&VSPQFBO
$POUSPM
$POGFSFODF

&$$



"VHVTU
o

4FQUFNCFS

,BSMTSVIF
(FSNBOZ

INTERBUS in safety critical applications

Dipl.­Ing. Karsten Meyer­Gräfe

3KRHQL[&RQWDFW)ODFKVPDUNWVWUD‰H
%ORPEHUJ*HUPDQ\
)D[H0DLONPH\HUJUDHIH#SKRHQL[FRQWDFWFRP

Keywords: ,17(5%866DIHW\2FFXSDWLRQDOKHDOWK WKHVH UDWLRQDOL]DWLRQ RSWLRQV 6DIHW\ WHFKQRORJ\ LV RQO\

DQGVDIHW\,(&(1 JUDGXDOO\EHLQJLPSOHPHQWHGXVLQJWUDQVPLVVLRQV\VWHPV
KRZHYHUWKHGHPDQGIRUWKLVFDQQRORQJHUEHLJQRUHG,W
Abstract ZLOO VRRQ EH SRVVLEOH WR LPSOHPHQW VDIHW\RULHQWHG
7KHLQWURGXFWLRQRIEXVV\VWHPVLQDXWRPDWLRQWHFKQRORJ\ DSSOLFDWLRQV XVLQJ ,17(5%86 ,17(5%86 LV DLPLQJ WR
PDUNHG WKH EHJLQQLQJ RI D UHYROXWLRQ IRU V\VWHP
RSHUDWRUV7KHQHZWHFKQRORJ\SURYLGHGWKHXVHUZLWKQHZ
RSSRUWXQLWLHVZKLFKKDGSUHYLRXVO\EHHQLPSRVVLEOHXVLQJ
FRQYHQWLRQDO WHFKQRORJLHV 6LQFH LWV PDUNHW ODXQFK LQ
,17(5%86KDVJUDGXDOO\UHSODFHGSDUDOOHOFDEOLQJ
$ORQJVLGH VDYLQJV LQ H[WUHPHO\ KHDY\ ZLULQJ KDUQHVVHV
DQG LQWHUPHGLDWH WHUPLQDO FRQQHFWLRQV FXVWRPHUV QRZ
DOVREHQHILWIURPIRUH[DPSOHGLDJQRVWLFPHVVDJHVDERXW
WKHVWDWXVRIWKHLUV\VWHPV
UHDFK&DWHJRU\&DWDFFRUGLQJWR(1
Categorizing Applications
7R GHVLJQ PDFKLQHV DQG V\VWHPV VDIHO\ WKH ULVNV WKH\
JHQHUDWH PXVW ILUVW EH HYDOXDWHG 9DULRXV QDWLRQDO DQG
LQWHUQDWLRQDO VWDQGDUGV H[LVW WR KHOS WKH XVHU ZLWK
FODVVLILFDWLRQ $W SUHVHQW WKH GHVLJQDWLRQ RI ULVNV LV QRW
FRQVLVWHQW ',1 9  IRU H[DPSOH UHIHUV WR VDIHW\
FODVVHV ZKLOH (1 KDV VDIHW\ FDWHJRULHV ,(& 
XVHVWKHGHVLJQDWLRQ6DIHW\,QWHJULW\/HYHO6,/,QWKLV
,17(5%86 LV D EXV V\VWHP ZKLFK FXUUHQWO\ HQDEOHV WKH DUWLFOHWKH(1GHVLJQDWLRQVZLOOEHXVHGWKURXJKRXW
XVHUWRQHWZRUNDQ\WKLQJIURPEDVLFVHQVRUVDQGDFWXDWRUV )RU WKH VDNH RI FRPSOHWHQHVV )LJXUH  SURYLGHV D IXOO
WRFRPSOH[FRQWUROV\VWHPVXVLQJDVLQJOHEXVFDEOHDQGLW RYHUYLHZ RI WKH GHVLJQDWLRQV XVHG LQ WKH PRVW LPSRUWDQW
LV QRZ DFWLYHO\ VXSSRUWHG E\ VHYHUDO KXQGUHG VWDQGDUGV
PDQXIDFWXUHUV ,W KDV DOZD\V EHHQ SRVVLEOH WR LQWHJUDWH
QHZ IHDWXUHV LQWR WKH V\VWHP VR WKDW HYHQ WKH HDUOLHVW
GHYLFHV FDQ VWLOO EH XVHG LQ V\VWHPV WRGD\ )RU
,17(5%86 FRPSDWLELOLW\ LV QRW MXVW D ZRUG LW LV D
UHDOLW\

,17(5%866DIHW\ZKLFKZLOOVRRQEHDYDLODEOHIRUXVHLQ
VDIHW\RULHQWHG DSSOLFDWLRQV ZLOO DOVR EH FRPSDWLEOH ZLWK
H[LVWLQJ ,17(5%86 QHWZRUNV VR WKDW DQ\ LQYHVWPHQWV
DOUHDG\ PDGH ZLOO EH VHFXUH IRU WKH IXWXUH ,W LV HYHQ
SRVVLEOH WR LQWHJUDWH VDIHW\ DSSOLFDWLRQV LQWR RSHUDWLQJ
,17(5%86 V\VWHPV UHWURVSHFWLYHO\ ZLWKRXW PDMRU
FKDQJHV

7KLV DUWLFOH KLJKOLJKWV WKH EDVLF LPSOHPHQWDWLRQ PHWKRGV

IRU ,17(5%86 6DIHW\ DQG SURYLGHV DQ RXWORRN IRU WKH
IXWXUH DSSOLFDWLRQV RI ,17(5%86 6DIHW\ LQ VDIHW\
WHFKQRORJ\
INTERBUS in safety critical applications
7KHXVHRIEXVV\VWHPVLQDXWRPDWLRQWHFKQRORJ\KDVOHG
WR FRQVLGHUDEOH VDYLQJV RI ZKLFK PDQ\ FRPSDQLHV DUH
EHJLQQLQJ WR WDNH DGYDQWDJH 7KLV LV DOVR WKH UHDVRQ IRU
WKH LQFUHDVLQJ DFFHSWDQFH RI ILHOGEXV V\VWHPV HJ E\
DXWRPRWLYH PDQXIDFWXUHUV ZKR QRZ FLWH ILHOGEXV
QHWZRUNLQJDVDSUHUHTXLVLWHZKHQSODQQLQJDQHZV\VWHP
+RZHYHU RQH DUHD KDV UHPDLQHG ODUJHO\ XQDIIHFWHG E\
Figure 1: Risk determination table (TÜV product
service web page)
7KHSURFHGXUHIRUULVNDVVHVVPHQWLVYHU\VLPLODULQDOOWKH
VWDQGDUGV PHQWLRQHG +DYLQJ GHWHUPLQHG WKH ULVNV IRU D
PDFKLQH WKH XVHU PXVW WDNH VWHSV WR UHGXFH WKHP 7KHVH
VWHSV FDQ UHODWH WR LWV FRQVWUXFWLRQ RU LWV HOHFWURQLFV $
WUDQVPLVVLRQ V\VWHP IRU H[DPSOH PXVW XVH SDUWLFXODU
PHDVXUHV IRU WKH UHOHYDQW VDIHW\ FDWHJRU\ 7KH FDWHJRULHV
ZKLFK VKRXOG EH XVHG IRU ,17(5%86 DUH VKRZQ LQ WKH
IROORZLQJH[DPSOHV

*4#/


 7KHVDIHW\FRGHFRQVLVWVRIWKHDGGLWLRQDOVDIHW\PHDVXUHV
PHQWLRQHGDERYH
INTERBUS Implementation Options Safety-Protocol

7KH LQWURGXFWLRQ RI GDWD WUDQVPLVVLRQ DQG ORJLF Safety Safety

Code
Data
SURFHVVLQJ LQ VDIHW\ WHFKQRORJ\ KDV PHDQW WKDW WKH
GDQJHUV FDXVHG E\ PDFKLQHV FDQ QR ORQJHU EH VR FOHDUO\ Loop-back
Data Data Data Data Data CRC
Word
SURYHG DV IRU H[DPSOH ZLWK FRQYHQWLRQDO SDUDOOHO
ZLULQJ +LJKO\ FRPSOH[ FRPSRQHQWV DUH DFFRPSDQLHG E\ Figure 2: Transparent integration of safety data into
QROHVVFRPSOH[VRIWZDUHVWUXFWXUHV7KLVPHDQVWKDWLWLV the INTERBUS data stream
FRQVLGHUDEO\ PRUH GLIILFXOW WR GHWHUPLQH WKH PHDVXUHV
UHTXLUHG WR UHGXFH WKH SRWHQWLDO ULVNV JHQHUDWHG E\ ERWK Category 2 ­ 4 According to EN 954­1 with
9DULRXV VWDQGDUGV SURYLGH VRPH DVVLVWDQFH (1 INTERBUS Safety
(1HWF7KH*HUPDQQDWLRQDOVWDQGDUG',199'( 6DIHW\ WHFKQRORJ\ FDQ EH LPSOHPHQWHG ZLWK ,17(5%86
 UHIHUV WR WKH LPSOHPHQWDWLRQ RI FRPSXWHUV ZLWK 6DIHW\LQWZRZD\V
VDIHW\ IXQFWLRQV 8VLQJ WKH UHTXLUHPHQW FODVVHV
GHWHUPLQHGLQ',19LWSURYLGHVVSHFLILFDWLRQVIRU  'LVWULEXWHG VDIHW\ V\VWHPV DV V\VWHP FRXSOHUV
WKH LPSOHPHQWDWLRQ RI VDIHW\RULHQWHG FRQWURO V\VWHPV RQ,17(5%86&DW
7KH\ RQO\ DSSO\ LQ SDUW WR EXV V\VWHPV EHFDXVH WKH ,QWHJUDWLRQRIWKHVDIHW\FRQWUROV\VWHPLQWRWKH
VWDQGDUG H[SUHVVO\ UHIHUV WR VDIH FRPSXWHUV DOWKRXJK D
6DIHW\,17(5%86 PDVWHU LQ DQ ,17(5%86 6DIHW\
V\VWHPLVLQDFWXDOIDFWH[DFWO\WKDW
(VVHQWLDOO\ D EXV V\VWHP PXVW SURYLGH PHDVXUHV WR GHDO
ZLWKWKHIROORZLQJWUDQVPLVVLRQHUURUV
,17(5%86PDVWHU&DW
7KH GLYHUVH LPSOHPHQWDWLRQ SULQFLSOHV IRU WKH WZR
VROXWLRQVZLOOEHGHVFULEHGEHORZ
Integration of Distributed Safety Control Systems
• /RVVRIPHVVDJHV on INTERBUS (Cat. 2 ­ 4)
• 'HOD\RIPHVVDJHV ,QPDQ\FDVHVDVDIHW\RULHQWHGFRQWUROV\VWHPLVUHTXLUHG
IRU&DW,IVDIHW\RULHQWHGDSSOLFDWLRQVFRQFHQWUDWHRQD
• ,QFRUUHFWVHTXHQFHRIPHVVDJHV
SDUWLFXODUDUHDVPDOOSURWHFWLYHVFUHHQDUHDVWKHFRQWURO
• $GGLWLRQ RI LQFRUUHFW PHVVDJHV LQWR WKH GDWD
RI VDIHW\RULHQWHG IXQFWLRQV FDQ EH GLVWULEXWHG ,Q
VWUHDP
,17(5%86 V\VWHP FRXSOHUV DUH DYDLODEOH ZKLFK DUH
• 0L[XS RI VDIHW\ DQG QRQVDIHW\ UHODWHG
GLVWULEXWHG FRPSRQHQWV ZLWK WKHLU RZQ LQWHOOLJHQFH DQG
PHVVDJHV
LQWHJUDWHGPDVWHUDQGVODYHFRQQHFWLRQ)LJXUH
• 5HSHWLWLRQRIROGRXWRIGDWHPHVVDJHVDWWKH
ZURQJWLPH Standard­
• 'LVWRUWLRQRIPHVVDJHV PLC
Standard­ Safety Safety
INTERBUS­Master
7KH DERYH WUDQVPLVVLRQ HUURUV FDQ EH HIIHFWLYHO\ GHWHFWHG System­ System­
Coupler Coupler
DQG GHDOW ZLWK XVLQJ WKH IROORZLQJ PHDVXUHV GHSHQGLQJ Master Slave Master Slave
RQWKHEXVV\VWHP INTERBUS

• &RQVHFXWLYHQXPEHU I/O SPDIO Safe SPDIO Safe

• 7LPHWDJ INTERBUS-
Safety
INTERBUS-
Safety
• 7LPHH[SHFWDWLRQWLPHRXWHWF
I/O SPDIO Safe SPDIO Safe
• (FKRUHSHDWHGWUDQVPLVVLRQ
• 6HQGHUUHFHLYHUGHWHFWLRQ
• 'DWD SURWHFWLRQ SURFHGXUHV IRU VDIHW\ GDWD ≠ I/O SPDIO Safe SPDIO Safe
SURFHGXUHVIRUVWDQGDUGGDWD
• 5HGXQGDQF\ KRPRJHQRXV GLYHUVH ZLWK Figure 3: Distributed safety system coupler
FRPSDULVRQHWF
,QWKHKLJKHUOHYHOEXVV\VWHPXQGHUWKHVWDQGDUGFRQWURO
7KHDGYDQWDJHRIWKHWUDQVSDUHQWLQWHJUDWLRQRIVDIHW\GDWD V\VWHP VDIHW\ V\VWHP FRXSOHUV DUH DYDLODEOH DV VODYHV
LQWR WKH ,17(5%86 GDWD VWUHDP DV VKRZQ LQ )LJXUH  LV )LJXUH  %HORZ WKHP WKH V\VWHP FRXSOHUV KDYH VODYHV
WKDW WKH FXUUHQW ,17(5%86 SURWRFRO (1  LV
PDLQWDLQHG 7KH VDIHW\ GDWD LQFOXGHV VLJQDOV IURP
SURWHFWLYH VFUHHQ VZLWFKHV HPHUJHQF\ VWRS VZLWFKHV HWF
DVVLJQHGWRWKHPZKLFKVHUYHWKHPDVPDVWHUDQGZKLFK
DUH WKHPVHOYHV VDIHW\RULHQWHG 7KH KLJKHUOHYHO VDIHW\
SURWRFROOLNHWKHGDWDSUHSURFHVVLQJLVSURFHVVHGE\ERWK
WKH VDIHW\RULHQWHG FRPSRQHQWV DQG WKH VDIHW\ V\VWHP
FRXSOHU $V WKH\ FDQ EH XVHG LQ &DW  WKH\ KDYH DQ

LQWHUQDO PXOWLFKDQQHO FRQVWUXFWLRQ DQG SHUIRUP GLYHUVH
VHOIWHVWVZKLFKDUHGHILQHGLQWKHVWDQGDUGWRUHDFK6DIHW\
&DWHJRU\  7KHVH VSHFLILFDWLRQV DOVR PHDQ WKDW RQO\ RQH
%XV$6,&FDQEHXVHGSHUGHYLFH Summary and Outlook
7KH DGYDQWDJH RI LPSOHPHQWLQJ VDIHW\ WHFKQRORJ\ XVLQJ
'DWDFDQDOVREHH[FKDQJHGEHWZHHQWKHORZHUOHYHOVDIHW\ ,17(5%86 6DIHW\ LV WKDW WKH IDPLOLDU V\VWHP IHDWXUHV
FRPSRQHQWV DQG WKH FRPSRQHQWV RQ WKH KLJKHUOHYHO EXV UHPDLQDYDLODEOH
QRUPDOVKXWGRZQRIPRWRUVVWDWXVPHVVDJHVGLDJQRVWLFV
HWF+RZHYHUWKHVWDQGDUGFRQWUROV\VWHPFDQQRWPRGLI\ • 2SWLRQWRFRPELQHVWDQGDUGDQGVDIHW\DSSOLFDWLRQV
WKH VDIHW\ GDWD LQ HYHU\ FDVH 7KH V\VWHP FRXSOHUV • 6WDQGDUG WRROV IRU VWDUWXS GLDJQRVWLFV DQG
FRQWLQXHWRRSHUDWHHYHQLIWKHKLJKHUOHYHOEXVIDLOV7KLV PRQLWRULQJ
DOVR HQVXUHV WKH VHSDUDWLRQ RI VWDQGDUG DQG VDIHW\ • )OH[LEOHFRQFHSW
WHFKQRORJ\,QDGGLWLRQWRVDIHW\V\VWHPFRXSOHUVIDPLOLDU  &HQWUDOL]HGVWUXFWXUH
VWDQGDUG VDIHW\ IXQFWLRQ EORFNV HJ IRU HPHUJHQF\ VWRS  'LVWULEXWHGVWUXFWXUH
VZLWFKHVSURWHFWLYHVFUHHQVZLWFKHVHWFFDQEHXVHG7KH  0L[HGVWUXFWXUH
XVHU PXVW VWLOO VHW WKH SDUDPHWHUV IRU WKHVH IXQFWLRQ  :LWKVDIHW\WHFKQRORJ\
EORFNVEXWGRHVQRWKDYHWRSURJUDPWKHP  :LWKRXWVDIHW\WHFKQRORJ\
 :LWKERWK
Integration of the Safety Control System into the • &DQEHXVHGRQDQLQGHSHQGHQW3&SODWIRUP
INTERBUS Master (Cat. 2 ­ 4) • 0DQ\GHYLFHV
7KH VHFRQG PHWKRG GLVFXVVHG HOLPLQDWHV WKH QHHG IRU • /DUJHOLQHOHQJWKV
GLVWULEXWHG VDIH V\VWHP FRXSOHUV E\ LQWHJUDWLQJ VDIHW\ • )LEHURSWLFFDEOLQJ
WHFKQRORJ\ GLUHFWO\ LQWR WKH ,17(5%86 PDVWHU 7KH • 6\QFKURQRXVGDWDLQSXWRXWSXW
,17(5%866DIHW\PDVWHULVDVDIHW\RULHQWHGFRPSRQHQW • $XWRPDWLFOLIHJXDUGLQJ
ZKLFK FRQIRUPV WR &DWHJRU\  7KH EDVLF VWUXFWXUH LV • +LJKGHJUHHRIGLVWULEXWLRQ
LOOXVWUDWHGLQ)LJXUH
• 8QLYHUVDOV\VWHPIURP3/&WRVHQVRUDFWXDWRUOHYHO
• :LGHUDQJHRIGLDJQRVWLFRSWLRQV
Standard­
PLC • 5DSLGGDWDWUDQVPLVVLRQ
INTERBUS­
Safety­Master • /RZ SXOVH UDWH GXH WR VXVFHSWLELOLW\ WR HUURUV DQG
INTERBUS- INTERBUS- INTERBUS-
UHVLGXDOHUURUSUREDELOLW\
I/O I/O I/O I/O
Safety Safety Safety

Safe SPDIO Safe SPDIO Safe SPDIO Safe SPDIO

7KH SRLQW &DQ EH XVHG RQ DQ LQGHSHQGHQW 3& SODWIRUP
INTERBUS- INTERBUS- INTERBUS- LV FXUUHQWO\ D YLVLRQ EXW LW ZLOO VRRQ EHFRPH D UHDOLW\
Safety Safety Safety
I/O I/O I/O I/O EHFDXVH VDIHW\ WHFKQRORJ\ FDQ DOVR EH LPSOHPHQWHG ZLWK
3& WHFKQRORJ\ XVLQJ WKH FRQFHSWV GHVFULEHG DERYH 3&
Safe SPDIO I/O FRQWUROV\VWHPFUDVKHVZKLFKDOWKRXJKOHVVIUHTXHQWVWLOO
Figure 4: Safe INTERBUS master connection
7KH LPSOHPHQWDWLRQ RI DQ ,17(5%86 6DIHW\ PDVWHU
HQDEOHV WKH XVHU WR LQVWDOO D VDIH PRGXOH LQ WKH H[DFW
ORFDWLRQ LQ ZKLFK LW LV UHTXLUHG E\ WKH DSSOLFDWLRQ ,W LV
RQO\ QHFHVVDU\ WR OD\ D VLQJOH EXV FDEOH IRU WKH HQWLUH
SODQW
RFFXU RQ ,3&V ZLOO KDYH QR HIIHFW ZKDWVRHYHU RQ WKH
VDIHW\ RI WKH PDFKLQH EHFDXVH RI WKH VHSDUDWLRQ RI
VWDQGDUG DQG VDIHW\ WHFKQRORJ\ 7KURXJK WKH LQWHJUDWLRQ
RI VDIHW\ WHFKQRORJ\ WKH 3& RSHUDWLQJ V\VWHP FDQQRW
LQIOXHQFH WKH ,17(5%86 PDVWHU LQ DQ\ ZD\ 7KH VDIHW\
SDUW ZLOO FRQWLQXH WR RSHUDWH HYHQ LQ WKH HYHQW RI D 3&
HUURU

7KHPDLQWDVNRIWKHVDIHW\PDVWHULVWRPDQDJHWKHVDIHW\
SURWRFRO EHWZHHQ WKH FRPSRQHQWV DQG WKH FHQWUDO XQLW
VDIHO\ $JDLQ VDIHW\ DQG VWDQGDUG WHFKQRORJ\ DUH
VHSDUDWHG 7KH VWDQGDUG DSSOLFDWLRQ RSHUDWHV RQ WKH KRVW
V\VWHP ZKLOH WKH VDIHW\ DSSOLFDWLRQ RSHUDWHV RQ WKH
,17(5%86PDVWHU7KHIXQFWLRQEORFNVXVHGDUHVWDQGDUG
IXQFWLRQ EORFNV ZKLFK DUH RQ JHQHUDO VDOH 7KH FRQFHSW
DOVR DOORZV IRU WKH LQWHJUDWLRQ RI VDIH V\VWHP FRXSOHUV DV
GHVFULEHG LQ VROXWLRQ  VR WKDW WKH JUHDWHVW SRVVLEOH
QXPEHURIRSWLRQVDUHDYDLODEOHWRWKHXVHU