SIST EN ISO 13849-2:2004

SLOVENSKI STANDARD
01-junij-2004
Varnost strojev - Z varnostjo povezani deli krmilnih sistemov - 2. del: Potrjevanje
(ISO 13849-2:2003)
Safety of machinery - Safety-related parts of control systems - Part 2: Validation (ISO
13849-2:2003)
Sicherheit von Maschinen - Sicherheitsbezogene Teile von Steuerungen - Teil 2:
Validierung (ISO 13849-2:2003)
Sécurité des machines - Parties des systemes de commande relatives a la sécurité -
Partie 2: Validation (ISO 13849-2:2003)
Ta slovenski standard je istoveten z: EN ISO 13849-2:2003
ICS:
13.110 Varnost strojev Safety of machinery
2003-01.Slovenski inštitut za standardizacijo. Razmnoževanje celote ali delov tega standarda ni dovoljeno.

EUROPEAN STANDARD
EN ISO 13849-2
NORME EUROPÉENNE
EUROPÄISCHE NORM
August 2003
ICS 13.110
English version
Safety of machinery - Safety-related parts of control systems -
Part 2: Validation (ISO 13849-2:2003)
Sécurité des machines - Parties des systèmes de Sicherheit von Maschinen - Sicherheitsbezogene Teile von
commande relatives à la sécurité - Partie 2: Validation (ISO Steuerungen - Teil 2: Validierung (ISO 13849-2:2003)
13849-2:2003)
This European Standard was approved by CEN on 10 April 2003.
CEN members are bound to comply with the CEN/CENELEC Internal Regulations which stipulate the conditions for giving this European
Standard the status of a national standard without any alteration. Up-to-date lists and bibliographical references concerning such national
standards may be obtained on application to the Management Centre or to any CEN member.
This European Standard exists in three official versions (English, French, German). A version in any other language made by translation
under the responsibility of a CEN member into its own language and notified to the Management Centre has the same status as the official
versions.
CEN members are the national standards bodies of Austria, Belgium, Czech Republic, Denmark, Finland, France, Germany, Greece,
Hungary, Iceland, Ireland, Italy, Luxembourg, Malta, Netherlands, Norway, Portugal, Slovakia, Spain, Sweden, Switzerland and United
Kingdom.
EUROPEAN COMMITTEE FOR STANDARDIZATION
COMITÉ EUROPÉEN DE NORMALISATION
EUROPÄISCHES KOMITEE FÜR NORMUNG
Management Centre: rue de Stassart, 36  B-1050 Brussels
© 2003 CEN All rights of exploitation in any form and by any means reserved Ref. No. EN ISO 13849-2:2003 E
worldwide for CEN national Members.

Contents
Contents.2
Foreword.3
Introduction .4
1 Scope .5
2 Normative references .5
3 Validation process .5
3.1 Validation principles.5
3.2 Generic fault lists.7
3.3 Specific fault lists .7
3.4 Validation plan.7
3.5 Information for validation.8
3.6 Validation record.9
4 Validation by analysis .9
4.1 General.9
4.2 Analysis techniques .10
5 Validation by testing.10
5.1 General.10
5.2 Measurement uncertainty .11
5.3 Higher requirements.11
5.4 Number of test samples .11
6 Validation of safety functions.12
7 Validation of categories .12
7.1 Analysis and testing of categories.12
7.2 Validation of category specifications .13
7.3 Validation of combination of safety–related parts .14
8 Validation of environmental requirements.14
9 Validation of maintenance requirements .15
Annex A (informative) Validation tools for mechanical systems Contents.16
Annex B (informative) Validation tools for pneumatic systems Contents.21
Annex C (informative) Validation tools for hydraulic systems Contents.32
Annex D (informative) Validation tools for electrical systems Contents.42
Annex ZA (informative) Relationship of this document with EC Directives.53
Bibliography .54
Foreword
This document EN ISO 13849-2:2003 has been prepared by Technical Committee CEN /TC 114, "Safety of
machinery", the secretariat of which is held by DIN in collaboration with Technical Committee ISO/TC 199 "Safety
of machinery".
This European Standard shall be given the status of a national standard, either by publication of an identical text or
by endorsement, at the latest by February 2004, and conflicting national standards shall be withdrawn at the latest
by February 2004.
This document has been prepared under a mandate given to CEN by the European Commission and the European
Free Trade Association and supports essential requirements of EC Directive(s).
For relationship with EC Directives, see informative annex ZA, which is an integral part of this document.
Annexes A to D are informative and structured as given in Table 1.
Table 1 — Structure of the clauses of annexes A to D
Annex Technology List of basic List of well- List of well- Fault lists and
safety tried safety tried fault
principles principles components exclusions
Clause
A Mechanical A.2 A.3 A.4 A.5
B Pneumatic B.2 B.3 B.4 B.5
C Hydraulic C.2 C.3 C.4 C.5
D Electrical (includes electronics) D.2 D.3 D.4 D.5
This document includes a Bibliography.
EN ISO 13849 consists of the following parts, under the general title "Safety of machinery – Safety-related parts of
control systems":
Part 1: General principles for design
Part 2: Validation
Part 100: Guidelines for the use and application of EN ISO 13849-1.
According to the CEN/CENELEC Internal Regulations, the national standards organizations of the following
countries are bound to implement this European Standard: Austria, Belgium, Czech Republic, Denmark, Finland,
France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Luxembourg, Malta, Netherlands, Norway, Portugal,
Slovakia, Spain, Sweden, Switzerland and the United Kingdom.
Introduction
For the use in the European Union, this part of EN ISO 13849 has the status of a generic safety standard (type B1).
This European Standard specifies the validation process, including both analysis and testing, for the safety
functions and categories for the safety–related parts of control systems. Descriptions of the safety functions and
the requirements for the categories are given in EN 954-1 (ISO 13849-1) which deals with the general principles for
design. Some requirements for validation are general and some are specific to the technology used.
EN ISO 13849-2 also specifies the conditions under which the validation by testing of the safety-related parts of
control systems should be carried out.
EN 954-1 (ISO 13849-1) specifies the safety requirements and gives guidance on the principles for the design [see
EN 292-1:1991 (ISO/TR 12100:1992), 3.11] of the safety-related parts of control systems. For these parts it
specifies categories and describes the characteristics of their safety functions, regardless of the type of energy
used. Additional advice on EN 954-1 (ISO 13894-1) is given in CR 954-100 (ISO/TR 13849-100).
The achievement of the requirements can be validated by any combination of analysis (see clause 4) and testing
(see clause 5). The analysis should be started as early as possible within the design process.
1 Scope
This European Standard specifies the procedures and conditions to be followed for the validation by analysis and
testing of:
 the safety functions provided, and
 the category achieved
of the safety-related parts of the control system in compliance with EN 954-1 (ISO 13849-1), using the design
rationale provided by the designer.
This European Standard does not give complete validation requirements for programmable electronic systems and
therefore can require the use of other standards.
NOTE CEN/TC 114/WG 6 proposes to deal in more detail with the validation of programmable electronic systems in the
elaboration of the revision to EN 954-1 (ISO 13849-1). An application standard for machinery (draft IEC 62061), based on IEC
61508, is under preparation. Requirements for programmable electronic systems, including embedded software, are given in
IEC 61508.
2 Normative references
This European Standard incorporates by dated or undated reference, provisions from other publications. These
normative references are cited at the appropriate places in the text, and the publications are listed hereafter. For
dated references, subsequent amendments to or revisions of any of these publications apply to this European
Standard only when incorporated in it by amendment or revision. For undated references the latest edition of the
publication referred to applies (including amendments).
EN 292-1:1991 (ISO/TR 12100:1992), Safety of machinery — Basic concepts, general principles for design —
Part 1: Basic terminology, methodology.
EN 954-1:1996 (ISO 13849-1:1999), Safety of machinery — Safety-related parts of control systems — Part 1:
General principles for design.
3 Validation process
3.1 Validation principles
The purpose of the validation process is to confirm the specification and the conformity of the design of the safety-
related parts of the control system within the overall safety requirements specification of the machinery.
The validation shall demonstrate that each safety-related part meets the requirements of EN 954-1 (ISO 13849-1),
in particular:
 the specified safety characteristics of the safety functions provided by that part, as set out in the design
rationale, and
 the requirements of the specified category [see EN 954-1:1996 (ISO 13849-1:1999), clause 6].
Validation should be carried out by persons who are independent of the design of the safety-related part(s).
rd
NOTE Independent person does not necessarily mean that a 3 party test is required.
The degree of independence should reflect the safety performance of the safety-related part.
Validation consists of applying analysis (see clause 4) and, if necessary, executing tests (see clause 5) in
accordance with the validation plan. Figure 1 gives an overview of the validation process. The balance between the
analysis and/or testing depends on the technology.
The analysis should be started as early as possible and in parallel with the design process, so that problems can
be corrected early whilst they are still relatively easy to correct, i. e. during steps 3 and 4 of EN 954-1:1996
(ISO 13849-1:1999), 4.3. It can be necessary for some parts of the analysis to be delayed until the design is well
developed.
For large systems, due to the size, complexity or integrated form (with the machinery) of the control system, special
arrangements may be made for:
 validation of the safety-related parts of the control system separately before integration including simulation of
the appropriate input and output signals;
 validation of the effects of integrating safety-related parts into the remainder of the control system within the
context of its use in the machine.
Figur
...