NORMDecem
10、ber 2001ICS 25.040.40English versionFunctional safety of electrical/electronic/programmable electronic safety-related systemsPart 3: Software requirements(IEC 61508-3:1998 + corrigendum 1999)Scurit fonctionnelle des systmes lectriques/lectroniques/lectroniques programmables relatifs la scurit Partie
11、 3: Prescriptions concernant les logiciels(CEI 61508-3:1998 + corrigendum 1999)Funktionale Sicherheit sicherheitsbezogener elektrischer/ elektronischer/programmierbarer elektronischer SystemeTeil 3: Anforderungen an Software(IEC 61508-3:1998 + Corrigendum 1999)Licensed Copy: Institute Of Technology
12、Tallaght, Institute of Technology, Mon Jun 11 16:24:03 GMT+00:00 2007, Uncontrolled Copy, (c) BSIThis European Standard was approved by CENELEC on 2001-07-03. CENELEC members are bound to comply with the CEN/CENELEC Internal Regulations which stipulate the conditions for giving this European Standar
13、d the status of a national standard without any alteration.Up-to-date lists and bibliographical references concerning such national standards may be obtained on application to the Central Secretariat or to any CENELEC member.This European Standard exists in three official versions (English, French,
14、German). A version in any other language made by translation under the responsibility of a CENELEC member into its own language and notified to the Central Secretariat has the same status as the official versions.CENELEC members are the national electrotechnical committees of Austria, Belgium, Czech
15、 Republic, Denmark, Finland, France, Germany, Greece, Iceland, Ireland, Italy, Luxembourg, Malta, Netherlands, Norway, Portugal, Spain, Sweden, Switzerland and United Kingdom.CENELECEuropean Committee for Electrotechnical Standardization Comit Europen de Normalisation Electrotechnique Europisches Ko
16、mitee fr Elektrotechnische NormungCentral Secretariat: rue de Stassart 35, B - 1050 Brussels 2001 CENELEC - All rights of exploitation in any form and by any means reserved worldwide for CENELEC members.Ref. No. EN 61508-3:2001 EPage 49EN 615083:2001Licensed Copy: Institute Of Technology Tallaght, I
17、nstitute of Technology, Mon Jun 11 16:24:03 GMT+00:00 2007, Uncontrolled Copy, (c) BSIForewordThe text of the International Standard IEC 61508-3:1998 including its corrigendum April 1999, prepared by SC 65A, System aspects, of IEC TC 65, Industrial-process measurement and control, was submitted to t
18、he Unique Acceptance Procedure and was approved by CENELEC as EN 61508-3 on 2001-07-03 without any modification.The following dates were fixed: latest date by which the EN has to be implemented at national level by publication of an identicalnational standard or by endorsement(dop) 2002-08-01 latest
19、 date by which the national standards conflictingwith the EN have to be withdrawn(dow) 2004-08-01Annexes designated normative are part of the body of the standard. Annexes designated informative are given for information only.In this standard, annexes A, B and ZA are normative and annex C is informa
20、tive.Annex ZA has been added by CENELEC.IEC 61508 is a basic safety publication covering the functional safety of electrical, electronic and programmable electronic safety-related systems. The scope states:This International Standard covers those aspects to be considered when electrical/electronic/
21、programmable electronic systems (E/E/PESs) are used to carry out safety functions. A major objective of this standard is to facilitate the development of application sector international standards by the technical committees responsible for the application sector. This will allow all the relevant fa
22、ctors associated with the application, to be fully taken into account and thereby meet the specific needs of the application sector. A dual objective of this standard is to enable the development of electrical/electronic/programmable electronic (E/E/PE) safety-related systems where application secto
23、r international standards may not exist.The CENELEC Report R0BT-004, ratified by 103 BT (March 2000) accepts that some IEC standards, which today are either published or under development, are sector implementations of IEC 61508. For example: IEC 61511, Functional safety - Safety instrumented system
24、s for the process industry sector; IEC 62061, Safety of machinery Functional safety of electrical, electronic and programmable electronic control systems; IEC 61513, Nuclear power plants Instrumentation and control for systems important to safety General requirements for systems.The railways sector
25、has also developed a set of European Standards (EN 50126; EN 50128 and prEN 50129).NOTE EN 50126 and EN 50128 were based on earlier drafts of IEC 61508. prEN 50129 is based on the principles of the latest version of IEC 61508.This list does not preclude other sector implementations of IEC 61508 whic
26、h could be currently under development or published within IEC or CENELEC.Licensed Copy: Institute Of Technology Tallaght, Institute of Technology, Mon Jun 11 16:24:03 GMT+00:00 2007, Uncontrolled Copy, (c) BSICONTENTSPageINTRODUCTION .5Clause1Scope .72Normative references.103Definitions and abbrevi
27、ations .104Conformance to this standard .105Documentation .106Software quality management system .116.1 Objectives.116.2 Requirements .117Software safety lifecycle requirements .127.1 General .127.2 Software safety requirements specification .187.3 Software safety validation planning .207.4 Software
28、 design and development .227.5 Programmable electronics integration (hardware and software) .287.6 Software operation and modification procedures.297.7 Software safety validation .297.8 Software modification .317.9 Software verification .338Functional safety assessment .37Annex A (normative) Guide t
29、o the selection of techniques and measures .38Annex B (normative) Detailed tables .44Annex C (informative) Bibliography .48Annex ZA (normative) Normative references to international publications with theircorresponding European publications . 49Tables1Software safety lifecycle: overview .15A.1Softwa
30、re safety requirements specification (see 7.2) .39A.2Software design and development: software architecture design (see 7.4.3) .39A.3Software design and development: support tools and programming language(see 7.4.4) .40A.4Software design and development: detailed design (see 7.4.5 and 7.4.6) .40Lice
31、nsed Copy: Institute Of Technology Tallaght, Institute of Technology, Mon Jun 11 16:24:03 GMT+00:00 2007, Uncontrolled Copy, (c) BSITableA.5Software design and development: software module testing and integrationPage(see 7.4.7 and 7.4.8) .41A.6Programmable electronics integration (hardware and softw
32、are) (see 7.5) .41A.7Software safety validation (see 7.7) .41A.8Modification (see 7.8) .42A.9Software verification (see 7.9) .42A.10Functional safety assessment (see clause 8) .43B.1Design and coding standards (referenced by table A.4) .44B.2Dynamic analysis and testing (referenced by tables A.5 and
33、 A.9) .44B.3Functional and black-box testing (referenced by tables A.5, A.6 and A.7) .45B.4Failure analysis (referenced by table A.10) .45B.5Modelling (referenced by table A.7) .45B.6Performance testing (referenced by tables A.5 and A.6) .46B.7Semi-formal methods (referenced by tables A.1, A.2 and A
34、.4) .46B.8Static analysis (referenced by table A.9) .46B.9Modular approach (referenced by table A.4) .47Figures1Overall framework of this standard. .92E/E/PES safety lifecycle (in realisation phase) .133Software safety lifecycle (in realisation phase) .134Relationship between and scope of IEC 61508-
35、2 and 61508-3 .145Software safety integrity and the development lifecycle (the V-model) .146Relationship between the hardware and software architectures of programmableelectronics .18Licensed Copy: Institute Of Technology Tallaght, Institute of Technology, Mon Jun 11 16:24:03 GMT+00:00 2007, Uncontr
36、olled Copy, (c) BSIINTRODUCTIONSystems comprised of electrical and/or electronic components have been used for many years to perform safety functions in most application sectors. Computer-based systems (generically referred to as programmable electronic systems (PESs) are being used in all applicati
37、on sectors to perform non-safety functions and, increasingly, to perform safety functions. If computer system technology is to be effectively and safely exploited, it is essential that those responsible for making decisions have sufficient guidance on the safety aspects on which to make those decisi
38、ons.This International Standard sets out a generic approach for all safety lifecycle activities for systems comprised of electrical and/or electronic and/or programmable electronic components (electrical/electronic/ programmable electronic systems (E/E/PESs) that are used to perform safety functions
39、. This unified approach has been adopted in order that a rational and consistent technical policy be developed for all electrically-based safety-related systems. A major objective is to facilitate the development of application sector standards.In most situations, safety is achieved by a number of p
40、rotective systems which rely on many technologies(forexamplemechanical,hydraulic,pneumatic,electrical,electronic, programmable electronic). Any safety strategy must therefore consider not only all the elements within an individual system (for example sensors, controlling devices and actuators), but
41、also all the safety-related systems making up the total combination of safety-related systems. Therefore, while this International Standard is concerned with electrical/electronic/ programmable electronic (E/E/PE) safety-related systems, it may also provide a framework within which safety-related sy
42、stems based on other technologies may be considered.It is recognized that there is a great variety of E/E/PES applications in a variety of application sectors and covering a wide range of complexity, hazard and risk potentials. In any particular application, the required safety measures will be depe
43、ndent on many factors specific to the application. This International Standard, by being generic, will enable such measures to be formulated in future application sector international standards.This International Standardconsiders all relevant overall, E/E/PES and software safety lifecycle phases (f
44、or example, from initial concept, through design, implementation, operation and maintenance to decommissioning) when E/E/PESs are used to perform safety functions;has been conceived with a rapidly developing technology in mind; the framework is sufficiently robust and comprehensive to cater for futu
45、re developments;enables application sector international standards, dealing with safety-related E/E/PESs, to be developed; the development of application sector international standards, within the framework of this International Standard, should lead to a high level of consistency (for example, of u
46、nderlying principles, terminology etc.) both within application sectors and across application sectors; this will have both safety and economic benefits;provides a method for the development of the safety requirements specification necessary to achieve the required functional safety for E/E/PE safet
47、y-related systems;uses safety integrity levels for specifying the target level of safety integrity for the safety functions to be implemented by the E/E/PE safety-related systems;Licensed Copy: Institute Of Technology Tallaght, Institute of Technology, Mon Jun 11 16:24:03 GMT+00:00 2007, Uncontrolle
48、d Copy, (c) BSIadopts a risk-based approach for the determination of the safety integrity level requirements;sets numerical target failure measures for E/E/PE safety-related systems which are linked to the safety integrity levels;sets a lower limit on the target failure measures, in a dangerous mode
49、 of failure, that can be claimed for a single E/E/PE safety-related system; for E/E/PE safety-related systems operating ina low demand mode of operation, the lower limit is set at an average probability of failure of 105 to perform its design function on demand,a high demand or continuous mode of op
50、eration, the lower limit is set at a probability of a dangerous failure of 109 per hour;NOTE A single E/E/PE safety-related system does not necessarily mean a single-channel architecture.adopts a broad range of principles, techniques and measures to achieve functional safety for E/E/PE safety-relate
51、d systems, but does not use the concept of fail safe, which may be of value when the failure modes are well defined and the level of complexity is relatively low. The concept of fail safe was considered inappropriate because of the full range of complexity of E/E/PE safety-related systems that are within the scope of the standard.Licensed Copy: Institute Of Technology Tallaght, Inst
【BS英國標(biāo)準(zhǔn)】BS EN 61508-3-2002 Functional safety of electricalelectronic programmable electronic safety-related systems — Part 3 Software requirements.doc
