BECKHOFF TwinSAFE User Manual
Page 79
Circuit examples
Application Guide TwinSAFE
77
Inserting the values, this produces:
S1/S2:
݊
ൌ
230 כ 16 כ 60
1
ൌ 220800
ܯܶܶܨ
ௗ
ൌ
20000000
0.1 כ 220800
ൌ 905.8y ൌ 7934783h
K1/K2:
݊
ൌ
230 כ 16 כ 60
1
ൌ 220800
ܯܶܶܨ
ௗ
ൌ
1300000
0.1 כ 220800
ൌ 58.9y ൌ 515760h
and the assumption that S1, S2, K1 and K2 are in each case single-channel:
ܯܶܶܨ
ௗ
ൌ
1
ߣ
ௗ
results in a
ܲܨܪ ൌ
0.1 כ ݊
כ ሺ1 െ ܦܥሻ
ܤ10
ௗ
ൌ
1 െ DC
MTTF
ୢ
S1/S2:
ܲܨܪ ൌ
1 െ 0.99
905.8y כ 8760
ൌ 1.26E െ 09
K1/K2:
ܲܨܪ ൌ
1 െ 0.99
58.9 כ 8760
ൌ 1.93E െ 8
The following assumptions have to be made now:
Relays K1 and K2 are both connected to the safety function. The non-functioning of a relay does not lead
to a dangerous situation, but it is discovered by the feedback. Furthermore, the B10d values for K1 and
K2 are identical.
There is a coupling coefficient between the components that are connected via two channels. Examples
are temperature, EMC, voltage peaks or signals between these components. This is assumed to be the
worst-case estimation, where ß =10%. EN 62061 contains a table with which this ß-factor can be
precisely determined. Further, it is assumed that all usual measures have been taken to prevent both
channels failing unsafely at the same time due to an error (e.g. overcurrent through relay contacts, over
temperature in the control cabinet).