Fault Insertion Testing of FPGA-Based NPP I&C Systems: SIL Certification Issues

Author(s):  
Vyacheslav Kharchenko ◽  
Oleg Odarushchenko ◽  
Vladimir Sklyar ◽  
Alexandr Ivasyuk

Features of verification FPGA-based safety critical I&C systems (FBIC) using of fault-insertion technique (FIT) are analyzed. The FIT is applied in process of certification to meet requirements of IEC 61508 according with safety integrity level (SIL). Specific aspects of FBIC SIL-certification are described. Concept of FIT-ability, theoretical issues and optimal FIT procedure taking into account different points and means of fault insertion are offered. The developed technique and tool to verify FPGA-based platform RadICS using FIT procedure during SIL-certification are described.

Author(s):  
Peter Cuninka ◽  
Maximilián Strémy

Abstract The article deals with different procedures for determining the safety integrity level and its applications. The purpose of this research was to evaluate the system and associate it with certain safety integrity level. In this article, we will use IEC 61508, IEC 61511 and IEC 62061 for comparison. The first standard is specified as the superior standard for all safety-critical systems. The second one acts as an extension of the superior standard in the field of functional safety. The last one is aimed at machinery safety.


Kerntechnik ◽  
2021 ◽  
Vol 86 (5) ◽  
pp. 343-352
Author(s):  
J. Cui ◽  
Y. Cai ◽  
Y. Wu

Abstract Software criticality analysis examines the degree of contribution that each individual failure mode of a software component has on the reliability of software. Higher safety integrity levels are assigned to software modules whose failures cause an unacceptable impact on the operation of the system, and these levels require the implementation of more rigorous software quality assurance measures as defined in IEEE Std 1012 and in the customer’s system requirements specification. In this paper, a novel software criticality analysis method is proposed, the results of which can be used to guide the development of newly developed software and the procurement of Commercial-Off-The-Shelf (COTS) software. The software structure is first analyzed and the software is divided into modules according to their functions. Then the criticality levels of software components are preliminarily classified by means of a safety criticality preliminary analysis tree, followed by their verification through the software hazard and operability analysis (HAZOP). Finally, the target Safety Integrity Level (SIL) of each software module is determined based on its criticality level and the overall safety objective (i. e., SIL) of the system it resides in. As an example, this proposed method is applied to a nuclear power plant safety-critical system to demonstrate the detail application process and to verify the feasibility of the method. Compared with the existing software criticality analysis methods, this method has better operability and verifiability, and can be utilized as a technical guidance for the software criticality analysis of nuclear power plant digital control systems.


Author(s):  
Shinji Inoue ◽  
Takaji Fujiwara ◽  
Shigeru Yamada

Safety integrity level (SIL)-based functional safety assessment is widely required in designing safety functions and checking their validity of electrical/electronic/programmable electronic (E/E/PE) safety-related systems after being issued IEC 61508 in 2010. For the hardware of E/E/PE safety-related systems, quantitative functional safety assessment based on target failure measures is needed for deciding or allocating the level of SIL. On the other hand, IEC 61508 does not provide any quantitative safety assessment method for allocating SIL for the software of E/E/PE safety-related systems because the software failure is treated as a systematic failure in IEC 61508. We discuss the needfulness of quantitative safety assessment for software of E/E/PE safety-related systems and propose mathematical fundamentals for conducting quantitative SIL-based safety assessment for the software of E/E/PE safety-related systems by applying the notion of software reliability modeling and assessment technologies. We show numerical examples for explaining how to use our approaches.


Author(s):  
James Li

The concept of Safety Integrity Level (SIL) has been developed within different systems of standards (IEC 61508, EN50129 and DEF-STAN 00-56). These standards are applied in different areas: control technology (IEC 61508), railway technology (EN50128 and EN 50129), and defense technology (DEF-STAN-00-56). Nowadays, a lot of the mass transit turnkey projects around the world demand the contractors to follow CENELEC standards and SIL concept for the safety function implementation. Although the concept of SIL is mentioned in these standards, the interpretation of the concept of SIL in these standards is not consistent and unequivocal. This paper is written to elaborate the anomalies of SIL interpretation among these various standards in order for safety engineers to obtain a more detailed view on the concept of SIL over these standards.


2008 ◽  
Vol 6 (3) ◽  
pp. 25-40
Author(s):  
Barnert Tomasz ◽  
Kosmowski Kazimierz ◽  
Śliwiński Marcin

Security Aspects in Verification of the Safety Integrity Level of Distributed Control and Protection SystemsThe article addresses some important issues of the functional safety analysis, namely the safety integrity level (SIL) verification of distributed control and protection systems with regard to security aspects. A quantitative method for SIL (IEC 61508) verification, based on so called differential factors, is presented. Taking into account SIL and the evaluation assurance level (EAL), which concerns the level of information security within entire system, two parametrical criterion function is defined for the SIL verification.


2015 ◽  
Vol 35 (1) ◽  
pp. 85-98
Author(s):  
Młynarski Stanisław ◽  
Pilch Robert ◽  
Kaczor Grzegorz ◽  
Smolnik Maksymilian ◽  
Szkoda Maciej ◽  
...  

Abstract The presented paper concerns the functional safety problems of technical systems. The characteristics of safety assessment, described in IEC 61508 standard are an introduction to the problems associated with the methodology of the calculation of Safety Integrity Levels (SIL). The parameters obtained from reliability indicators, were calculated for the purpose of assessing the impact of repair time for the elements of a given system on the SIL. The calculated values of failure rate and the probability of dangerous failure show the sensitivity of the system at different time to repair values for various reliability-wise configurations. The indicators characterizing the safety level, calculated of the system with no repair time are the basis for demonstrating the influence of repair on the safety integrity level.


Author(s):  
Shinji Inoue ◽  
Takaji Fujiwara ◽  
Shigeru Yamada

Quantitative and analytical safety assessment methods of E/E/PE safety-related software systems based on the SIL defined by IEC 61508 have been proposed. IEC 61508 does not provide us with quantitative and analytical methods for safety assessment of the software. Our methods give us quantitative information on safety measures for deciding the safety integrity level and testing time duration for achieving certain safety integrity level of E/E/PE software, respectively. Our stochastic modeling approaches are based on software reliability modeling and software reliability assessment techniques. Numerical examples for our methods have been shown for explaining how to use our software safety assessment approaches conforming IEC 61508.


Sign in / Sign up

Export Citation Format

Share Document