{"id":39454,"date":"2021-07-27T12:51:04","date_gmt":"2021-07-27T10:51:04","guid":{"rendered":"https:\/\/www.reersafety.cn\/?page_id=39454"},"modified":"2023-03-03T10:59:44","modified_gmt":"2023-03-03T09:59:44","slug":"design-and-development-of-subsystems","status":"publish","type":"page","link":"https:\/\/www.reersafety.cn\/en\/academy\/industrial-safety-guide\/iec-62061-safety-of-machinery\/design-and-development-of-subsystems\/","title":{"rendered":"Design and development of subsystems"},"content":{"rendered":"\n<div class=\"row\"  id=\"row-88537083\">\n\n\n\t<div id=\"col-1082930242\" class=\"col small-12 large-12\"  >\n\t\t<div class=\"col-inner\"  >\n\t\t\t\n\t\t\t\n\n  <div id=\"page-header-422106968\" class=\"page-header-wrapper\">\n  <div class=\"page-title light simple-title\">\n\n    \n    <div class=\"page-title-inner container align-center flex-row medium-flex-wrap row-reverse\" >\n            <div class=\"title-content flex-col flex-left text-left medium-text-center\">\n        <div class=\"title-breadcrumbs pb-half pt-half\"><nav class=\"woocommerce-breadcrumb breadcrumbs uppercase\">Home<\/nav><\/div>      <\/div>\n    <\/div>\n\n       <\/div>\n    <\/div>\n  \n\n\n\t\t<\/div>\n\t\t\t<\/div>\n\n\t\n\n<\/div>\n<div class=\"row\"  id=\"row-470965334\">\n\n\n\t<div id=\"col-1505925492\" class=\"col small-12 large-12\"  >\n\t\t<div class=\"col-inner\"  >\n\t\t\t\n\t\t\t\n\n<div class=\"row\"  id=\"row-1760503584\">\n\n\n\t<div id=\"col-930224400\" class=\"col small-12 large-12\"  >\n\t\t<div class=\"col-inner\"  >\n\t\t\t\n\t\t\t\n\n\t<div id=\"text-3222524902\" class=\"text txt-page-title\">\n\t\t\n\n<h1>Design and development of subsystems<\/h1>\n\t\t\t<\/div>\n\t\n\t<div id=\"text-2165095710\" class=\"text\">\n\t\t\n\n\n\t\t\n<style>\n#text-2165095710 {\n  color: rgb(0,0,0);\n}\n#text-2165095710 > * {\n  color: rgb(0,0,0);\n}\n<\/style>\n\t<\/div>\n\t\n<h3>Step one &#8211; choice of the architecture (structure).<\/h3>\n<p>The standard proposes four predefined architectures and for each of them provides a simplified formula for computation of the PFH.<\/p>\n<p>The four architectures are differentiated by the hardware fault tolerance (HFT), and for the presence (or absence) of diagnostics.<\/p>\n<p>The four architectures correspond to the most popular configurations used in the field of safety of machinery.<\/p>\n<p>A hardware fault tolerance of N means that the subsystem tolerates up to N failures before losing his safety performance. N +1 faults could cause a loss of the safety function.<\/p>\n<p>When defining the fault tolerance of an architecture no credit is given to additional measures that can control the effects of faults, such as diagnostics.<\/p>\n<p>For architecture B and D the two channels are sufficiently independent; i.e. they are designed in such a way that a single channel is able to carry out the function independently from the other. The same apply to the architecture C for the functional channel with respect to the diagnostic channel.<\/p>\n<h4>Subsystem architecture A: <br>HFT = 0 &#8211; Single channel without diagnostic function<\/h4>\n\t<div class=\"img has-hover x md-x lg-x y md-y lg-y\" id=\"image_996916085\">\n\t\t\t\t\t\t\t\t<div class=\"img-inner dark\" style=\"margin:0px 0px 0px 160px;\">\n\t\t\t<img width=\"800\" height=\"131\" src=\"https:\/\/www.reersafety.cn\/wp-content\/uploads\/2022\/04\/EN_ArchitectureA.png\" class=\"attachment-large size-large\" alt=\"\" decoding=\"async\" loading=\"lazy\" srcset=\"https:\/\/www.reersafety.cn\/wp-content\/uploads\/2022\/04\/EN_ArchitectureA.png 800w, https:\/\/www.reersafety.cn\/wp-content\/uploads\/2022\/04\/EN_ArchitectureA-300x49.png 300w, https:\/\/www.reersafety.cn\/wp-content\/uploads\/2022\/04\/EN_ArchitectureA-768x126.png 768w, https:\/\/www.reersafety.cn\/wp-content\/uploads\/2022\/04\/EN_ArchitectureA-510x84.png 510w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/>\t\t\t\t\t\t\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\n<style>\n#image_996916085 {\n  width: 100%;\n}\n<\/style>\n\t<\/div>\n\t\n\n<p style=\"text-align: center;\">Fig. 17 &#8211; Basic subsystem architecture A<\/p>\n<p>Any dangerous failure of a subsystem element causes the loss of the safety function.<\/p>\n<p style=\"text-align: center;\"><span style=\"font-size: 130%; color: #333399;\"><span style=\"font-size: 75%;\">(1)<\/span>&nbsp; &nbsp; &nbsp;PFH = \u03bb<sub>De1<\/sub> + &#8230;.. + \u03bb<sub>Den<\/sub><\/span><\/p>\n<p style=\"text-align: right;\"><span style=\"font-size: 80%;\">Where:<\/span><br><span style=\"font-size: 80%;\">\u03bb<sub>Dei<\/sub> is the dangerous failure rate of an element of the single channel.<\/span><\/p>\n<div class=\"accordion\" rel=\"\">\n\n<div class=\"accordion-item\"><a href=\"#\" class=\"accordion-title plain\"><button class=\"toggle\"><i class=\"icon-angle-down\"><\/i><\/button><span>Comparison with EN ISO 13849-1<\/span><\/a><div class=\"accordion-inner\">\n\n<div class=\"row\"  id=\"row-1237939222\">\n\n\n\t<div id=\"col-156150896\" class=\"col medium-4 small-12 large-4\"  >\n\t\t<div class=\"col-inner\"  >\n\t\t\t\n\t\t\t\n\n<p>Cat. B (PLmax = b)&nbsp;<\/p>\n<p>Cat. 1 (PLmax = c)<\/p>\n\n\t\t<\/div>\n\t\t\t<\/div>\n\n\t\n\n\t<div id=\"col-20294099\" class=\"col medium-8 small-12 large-8\"  >\n\t\t<div class=\"col-inner\"  >\n\t\t\t\n\t\t\t\n\n\t<div class=\"img has-hover x md-x lg-x y md-y lg-y\" id=\"image_149270739\">\n\t\t\t\t\t\t\t\t<div class=\"img-inner dark\" >\n\t\t\t<img width=\"386\" height=\"107\" src=\"https:\/\/www.reersafety.cn\/wp-content\/uploads\/2021\/07\/CAT_B-1.png\" class=\"attachment-large size-large\" alt=\"\" decoding=\"async\" loading=\"lazy\" srcset=\"https:\/\/www.reersafety.cn\/wp-content\/uploads\/2021\/07\/CAT_B-1.png 386w, https:\/\/www.reersafety.cn\/wp-content\/uploads\/2021\/07\/CAT_B-1-300x83.png 300w\" sizes=\"(max-width: 386px) 100vw, 386px\" \/>\t\t\t\t\t\t\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\n<style>\n#image_149270739 {\n  width: 100%;\n}\n<\/style>\n\t<\/div>\n\t\n\n\n\t\t<\/div>\n\t\t\t<\/div>\n\n\t\n\n<\/div>\n\n<\/div><\/div>\n\n<\/div>\n\t<div id=\"gap-764394223\" class=\"gap-element clearfix\" style=\"display:block; height:auto;\">\n\t\t\n<style>\n#gap-764394223 {\n  padding-top: 30px;\n}\n<\/style>\n\t<\/div>\n\t\n\n<h4>Subsystem architecture B <br>HFT = 1 &#8211; Dual channel without diagnostic function<\/h4>\n\t<div class=\"img has-hover x md-x lg-x y md-y lg-y\" id=\"image_37745574\">\n\t\t\t\t\t\t\t\t<div class=\"img-inner dark\" style=\"margin:0px 0px 0px 200px;\">\n\t\t\t<img width=\"800\" height=\"218\" src=\"https:\/\/www.reersafety.cn\/wp-content\/uploads\/2022\/04\/EN_ArchitectureB.png\" class=\"attachment-large size-large\" alt=\"\" decoding=\"async\" loading=\"lazy\" srcset=\"https:\/\/www.reersafety.cn\/wp-content\/uploads\/2022\/04\/EN_ArchitectureB.png 800w, https:\/\/www.reersafety.cn\/wp-content\/uploads\/2022\/04\/EN_ArchitectureB-300x82.png 300w, https:\/\/www.reersafety.cn\/wp-content\/uploads\/2022\/04\/EN_ArchitectureB-768x209.png 768w, https:\/\/www.reersafety.cn\/wp-content\/uploads\/2022\/04\/EN_ArchitectureB-510x139.png 510w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/>\t\t\t\t\t\t\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\n<style>\n#image_37745574 {\n  width: 100%;\n}\n<\/style>\n\t<\/div>\n\t\n\n<p style=\"text-align: center;\">Fig. 18 &#8211; Basic subsystem architecture B<\/p>\n<p>A single failure of any subsystem element does not cause a loss of the safety function<\/p>\n<p style=\"text-align: center;\"><span style=\"font-size: 130%; color: #000080;\"><span style=\"font-size: 130%; color: #333399;\"><span style=\"font-size: 75%;\">(2)&nbsp; &nbsp; <\/span><\/span>PFH = (1 &#8211; \u03b2 )<sup>2<\/sup> x \u03bb<sub>De1<\/sub> x \u03bb<sub>De2<\/sub> x T<sub>1<\/sub> + \u03b2 x ( \u03bb<sub>De1<\/sub> + \u03bb<sub>De2<\/sub>) \/2<\/span><\/p>\n<p style=\"text-align: right;\"><span style=\"font-size: 80%;\">Where:<\/span><br><span style=\"font-size: 80%;\">\u03bbDe1 is the dangerous failure rate of an element of the first functional channel<\/span><br><span style=\"font-size: 80%;\">\u03bbDe2 is the dangerous failure rate of an element of the second functional channel<\/span><br><span style=\"font-size: 80%;\">T1 is the useful lifetime or the proof test interval, whichever is the smaller.In anycase not exceeding 20y<\/span><br><span style=\"font-size: 80%;\">\u03b2 is the susceptibility to common cause failures.<\/span><\/p>\n<p>No correspondence with the categories of EN ISO 13849-1<\/p>\n<h4>Subsystem architecture C:<br>HFT = 0 Single channel with a diagnostic function<\/h4>\n\t<div class=\"img has-hover x md-x lg-x y md-y lg-y\" id=\"image_857256561\">\n\t\t\t\t\t\t\t\t<div class=\"img-inner dark\" style=\"margin:0px 0px 0px 200px;\">\n\t\t\t<img width=\"800\" height=\"218\" src=\"https:\/\/www.reersafety.cn\/wp-content\/uploads\/2022\/04\/EN_ArchitectureC.png\" class=\"attachment-large size-large\" alt=\"\" decoding=\"async\" loading=\"lazy\" srcset=\"https:\/\/www.reersafety.cn\/wp-content\/uploads\/2022\/04\/EN_ArchitectureC.png 800w, https:\/\/www.reersafety.cn\/wp-content\/uploads\/2022\/04\/EN_ArchitectureC-300x82.png 300w, https:\/\/www.reersafety.cn\/wp-content\/uploads\/2022\/04\/EN_ArchitectureC-768x209.png 768w, https:\/\/www.reersafety.cn\/wp-content\/uploads\/2022\/04\/EN_ArchitectureC-510x139.png 510w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/>\t\t\t\t\t\t\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\n<style>\n#image_857256561 {\n  width: 100%;\n}\n<\/style>\n\t<\/div>\n\t\n\n<p style=\"text-align: center;\">Fig. 19 &#8211; Basic subsystem architecture C<\/p>\n<p>Any undetected dangerous fault of a subsystem element of the functional channel leads to the loss of the safety function. When a dangerous fault of a subsystem element of the functional channel is detected by the diagnostic function, the diagnostic function itself initiates a fault reaction.<\/p>\n<div class=\"row\"  id=\"row-1432303175\">\n\n\n\t<div id=\"col-900573643\" class=\"col medium-8 small-12 large-8\"  >\n\t\t<div class=\"col-inner\"  >\n\t\t\t\n\t\t\t\n\n\t<div class=\"img has-hover x md-x lg-x y md-y lg-y\" id=\"image_1724267999\">\n\t\t\t\t\t\t\t\t<div class=\"img-inner dark\" >\n\t\t\t<img width=\"1020\" height=\"499\" src=\"https:\/\/www.reersafety.cn\/wp-content\/uploads\/2022\/05\/EN_formula-arcC-1024x501.png\" class=\"attachment-large size-large\" alt=\"\" decoding=\"async\" loading=\"lazy\" srcset=\"https:\/\/www.reersafety.cn\/wp-content\/uploads\/2022\/05\/EN_formula-arcC-1024x501.png 1024w, https:\/\/www.reersafety.cn\/wp-content\/uploads\/2022\/05\/EN_formula-arcC-300x147.png 300w, https:\/\/www.reersafety.cn\/wp-content\/uploads\/2022\/05\/EN_formula-arcC-768x376.png 768w, https:\/\/www.reersafety.cn\/wp-content\/uploads\/2022\/05\/EN_formula-arcC-1536x751.png 1536w, https:\/\/www.reersafety.cn\/wp-content\/uploads\/2022\/05\/EN_formula-arcC-2048x1001.png 2048w, https:\/\/www.reersafety.cn\/wp-content\/uploads\/2022\/05\/EN_formula-arcC-510x249.png 510w\" sizes=\"(max-width: 1020px) 100vw, 1020px\" \/>\t\t\t\t\t\t\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\n<style>\n#image_1724267999 {\n  width: 100%;\n}\n<\/style>\n\t<\/div>\n\t\n\n\n\t\t<\/div>\n\t\t\t<\/div>\n\n\t\n\n\t<div id=\"col-482192729\" class=\"col medium-4 small-12 large-4\"  >\n\t\t<div class=\"col-inner\"  >\n\t\t\t\n\t\t\t\n\n<p><span style=\"font-size: 80%;\">Where:<br><\/span><span style=\"font-size: 80%;\">T<sub>1<\/sub> is the useful lifetime or the proof test interval, whichever is the smaller. In any case not exceeding 20y<br><\/span><span style=\"font-size: 80%;\">\u03bb<sub>Dei<\/sub> is the dangerous failure rate of element ei within the single functional channel.<\/span><br><span style=\"font-size: 80%;\">n is the number of elements of the single functional channel.<br><\/span><span style=\"font-size: 80%;\">\u03bb<sub>DFHj<\/sub> = \u03bb<sub>DFDj<\/sub> + \u03bb<sub>DFRj<\/sub> is the failure rate of the elements number j within the single channel that realizes the fault handling function.<br><\/span><span style=\"font-size: 80%;\">m is the number of elements of the single channel that realizes the fault handling function(s)<br><\/span><span style=\"font-size: 80%;\">DC<sub>i<\/sub> is the diagnostic coverage for element ei of the single functional channel.<br><\/span><span style=\"font-size: 80%;\">\u03b2 is the susceptibility to common cause failures of the functional channel and of the diagnostic channel.<\/span><\/p>\n\n\t\t<\/div>\n\t\t\t<\/div>\n\n\t\n\n<\/div>\n<p>If the diagnostic function is performed by a separate subsystem within the SCS, <\/p>\n\t<div class=\"img has-hover x md-x lg-x y md-y lg-y\" id=\"image_1290900187\">\n\t\t\t\t\t\t\t\t<div class=\"img-inner dark\" style=\"margin:0px 0px 0px 160px;\">\n\t\t\t<img width=\"800\" height=\"218\" src=\"https:\/\/www.reersafety.cn\/wp-content\/uploads\/2022\/04\/EN_ArchitectureC_02.png\" class=\"attachment-large size-large\" alt=\"\" decoding=\"async\" loading=\"lazy\" srcset=\"https:\/\/www.reersafety.cn\/wp-content\/uploads\/2022\/04\/EN_ArchitectureC_02.png 800w, https:\/\/www.reersafety.cn\/wp-content\/uploads\/2022\/04\/EN_ArchitectureC_02-300x82.png 300w, https:\/\/www.reersafety.cn\/wp-content\/uploads\/2022\/04\/EN_ArchitectureC_02-768x209.png 768w, https:\/\/www.reersafety.cn\/wp-content\/uploads\/2022\/04\/EN_ArchitectureC_02-510x139.png 510w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/>\t\t\t\t\t\t\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\n<style>\n#image_1290900187 {\n  width: 100%;\n}\n<\/style>\n\t<\/div>\n\t\n\n<p style=\"text-align: center;\">Fig. 20 &#8211; Separate subsystem within the SCS&nbsp;<\/p>\n<p>Then<\/p>\n<p style=\"text-align: center;\"><span style=\"font-size: 130%; color: #333399;\">\u03bb<sub>D FH j<\/sub> = 0<\/span><\/p>\n<p>\u03b2 &lt; 2%- due to the separation of the two subsystems and the equations simplify to<\/p>\n<p style=\"text-align: center;\"><span style=\"font-size: 130%; color: #000080;\"><span style=\"font-size: 75%;\">(6)<\/span>&nbsp; &nbsp;PFH = ( 1- DC<sub>1<\/sub> ) x \u03bb<sub>De1<\/sub> + &#8230; + ( 1 &#8211; DC<sub>n<\/sub> ) x \u03bb<sub>Den<\/sub><\/span><\/p>\n<p>The test rate of the diagnostic functions must be at least a factor of 100 higher than the demand rate of the safety function and the time needed for the fault reaction must be short to bring the system to a safe state before a hazardous event occurs.<\/p>\n<p>Alternatively, the test can be performed periodically. In this case the sum of the test interval, plus the time needed to detect a fault plus the time needed to bring the system to a safe state is shorter than the process safety time.<\/p>\n<p>The test can also be performed immediately upon any demand of the safety function. In this case the time needed to detect a fault and to bring the system to a safe state must be shorter than the process safety time.<\/p>\n<div class=\"accordion\" rel=\"\">\n\n<div class=\"accordion-item\"><a href=\"#\" class=\"accordion-title plain\"><button class=\"toggle\"><i class=\"icon-angle-down\"><\/i><\/button><span>Comparison with EN ISO 13849-1<\/span><\/a><div class=\"accordion-inner\">\n\n<div class=\"row\"  id=\"row-1550235095\">\n\n\n\t<div id=\"col-596076510\" class=\"col medium-4 small-12 large-4\"  >\n\t\t<div class=\"col-inner\"  >\n\t\t\t\n\t\t\t\n\n<p>Cat. 2 (PLmax = d)<\/p>\n\n\t\t<\/div>\n\t\t\t<\/div>\n\n\t\n\n\t<div id=\"col-1951914422\" class=\"col medium-8 small-12 large-8\"  >\n\t\t<div class=\"col-inner\"  >\n\t\t\t\n\t\t\t\n\n\t<div class=\"img has-hover x md-x lg-x y md-y lg-y\" id=\"image_61684306\">\n\t\t\t\t\t\t\t\t<div class=\"img-inner dark\" >\n\t\t\t<img width=\"386\" height=\"212\" src=\"https:\/\/www.reersafety.cn\/wp-content\/uploads\/2021\/07\/CAT_2.png\" class=\"attachment-large size-large\" alt=\"\" decoding=\"async\" loading=\"lazy\" srcset=\"https:\/\/www.reersafety.cn\/wp-content\/uploads\/2021\/07\/CAT_2.png 386w, https:\/\/www.reersafety.cn\/wp-content\/uploads\/2021\/07\/CAT_2-300x165.png 300w\" sizes=\"(max-width: 386px) 100vw, 386px\" \/>\t\t\t\t\t\t\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\n<style>\n#image_61684306 {\n  width: 100%;\n}\n<\/style>\n\t<\/div>\n\t\n\n\n\t\t<\/div>\n\t\t\t<\/div>\n\n\t\n\n<\/div>\n\n<\/div><\/div>\n\n<\/div>\n<h4>Subsystem architecture D<br>HFT = 1 Dual channel with a diagnostic function<\/h4>\n\t<div class=\"img has-hover x md-x lg-x y md-y lg-y\" id=\"image_655319475\">\n\t\t\t\t\t\t\t\t<div class=\"img-inner dark\" style=\"margin:0px 0px 0px 160px;\">\n\t\t\t<img width=\"800\" height=\"273\" src=\"https:\/\/www.reersafety.cn\/wp-content\/uploads\/2022\/04\/EN_ArchitectureD.png\" class=\"attachment-large size-large\" alt=\"\" decoding=\"async\" loading=\"lazy\" srcset=\"https:\/\/www.reersafety.cn\/wp-content\/uploads\/2022\/04\/EN_ArchitectureD.png 800w, https:\/\/www.reersafety.cn\/wp-content\/uploads\/2022\/04\/EN_ArchitectureD-300x102.png 300w, https:\/\/www.reersafety.cn\/wp-content\/uploads\/2022\/04\/EN_ArchitectureD-768x262.png 768w, https:\/\/www.reersafety.cn\/wp-content\/uploads\/2022\/04\/EN_ArchitectureD-510x174.png 510w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/>\t\t\t\t\t\t\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\n<style>\n#image_655319475 {\n  width: 100%;\n}\n<\/style>\n\t<\/div>\n\t\n\n<p style=\"text-align: center;\">Fig. 21 &#8211; Subsystem architecture D<\/p>\n<p>For subsystem elements of the same design:<\/p>\n<p style=\"text-align: center;\"><span style=\"font-size: 130%; color: #000080;\"><span style=\"font-size: 75%;\">(7)<\/span>&nbsp; &nbsp; PFH = (1-\u03b2 ) <sup>2<\/sup> x [DC x T<sub>2<\/sub> + (1-DC) x T<sub>1<\/sub> ] x \u03bb<sub>De2<\/sub> + \u03b2 x \u03bb<sub>De<\/sub><\/span><\/p>\n<p>For subsystem elements of different design<\/p>\n<p style=\"text-align: center;\"><span style=\"font-size: 130%; color: #000080;\">&nbsp; <span style=\"font-size: 75%;\">(8)&nbsp; &nbsp; <\/span>PFH = (1-\u03b2)<sup>2<\/sup> x [\u03bb<sub>De1<\/sub> x \u03bb<sub>De2<\/sub> x (DC<sub>1<\/sub> + DC<sub>2<\/sub> ) x T<sub>2<\/sub> \/2 + \u03bb<sub>De1<\/sub> x \u03bb<sub>De2<\/sub> x (2-DC<sub>1<\/sub>-DC<sub>2<\/sub> ) x T<sub>2<\/sub> \/2 +\u03b2 x (\u03bb<sub>De1 <\/sub>x \u03bb<sub>De2<\/sub>) \/ 2<\/span><\/p>\n<p style=\"padding-left: 160px; text-align: right;\"><span style=\"font-size: 80%;\">Where<\/span><br><span style=\"font-size: 80%;\">T<sub>2<\/sub> is the diagnostic test interval.<\/span><br><span style=\"font-size: 80%;\">T<sub>1<\/sub> is the useful lifetime or the proof test interval, whichever is the smaller. In any case not exceeding 20y <\/span><br><span style=\"font-size: 80%;\">\u03b2 is the susceptibility to common cause failures<\/span><br><span style=\"font-size: 80%;\">\u03bb<sub>De1<\/sub> is the dangerous failure rate of subsystem element 1<\/span><br><span style=\"font-size: 80%;\">\u03bb<sub>De2<\/sub> is the dangerous failure rate of subsystem element 2<\/span><br><span style=\"font-size: 80%;\">DC<sub>1<\/sub> is the diagnostic coverage for subsystem element 1<\/span><br><span style=\"font-size: 80%;\">DC<sub>2<\/sub> is the diagnostic coverage for subsystem element 2<\/span><\/p>\n<p style=\"text-align: left;\">A single dangerous fault of any subsystem element does not cause a loss of the safety function. Where a fault of a subsystem element is detected by the diagnostic function, the diagnostic function itself initiates a fault reaction.<\/p>\n<p style=\"text-align: left;\">The diagnostic function is performed continuously, and the sum of the diagnostic test interval and the time needed to perform the specified fault reaction, in order to bring the system to a safe state, must be shorter than the process safety time.<\/p>\n<div class=\"accordion\" rel=\"\">\n\n<div class=\"accordion-item\"><a href=\"#\" class=\"accordion-title plain\"><button class=\"toggle\"><i class=\"icon-angle-down\"><\/i><\/button><span>Comparison with EN ISO 13849-1<\/span><\/a><div class=\"accordion-inner\">\n\n<div class=\"row\"  id=\"row-669530002\">\n\n\n\t<div id=\"col-822908203\" class=\"col medium-4 small-12 large-4\"  >\n\t\t<div class=\"col-inner\"  >\n\t\t\t\n\t\t\t\n\n<p>Cat. 3 (PLmax = d)<\/p>\n<p>Cat. 4 (PL = e)<\/p>\n\n\t\t<\/div>\n\t\t\t<\/div>\n\n\t\n\n\t<div id=\"col-634925497\" class=\"col medium-8 small-12 large-8\"  >\n\t\t<div class=\"col-inner\"  >\n\t\t\t\n\t\t\t\n\n\t<div class=\"img has-hover x md-x lg-x y md-y lg-y\" id=\"image_1134240382\">\n\t\t\t\t\t\t\t\t<div class=\"img-inner dark\" >\n\t\t\t<img width=\"386\" height=\"212\" src=\"https:\/\/www.reersafety.cn\/wp-content\/uploads\/2021\/07\/CAT_3-1.png\" class=\"attachment-large size-large\" alt=\"\" decoding=\"async\" loading=\"lazy\" srcset=\"https:\/\/www.reersafety.cn\/wp-content\/uploads\/2021\/07\/CAT_3-1.png 386w, https:\/\/www.reersafety.cn\/wp-content\/uploads\/2021\/07\/CAT_3-1-300x165.png 300w\" sizes=\"(max-width: 386px) 100vw, 386px\" \/>\t\t\t\t\t\t\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\n<style>\n#image_1134240382 {\n  width: 100%;\n}\n<\/style>\n\t<\/div>\n\t\n\n\n\t\t<\/div>\n\t\t\t<\/div>\n\n\t\n\n<\/div>\n\n<\/div><\/div>\n\n<\/div>\n<h3>Step two &#8211; determination of the parameters \u03bb, \u03bb<sub>d<\/sub>, \u03bb<sub>s<\/sub>, \u03bb<sub>dd<\/sub>, \u03bb<sub>du<\/sub><\/h3>\n<h4>General considerations<\/h4>\n<h4>For purpose of determining the failure rates of subsystem elements, the following fault criteria shall be considered:<\/h4>\n<ul>\n<li>If, because of a fault, further components fail, the first fault together with all following faults shall be considered as a single fault<\/li>\n<li>Two or more separate faults having a common cause shall be considered as a single fault<\/li>\n<li>The simultaneous occurrence of two or more faults having separate causes is considered highly unlikely and therefore need not be considered<\/li>\n<li>Certain faults may be excluded, provided that the likelihood of them occurring is very low in relation to the safety integrity requirements of the subsystem<\/li>\n<\/ul>\n<p>A basis for fault consideration is given in ISO 13849-2 (Annexes A to D).<\/p>\n<p>For the list of components\/elements included in Annexes A to D, are provided:<\/p>\n<ul>\n<li>The faults to be considered<\/li>\n<li>The permitted fault exclusions, considering environmental and application aspects and conditions under which fault exclusion are permitted<\/li>\n<\/ul>\n<h4>Electrical\/electronic components<\/h4>\n<h5>Determination of \u03bb<\/h5>\n<p>In general, for this type of components the manufacturer does not provide reliability data because they strongly depend on how the component is used and on the characteristics of the environment.<\/p>\n<p>Reliability data can be found in the set of standards SN 29500 or in the MIL-HDBK 217F or OREDA 2015 or even in the EXIDA reliability handbook.<\/p>\n<p>Failure rates are expressed in FIT (failure in time).<br>1 FIT = 1 x 10<sup>-9<\/sup> hours<\/p>\n<p>FIT values are given at reference operating conditions (voltage, current, dissipation etc..) and at the ambient temperature of 40 \u00b0 C. The value given is \u03bb<sub>ref<\/sub> in FIT.<br>Example: for a metal fil resistor is \u03bb<sub>ref<\/sub> = 0,2 FIT<\/p>\n<p>If the actual operating conditions are different respect to the reference ones, it is necessary to make corrections using formulas that are provided in the same document for each family of components.<\/p>\n<h5>Determination of \u03bb<sub>d<\/sub> and \u03bb<sub>s<\/sub><\/h5>\n<p>After having determined \u03bb for each subsystem element (e.g. derived by one of the data base mentioned), the different failure modes of the subsystem element should be considered. It is typically assumed that not all failures modes lead to a dangerous failure. To determine the failures to consider for each element and to decide whether they are safe failures or dangerous failures, an analysis technique, such as failure mode and effect analysis (FMEA) or fault tree analysis (FTA) should be carried out.<\/p>\n<p>In order to undertake this technical analysis, the following information is necessary:<\/p>\n<ul>\n<li>The hardware schematics of the subsystem describing each component and interconnections between components<\/li>\n<li>For each component the failure modes and associated percentages of the total failure probability<\/li>\n<\/ul>\n<p>To help the designer, several recognised industry sources are available where to find a list of failure modes together with the failure mode ratio.<\/p>\n<div class=\"accordion\" rel=\"\">\n\n<div class=\"accordion-item\"><a href=\"#\" class=\"accordion-title plain\"><button class=\"toggle\"><i class=\"icon-angle-down\"><\/i><\/button><span>Example of typical failure modes and failure ratio (%) of some electronic components<\/span><\/a><div class=\"accordion-inner\">\n\n<div class=\"row\"  id=\"row-1337064360\">\n\n\n\t<div id=\"col-61287163\" class=\"col medium-6 small-12 large-6\"  >\n\t\t<div class=\"col-inner\"  >\n\t\t\t\n\t\t\t\n\n\t<div class=\"img has-hover x md-x lg-x y md-y lg-y\" id=\"image_216718876\">\n\t\t\t\t\t\t\t\t<div class=\"img-inner dark\" >\n\t\t\t<img width=\"800\" height=\"682\" src=\"https:\/\/www.reersafety.cn\/wp-content\/uploads\/2022\/04\/Failure_ratio.png\" class=\"attachment-large size-large\" alt=\"\" decoding=\"async\" loading=\"lazy\" srcset=\"https:\/\/www.reersafety.cn\/wp-content\/uploads\/2022\/04\/Failure_ratio.png 800w, https:\/\/www.reersafety.cn\/wp-content\/uploads\/2022\/04\/Failure_ratio-300x256.png 300w, https:\/\/www.reersafety.cn\/wp-content\/uploads\/2022\/04\/Failure_ratio-768x655.png 768w, https:\/\/www.reersafety.cn\/wp-content\/uploads\/2022\/04\/Failure_ratio-510x435.png 510w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/>\t\t\t\t\t\t\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\n<style>\n#image_216718876 {\n  width: 100%;\n}\n<\/style>\n\t<\/div>\n\t\n\n\n\t\t<\/div>\n\t\t\t<\/div>\n\n\t\n\n\t<div id=\"col-85766526\" class=\"col medium-6 small-12 large-6\"  >\n\t\t<div class=\"col-inner\"  >\n\t\t\t\n\t\t\t\n\n<p>The process should be as follows:<\/p>\n<p>Categorize each failure mode according to whether it leads to<\/p>\n<ul>\n<li>A safe failure (fault has no influence or the fault leads to a safe state without a diagnostic measure<\/li>\n<li>A dangerous failure (leads without diagnostic to a dangerous malfunction)<\/li>\n<li>Components that are not a part of a safety function or of a diagnostic measure, and that do not have any influence on the safety function are not considered.<\/li>\n<\/ul>\n<p>Doing this analysis, do not consider the effects of diagnostic techniques implemented! The effects of diagnostics are considered separately; see the clause: computation of DC.<\/p>\n<p>From the estimate of \u03bb of each component and the categorization of the failures (safe, dangerous) calculate the probability of safe failure (\u03bbS) and the probability of dangerous failure (\u03bb<sub>D<\/sub>)<\/p>\n\n\t\t<\/div>\n\t\t\t<\/div>\n\n\t\n\n<\/div>\n<div class=\"row\"  id=\"row-2083636805\">\n\n\n\t<div id=\"col-920837451\" class=\"col small-12 large-12\"  >\n\t\t<div class=\"col-inner\"  >\n\t\t\t\n\t\t\t\n\n<p>Example, just to describe how to apply the method:<\/p>\n<p>Let&#8217;s take for ease of computation the case of two components, a ceramic capacitor and a metal film resistor that are part of the components of a functional channel.<\/p>\n<p>For the capacitor we get from SN 29500 a failure rate of 2 FIT (\u03bb = 2 x 10<sup>-9<\/sup>). From the analysis of the circuit, it comes that a short circuit of the capacitor or a drift leads to a dangerous failure, while an open circuit leads to a safe failure.<\/p>\n<p>For the resistor we get from SN 29500 a failure rate of 0,2 FIT (\u03bb = 0,2 x 10<sup>-9<\/sup>). From the analysis of the circuit, it comes that an open circuit of the metal film resistor or a drift leads to a dangerous failure, a short circuit leads to a safe failure, but this type of failure for a metal film resistor is excluded, due to the technology. (see ISO 13849-2).<\/p>\n<p>For the capacitor:<br>\u03bb<sub>Scap<\/sub> = 2 x 10<sup>-9<\/sup> x 0,1 = 2 x 10<sup>-10<\/sup> <br>\u03bb<sub>Dcap<\/sub> = 2 x10<sup>-9<\/sup> x (0,7 + 0,2) = 1,8 x 10<sup>-9<\/sup><\/p>\n<p>For the resistor:<br>\u03bb<sub>Dres<\/sub> = 0,2 x10<sup>-9<\/sup> x (0,6 + 0,4) = 0,2 x 10<sup>-9<\/sup><\/p>\n<p>Obviously, the same calculations must be carried out for all components of the channel.<\/p>\n<p>The overall values of \u03bb<sub>S<\/sub> and \u03bb<sub>D<\/sub> for the channel are then derived by summing the values of \u03bb<sub>S<\/sub> and \u03bb<sub>D<\/sub> of each components.<\/p>\n<p>Limited to the components of our example:<\/p>\n<p>\u03bb<sub>Schannnel<\/sub> = 2 x 10<sup>-10<\/sup> <br>\u03bb<sup>Dchanne<\/sup>l = 1,8 x 10<sup>-9<\/sup> + 0,2 x 10<sup>-9<\/sup> = 2 x 10<sup>-9<\/sup><\/p>\n<p>Alternative method:<\/p>\n<p>If no specific information is available concerning the failure modes, 50 % of the failures can be estimated as dangerous, in this case \u03bbS and \u03bbD are approximated to:<\/p>\n<p>For the capacitor:<br>\u03bb<sub>Scap<\/sub> = 2 x 10<sup>-9<\/sup> x 0,5 = 1 x 10<sup>-9<\/sup> <br>\u03bb<sub>Dcap<\/sub> = 2 x10<sup>-9<\/sup> x (0,5) = 1 x 10<sup>-9<\/sup><\/p>\n<p>For the resistor:<br>The technology used excludes the fault of short circuit; if no additional information is available, all the other faults must be considered dangerous:<br>\u03bb<sub>Dres<\/sub> = 0,2 x10<sup>-9<\/sup><\/p>\n\n\t\t<\/div>\n\t\t\t<\/div>\n\n\t\n\n<\/div>\n\n<\/div><\/div>\n\n<\/div>\n<h4>Determination of \u03bb<sub>d<\/sub> for electromechanical components<\/h4>\n<p>For electromechanical, pneumatic and mechanical components subject to wear (eg. relay and solenoid valves) the failure rate increases with the number of cycles processed.<\/p>\n<p>For this reason, their reliability is usually related to the number of cycles performed and not to the time for which they have been working.<\/p>\n<p>The parameter given by the manufacturer is the B10 or the B10d expressed in numbers of operations; this is the number of operations after which failures occur in 10% of the components tested (endurance test under specified load).<\/p>\n<p>If manufacturer data are not available, for a list of hydraulic, pneumatic, and electromechanical components, it is also possible to use the B10d or MTTFd values given in Table C.1 of the standard. The use of these values is allowed only under the following conditions:<\/p>\n<ul>\n<li>Basic and well-tried safety principles according to ISO 13849-2 have been used for the design of the component (confirmed in the data sheet of the component)<\/li>\n<li>The manufacturer of the component specifies that the component can be used for safety related applications<\/li>\n<li>The subsystem designer confirm that the component is utilized fulfilling basic and well-tried safety principles according to ISO 13849-2.<\/li>\n<\/ul>\n<p>Hydraulic components listed in Table C.1 are characterized with MTTFd. For the conversion of MTTFd into a \u03bbd value the following basic equation can be used:<\/p>\n<p style=\"text-align: center;\"><span style=\"font-size: 130%; color: #333399;\"><span style=\"font-size: 75%;\">(9)&nbsp;<\/span> &nbsp;\u03bb<sub>d<\/sub>= 0.1 \/ MTTF<sub>D x 8760 h\/a<\/sub><\/span><\/p>\n<p>Note: MTTF<sub>d<\/sub> is given in years; one year is approximatively 8760 hours<br>For the conversion of B<sub>10d<\/sub> into a \u03bb<sub>d<\/sub> value the following equation can be used:<\/p>\n<p style=\"text-align: center;\"><span style=\"font-size: 130%; color: #333399;\"><span style=\"font-size: 75%;\">(10)&nbsp; &nbsp; &nbsp;<\/span>\u03bb<sub>d<\/sub>= (0.1 X C) \/ B<sub>10d<\/sub><\/span><\/p>\n<p style=\"padding-left: 520px; text-align: right;\"><span style=\"font-size: 80%;\">Where:<\/span><br><span style=\"font-size: 80%;\">C = nop \/ 8760 (mean number of operations per hour)<\/span><\/p>\n<p>The operating time of the component must then be limited to T10d which is the average time within which 10% of the components undergoes a dangerous failure.<\/p>\n<p style=\"text-align: center;\"><span style=\"font-size: 130%; color: #333399;\">&nbsp; <span style=\"font-size: 75%;\">(11)&nbsp; &nbsp; <\/span>T<sub>10d<\/sub> = 0,1 \/ \u03bb<sub>d<\/sub><\/span><\/p>\n<p>If only B<sub>10<\/sub> is available (the number of operations after which 10% of the components under test undertake a failure), B<sub>10d<\/sub> can be derived knowing the ratio of dangerous failures (RDF)<\/p>\n<p style=\"text-align: center;\"><span style=\"font-size: 130%; color: #333399;\"><span style=\"font-size: 75%;\">(12)&nbsp; &nbsp; <\/span>B<sub>10d<\/sub> = B<sub>10<\/sub> \/ RDF<\/span><\/p>\n<p>If no other information is available, RDF is estimated as 0,5 (50 % dangerous failure).<\/p>\n<div class=\"accordion\" rel=\"\">\n\n<div class=\"accordion-item\"><a href=\"#\" class=\"accordion-title plain\"><button class=\"toggle\"><i class=\"icon-angle-down\"><\/i><\/button><span>Example<\/span><\/a><div class=\"accordion-inner\">\n\n<p>For a low duty relay the manufacturer specifies a B<sub>10<\/sub> = 10 M cycles when used at small load (20% of the nominal load).<\/p>\n<p>The relay is used on a machine operated as follows:<br>220 days\/year; 16 h\/day (two shifts); machine cycle: 1 min (60 cycles\/h)<\/p>\n<p>From the above formulas it comes:<br>Mean number of annual operations nop = 211200<br>Mean operation per hour C = 24,11 \/h <br>No information is given regarding B<sub>10d<\/sub>, therefore is assumed B<sub>10d<\/sub> = 2 x B<sub>10<\/sub><br>then:&nbsp;\u03bb<sub>d<\/sub> = 0,1* 24,11 \/ 20*10<sup>6<\/sup> = 1,2*10<sup>-7<\/sup>\/h<\/p>\n<p>A more precise analysis can be carried out by retrieving from a reliability data base the list of failure modes and failure mode ratios of the relay and analysing, for the given application, which are the dangerous failures:<\/p>\n<p>Example:<\/p>\n<table style=\"border-collapse: collapse; width: 66.9922%; height: 277px;\">\n<tbody>\n<tr style=\"height: 86px;\">\n<td style=\"width: 13.6719%; height: 86px;\"><strong>Component<\/strong><\/td>\n<td style=\"width: 47.6984%; height: 86px;\"><strong>Failure mode<\/strong><\/td>\n<td style=\"width: 12.0951%; height: 86px;\" colspan=\"2\"><strong>Typical failure mode ratios %<\/strong><\/td>\n<\/tr>\n<tr style=\"height: 64px;\">\n<td style=\"width: 13.6719%; height: 64px;\" rowspan=\"7\">Relay<\/td>\n<td style=\"width: 47.6984%; height: 64px;\">All contacts remai in the energized position when the coil is de-energized<\/td>\n<td style=\"width: 3.79009%; height: 64px;\">25<\/td>\n<td style=\"width: 8.30505%; background-color: #ff0000; height: 64px;\">D<\/td>\n<\/tr>\n<tr style=\"height: 64px;\">\n<td style=\"width: 47.6984%; height: 64px;\">All contacts remai in the de-energized position when the coil is energized<\/td>\n<td style=\"width: 3.79009%; height: 64px;\">25<\/td>\n<td style=\"width: 8.30505%; background-color: #00ff4c; height: 64px;\">S<\/td>\n<\/tr>\n<tr style=\"height: 21px;\">\n<td style=\"width: 47.6984%; height: 21px;\">Contact will not open<\/td>\n<td style=\"width: 3.79009%; height: 21px;\">10<\/td>\n<td style=\"width: 8.30505%; height: 21px; background-color: #fc0000;\">D<\/td>\n<\/tr>\n<tr style=\"height: 21px;\">\n<td style=\"width: 47.6984%; height: 21px;\">Contact will not close<\/td>\n<td style=\"width: 3.79009%; height: 21px;\">10<\/td>\n<td style=\"width: 8.30505%; height: 21px; background-color: #03ff18;\">S<\/td>\n<\/tr>\n<tr style=\"height: 21px;\">\n<td style=\"width: 47.6984%; height: 21px;\">Simultaneous short circuit between three contacxts of a change-over contact<\/td>\n<td style=\"width: 3.79009%; height: 21px;\">10<\/td>\n<td style=\"width: 8.30505%; height: 21px; background-color: #ff0000;\">D<\/td>\n<\/tr>\n<tr>\n<td style=\"width: 47.6984%;\">Simultaneous closing of normally open and normally closed contact<\/td>\n<td style=\"width: 3.79009%;\">10<\/td>\n<td style=\"width: 8.30505%; background-color: #ff0000;\">D<\/td>\n<\/tr>\n<tr>\n<td style=\"width: 47.6984%;\">Shor circuit between two pairs of contacts and\/or between contact and coil terminal<\/td>\n<td style=\"width: 3.79009%;\">10<\/td>\n<td style=\"width: 8.30505%; background-color: #ff0000;\">D<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>Ratio of dangerous failures (RDF) = 65% <br>From equation : B<sub>10d<\/sub> = 10M \/ 0,65 = 15,38 M operations<br>Then \u03bb<sub>d<\/sub> = 0,1* 24,11 \/ 15,38*10<sup>6<\/sup> = 1,57*10<sup>-7<\/sup>\/h<\/p>\n\n<\/div><\/div>\n\n<\/div>\n<h3>Step 3 &#8211; Determination of Diagnostic Coverage (DC) and of the parameters \u03bb<sub>dd<\/sub> and \u03bb<sub>du<\/sub><\/h3>\n<p>Assuming that<\/p>\n<ul>\n<li>A failure can always happen (otherwise there would be no reason to define \u03bb)<\/li>\n<li>Is not possible to detect all faults because the mechanisms for the detection of faults are not all equally effective and immediate (for some faults may take longer)<\/li>\n<li>But taking appropriate diagnostic measures most of the dangerous faults can be detected<\/li>\n<\/ul>\n<p>it is possible to define a parameter DC which gives an estimate of the efficiency of the diagnostic measure implemented.<\/p>\n<p>DC is defined as the ratio between the failure rate of dangerous failures detected (\u03bbdd) compared to all dangerous failures detected and not detected (\u03bb<sub>d<\/sub>).<\/p>\n<p style=\"text-align: center;\"><span style=\"font-size: 130%; color: #333399;\"><span style=\"font-size: 75%;\">(13)&nbsp; &nbsp; <\/span>DC = \u03bb<sub>dd<\/sub> \/ \u03bb<sub>d<\/sub><\/span><\/p>\n<p>Calling \u03bb<sub>du<\/sub> the fraction of dangerous failures that remain undetected it comes that<\/p>\n<p style=\"text-align: center;\"><span style=\"font-size: 130%; color: #333399;\"><span style=\"font-size: 75%;\">(14)&nbsp; &nbsp; &nbsp;<\/span>\u03bb<sub>d<\/sub> = \u03bb<sub>dd<\/sub> + \u03bb<sub>du<\/sub><\/span><\/p>\n<p>And:<\/p>\n<p style=\"text-align: center;\"><span style=\"font-size: 130%; color: #333399;\"><span style=\"font-size: 75%;\">(15)&nbsp; &nbsp; &nbsp;<\/span>\u03bb<sub>dd<\/sub> = \u03bb<sub>d<\/sub> x DC<\/span><br><span style=\"font-size: 130%; color: #333399;\"><span style=\"font-size: 75%;\">(16)&nbsp; &nbsp; &nbsp;<\/span>\u03bb<sub>du<\/sub> = \u03bb<sub>d<\/sub> x (1- DC)<\/span><\/p>\n<p>IEC 62061 provides a list of different diagnostic techniques in Annex D and for each of them a parameter DC is given representing the fraction of dangerous failures that can be detected by the application of that diagnostic technique.<\/p>\n<p>DC range is from 0% to 99%<br>DC = 0% representing no dangerous fault is detected <br>DC = 99% representing very high fraction of dangerous faults detected<\/p>\n<p>The designer must select for each subsystem element, the diagnostic technique that would be better suited to its application (for input signals, for processing logic, for the outputs) and at the same time ensuring the DC level needed.<\/p>\n<p>Example: if the diagnostic measure implemented for the control of dangerous failures of the relay of the previous example is implemented by monitoring the functioning of the relay by a mechanically linked NC contact, from Table D.1 it follows DC = 99%:<\/p>\n<p>Then<br>\u03bb<sub>dd<\/sub> = 1,2 x 10<sup>-7<\/sup> x 0,99 = 1,188 x 10<sup>-7<\/sup><br>\u03bb<sub>du<\/sub> = 1,2 x 10<sup>-7<\/sup> x 0,01 = 1,2 x 10<sup>-9<\/sup><\/p>\n<p>The overall Diagnostic coverage DC of a subsystem is:<\/p>\n<div class=\"row\"  id=\"row-861224184\">\n\n\n\t<div id=\"col-434789534\" class=\"col medium-3 small-12 large-3\"  >\n\t\t<div class=\"col-inner\"  >\n\t\t\t\n\t\t\t\n\n\t<div class=\"img has-hover x md-x lg-x y md-y lg-y\" id=\"image_2006751083\">\n\t\t\t\t\t\t\t\t<div class=\"img-inner dark\" >\n\t\t\t<img width=\"633\" height=\"425\" src=\"https:\/\/www.reersafety.cn\/wp-content\/uploads\/2022\/05\/formula-sommatoria.png\" class=\"attachment-large size-large\" alt=\"\" decoding=\"async\" loading=\"lazy\" srcset=\"https:\/\/www.reersafety.cn\/wp-content\/uploads\/2022\/05\/formula-sommatoria.png 633w, https:\/\/www.reersafety.cn\/wp-content\/uploads\/2022\/05\/formula-sommatoria-300x201.png 300w, https:\/\/www.reersafety.cn\/wp-content\/uploads\/2022\/05\/formula-sommatoria-510x342.png 510w\" sizes=\"(max-width: 633px) 100vw, 633px\" \/>\t\t\t\t\t\t\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\n<style>\n#image_2006751083 {\n  width: 96%;\n}\n<\/style>\n\t<\/div>\n\t\n\n\n\t\t<\/div>\n\t\t\t<\/div>\n\n\t\n\n\t<div id=\"col-1046252184\" class=\"col medium-8 small-12 large-8\"  >\n\t\t<div class=\"col-inner\"  >\n\t\t\t\n\t\t\t\n\n<p><span style=\"font-size: 80%;\">where <\/span><br><span style=\"font-size: 80%;\">\u2211 \u03bbdd is the sum of the rate of dangerous failures detected of all subsystem elements and <\/span><br><span style=\"font-size: 80%;\">\u2211 \u03bbd is the sum of the rate of dangerous failures of all subsystem elements<\/span> <\/p>\n\n\t\t<\/div>\n\t\t\t<\/div>\n\n\t\n\n<\/div>\n<h4>Realization of diagnostic functions<\/h4>\n<p>The diagnostic functions are considered as separate functions that may have also a different structure than the SCS and may be performed by:<\/p>\n<ol style=\"list-style-type: lower-alpha;\">\n<li>The same subsystem which requires diagnostics<\/li>\n<li>Or subsystems of the SCS not performing the SCF<\/li>\n<li>Or other subsystems of the SCS<\/li>\n<\/ol>\n<p>Example of diagnostic function of type c)<br>The SCS is made of two subsystems:<\/p>\n\t<div class=\"img has-hover x md-x lg-x y md-y lg-y\" id=\"image_1040490344\">\n\t\t\t\t\t\t\t\t<div class=\"img-inner dark\" style=\"margin:0px 0px 0px 160px;\">\n\t\t\t<img width=\"800\" height=\"131\" src=\"https:\/\/www.reersafety.cn\/wp-content\/uploads\/2022\/04\/EN_diagnostic-funtion.png\" class=\"attachment-large size-large\" alt=\"\" decoding=\"async\" loading=\"lazy\" srcset=\"https:\/\/www.reersafety.cn\/wp-content\/uploads\/2022\/04\/EN_diagnostic-funtion.png 800w, https:\/\/www.reersafety.cn\/wp-content\/uploads\/2022\/04\/EN_diagnostic-funtion-300x49.png 300w, https:\/\/www.reersafety.cn\/wp-content\/uploads\/2022\/04\/EN_diagnostic-funtion-768x126.png 768w, https:\/\/www.reersafety.cn\/wp-content\/uploads\/2022\/04\/EN_diagnostic-funtion-510x84.png 510w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/>\t\t\t\t\t\t\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\n<style>\n#image_1040490344 {\n  width: 100%;\n}\n<\/style>\n\t<\/div>\n\t\n\n<p>Subsystem 1 is a photochell with an MTBF = 10 years (emitter + receiver)<br>Subsystem 2 is an AU SX safety control unit SIL 2 rated with a PFH = 5 x 10<sup>-9<\/sup><\/p>\n<div class=\"row\"  id=\"row-38073072\">\n\n\n\t<div id=\"col-1596542291\" class=\"col medium-6 small-12 large-6\"  >\n\t\t<div class=\"col-inner\"  >\n\t\t\t\n\t\t\t\n\n\t<div class=\"img has-hover x md-x lg-x y md-y lg-y\" id=\"image_308440915\">\n\t\t\t\t\t\t\t\t<div class=\"img-inner dark\" >\n\t\t\t<img width=\"595\" height=\"292\" src=\"https:\/\/www.reersafety.cn\/wp-content\/uploads\/2022\/04\/EN_photocell.png\" class=\"attachment-large size-large\" alt=\"\" decoding=\"async\" loading=\"lazy\" srcset=\"https:\/\/www.reersafety.cn\/wp-content\/uploads\/2022\/04\/EN_photocell.png 595w, https:\/\/www.reersafety.cn\/wp-content\/uploads\/2022\/04\/EN_photocell-300x147.png 300w, https:\/\/www.reersafety.cn\/wp-content\/uploads\/2022\/04\/EN_photocell-510x250.png 510w\" sizes=\"(max-width: 595px) 100vw, 595px\" \/>\t\t\t\t\t\t\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\n<style>\n#image_308440915 {\n  width: 100%;\n}\n<\/style>\n\t<\/div>\n\t\n\n\n\t\t<\/div>\n\t\t\t<\/div>\n\n\t\n\n\t<div id=\"col-1084898480\" class=\"col medium-6 small-12 large-6\"  >\n\t\t<div class=\"col-inner\"  >\n\t\t\t\n\t\t\t\n\n<p>Diagnostic measure selected: online monitoring with check of the response time of the Photocell<\/p>\n<p>From Table D.1: Cyclic test stimulus by dynamic change of the input signals DC = 90%.<\/p>\n<p>Subsystem 1:<br>For calculation purposes, MTBF can be assumed equal to MTTF, <br>The ratio of dangerous failures is estimated as 0,5, therefore <br>MTTF<sub>d<\/sub> = 2 x MTTF<br>\u03bb<sub>d<\/sub> = 5,7 x 10<sup>-6<\/sup><br>HFT = 0 (architecture C)<br>\u03b2 \u2264 2%<\/p>\n<p>As the diagnostic function is performed by the separate subsystem 2 within the SCS, formula <strong>(PFH = ( 1- DC1 ) x \u03bbDe1 + &#8230; + ( 1 &#8211; DCn ) x \u03bbDen)<\/strong> can be applied for the estimation of the PFH:<\/p>\n<p>PFH (subsystem 1) = (1-DC) x 5,7 x 10<sup>-6<\/sup> = 5,7 x 10<sup>-7<\/sup><br>The overall PFH of the SCS is: PFH (scs) = 5,7 x 10<sup>-7<\/sup> + 5 x 10<sup>-9<\/sup> = 5,75 x 10<sup>-7<\/sup><\/p>\n\n\t\t<\/div>\n\t\t\t<\/div>\n\n\t\n\n<\/div>\n<h3>Step 4- Estimation of safe failure fraction<\/h3>\n<p>After having derived for each subsystem the PFH it is important to ensure that the associated SIL is compatible with the limitations imposed by the architecture. The highest safety integrity level that can be claimed for subsystem is limited by the safe failure fractions (SFF) as specified in the following table<\/p>\n<table style=\"border-collapse: collapse; width: 100%;\">\n<tbody>\n<tr>\n<td style=\"width: 19.3359%;\" rowspan=\"2\"><strong>Safe failure fraction (SFF)<\/strong><\/td>\n<td style=\"width: 80.6641%; text-align: center;\" colspan=\"3\"><strong>Hardware fault tolerance<\/strong><\/td>\n<\/tr>\n<tr>\n<td style=\"width: 30.6641%; text-align: center;\">0<\/td>\n<td style=\"width: 25%; text-align: center;\">1<\/td>\n<td style=\"width: 25%; text-align: center;\">2<\/td>\n<\/tr>\n<tr>\n<td style=\"width: 19.3359%; text-align: center;\">SFF &lt; 60%<\/td>\n<td style=\"width: 30.6641%; text-align: center;\">&nbsp;Not allowed<\/td>\n<td style=\"width: 25%; text-align: center;\">SIL 1<\/td>\n<td style=\"width: 25%; text-align: center;\">SIL 2<\/td>\n<\/tr>\n<tr>\n<td style=\"width: 19.3359%; text-align: center;\">60% \u2264 SFF &lt; 90%<\/td>\n<td style=\"width: 30.6641%; text-align: center;\">SIL 1<\/td>\n<td style=\"width: 25%; text-align: center;\">SIL 2<\/td>\n<td style=\"width: 25%; text-align: center;\">SIL 3<\/td>\n<\/tr>\n<tr>\n<td style=\"width: 19.3359%; text-align: center;\">90% \u2264 SFF &lt; 99%<\/td>\n<td style=\"width: 30.6641%; text-align: center;\">SIL 2<\/td>\n<td style=\"width: 25%; text-align: center;\">SIL 3<\/td>\n<td style=\"width: 25%; text-align: center;\">SIL 3<\/td>\n<\/tr>\n<tr>\n<td style=\"width: 19.3359%; text-align: center;\">SFF \u2265 99%<\/td>\n<td style=\"width: 30.6641%; text-align: center;\">SIL 3<\/td>\n<td style=\"width: 25%; text-align: center;\">SIL 3<\/td>\n<td style=\"width: 25%; text-align: center;\">SIL 3<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>Subsystem safe failure fraction (SFF) is, by definition, the fraction of the overall failure rate that does not result in a dangerous failure.<\/p>\n<p>It is therefore the ratio between the sum of the overall safe failures and dangerous failures detected by the diagnostic techniques implemented and the sum of all possible failures (safe, dangerous detected and dangerous not detected).<\/p>\n<p style=\"text-align: center;\"><span style=\"font-size: 130%; color: #333399;\"><span style=\"font-size: 75%;\">(18)<\/span>&nbsp; &nbsp;SFF = (\u03a3\u03bb<sub>s<\/sub> + \u03a3\u03bb<sub>dd<\/sub>) \/ \u03a3\u03bb<sub>s<\/sub> + \u03a3\u03bb<sub>d<\/sub><\/span><\/p>\n<p>For the calculation, all the components including electrical, electronic, electromechanical, mechanical etc, which are necessary to allow the subsystem to process the safety function shall considered.<\/p>\n<h4>Methodology for the estimation of susceptibility to common cause failures<\/h4>\n<p>In case of redundant structures, the methodology used for calculating the PFH assumes a sufficient operating independence of the two channels.<\/p>\n<p>However, if the channels are not fully independent, common cause failures due to a single occurrence or condition can cause a critical malfunction simultaneously on both channels in a dual channel architecture.<\/p>\n<p>Examples of failures due to common causes such common-cause faults are:<\/p>\n<ul>\n<li>Power surges (a surge strong enough to cause multiple catastrophic failures one channel will likely destroy the other at the same time)<\/li>\n<li>Impurity of the fluid medium (valves of both channels fail to open)<\/li>\n<li>Overtemperature (due to a failure of the cooling fans).<\/li>\n<\/ul>\n<h4>Estimation of the effect of CCF<\/h4>\n<p>The likelihood of common cause failure introduces the problem of estimating the rates of simultaneous failure for multiple components in addition to their Individual failure rates.<\/p>\n<p>IEC 62061 overcome this problem by using the scoring method proposed in Annex E.<\/p>\n<p>Table E.1 of this Annex gives a list of measures and for each measure an associated values is assigned which represent the contribution of each measure to the reduction of common cause failures.<\/p>\n<p>All the factors having an impact on the design of the subsystem must be added to provide an overall score.<\/p>\n<p>For each listed measure, only the full score or nothing can be claimed.<\/p>\n<p>If a measure is only partly fulfilled, the score according to this measure is zero. <br>Where it can be shown that equivalent means of avoiding of CCF can be achieved through the use of specific design measures (e.g. the use of opto-isolated devices rather than shielded cables), then the relevant score can be claimed as this can be considered to provide the same contribution to the avoidance of CCF.<\/p>\n<p>If equivalent means of avoiding of CCF can be achieved through the use of specific design measures (e.g. the use of opto-isolated devices rather than shielded cables), then the relevant score can be claimed.<\/p>\n<p>The overall score is used to determine the common cause failure factor \u03b2 from table F.2 as a percentage value.<\/p>\n<table style=\"border-collapse: collapse; width: 44.9219%;\">\n<tbody>\n<tr>\n<td style=\"width: 22.8516%;\">\n<p><strong>Overall score<\/strong><\/p>\n<\/td>\n<td style=\"width: 22.0703%;\">\n<p><strong>Common cause failure factor (\u03b2)<\/strong><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"width: 22.8516%;\">\n<p>\u2264 35<\/p>\n<\/td>\n<td style=\"width: 22.0703%;\">\n<p>10% (0,1)<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"width: 22.8516%;\">\n<p>36 to 65<\/p>\n<\/td>\n<td style=\"width: 22.0703%;\">\n<p>5% (0,05)<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"width: 22.8516%;\">\n<p>66 to 85<\/p>\n<\/td>\n<td style=\"width: 22.0703%;\">\n<p>2% (0,02)<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td style=\"width: 22.8516%;\">\n<p>86 t0 100<\/p>\n<\/td>\n<td style=\"width: 22.0703%;\">\n<p>1% (0,01)<\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>This \u03b2 factor will be used in formulas 2, 4, 7, 8 for the calculation of the PFH of a subsystem.<\/p>\n<div class=\"is-divider divider clearfix\" style=\"max-width:100px;\"><\/div>\n\n<div class=\"row\"  id=\"row-166992611\">\n\n\n\t<div id=\"col-1162528616\" class=\"col medium-4 small-12 large-4\"  >\n\t\t<div class=\"col-inner\"  >\n\t\t\t\n\t\t\t\n\n\t<div class=\"ux-menu stack stack-col justify-start ux-menu--divider-solid\">\n\t\t\n\n\t<div class=\"ux-menu-link flex menu-item\">\n\t\t<a class=\"ux-menu-link__link flex\" href=\"https:\/\/www.reersafety.cn\/en\/academy\/industrial-safety-guide\/iec-62061-safety-of-machinery\/safety-related-application-software\/\"  >\n\t\t\t<i class=\"ux-menu-link__icon text-center icon-angle-left\" ><\/i>\t\t\t<span class=\"ux-menu-link__text\">\n\t\t\t\tSafety-related application software\t\t\t<\/span>\n\t\t<\/a>\n\t<\/div>\n\t\n\n\n\t<\/div>\n\t\n\n\t\t<\/div>\n\t\t\t<\/div>\n\n\t\n\n\t<div id=\"col-1928805652\" class=\"col medium-4 small-12 large-4\"  >\n\t\t<div class=\"col-inner\"  >\n\t\t\t\n\t\t\t\n\n\n\t\t<\/div>\n\t\t\t<\/div>\n\n\t\n\n\t<div id=\"col-414017702\" class=\"col medium-4 small-12 large-4\"  >\n\t\t<div class=\"col-inner text-right\"  >\n\t\t\t\n\t\t\t\n\n\t<div class=\"ux-menu stack stack-col justify-start ux-menu--divider-solid\">\n\t\t\n\n\t<div class=\"ux-menu-link flex menu-item\">\n\t\t<a class=\"ux-menu-link__link flex\" href=\"https:\/\/www.reersafety.cn\/en\/academy\/industrial-safety-guide\/en-iso-14119safety-of-machinery\/\"  >\n\t\t\t<i class=\"ux-menu-link__icon text-center icon-angle-right\" ><\/i>\t\t\t<span class=\"ux-menu-link__text\">\n\t\t\t\tEN ISO 14119\tSafety of machinery\t\t\t<\/span>\n\t\t<\/a>\n\t<\/div>\n\t\n\n\n\t<\/div>\n\t\n\n\t\t<\/div>\n\t\t\t<\/div>\n\n\t\n\n<\/div>\n\n\t\t<\/div>\n\t\t\t<\/div>\n\n\t\n\n<\/div>\n\n\t\t<\/div>\n\t\t\t<\/div>\n\n\t\n\n<\/div>\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":7,"featured_media":0,"parent":39413,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"om_disable_all_campaigns":false,"inline_featured_image":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"_uf_show_specific_survey":0,"_uf_disable_surveys":false},"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v20.1 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Design and development of subsystems | ReeR<\/title>\n<meta name=\"description\" content=\"The standard proposes four predefined architectures and for each of them provides a simplified formula for computation of the PFH.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.reersafety.cn\/en\/academy\/industrial-safety-guide\/iec-62061-safety-of-machinery\/design-and-development-of-subsystems\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Design and development of subsystems | ReeR\" \/>\n<meta property=\"og:description\" content=\"The standard proposes four predefined architectures and for each of them provides a simplified formula for computation of the PFH.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.reersafety.cn\/en\/academy\/industrial-safety-guide\/iec-62061-safety-of-machinery\/design-and-development-of-subsystems\/\" \/>\n<meta property=\"og:site_name\" content=\"ReeR\" \/>\n<meta property=\"article:modified_time\" content=\"2023-03-03T09:59:44+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"18 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.reersafety.cn\/en\/academy\/industrial-safety-guide\/iec-62061-safety-of-machinery\/design-and-development-of-subsystems\/\",\"url\":\"https:\/\/www.reersafety.cn\/en\/academy\/industrial-safety-guide\/iec-62061-safety-of-machinery\/design-and-development-of-subsystems\/\",\"name\":\"Design and development of subsystems | ReeR\",\"isPartOf\":{\"@id\":\"https:\/\/www.reersafety.cn\/en\/#website\"},\"datePublished\":\"2021-07-27T10:51:04+00:00\",\"dateModified\":\"2023-03-03T09:59:44+00:00\",\"description\":\"The standard proposes four predefined architectures and for each of them provides a simplified formula for computation of the PFH.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.reersafety.cn\/en\/academy\/industrial-safety-guide\/iec-62061-safety-of-machinery\/design-and-development-of-subsystems\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.reersafety.cn\/en\/academy\/industrial-safety-guide\/iec-62061-safety-of-machinery\/design-and-development-of-subsystems\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.reersafety.cn\/en\/academy\/industrial-safety-guide\/iec-62061-safety-of-machinery\/design-and-development-of-subsystems\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.reersafety.cn\/en\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Academy\",\"item\":\"https:\/\/www.reersafety.cn\/en\/academy\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Safety guide\",\"item\":\"https:\/\/www.reersafety.cn\/en\/academy\/industrial-safety-guide\/\"},{\"@type\":\"ListItem\",\"position\":4,\"name\":\"IEC 62061 Safety of machinery\",\"item\":\"https:\/\/www.reersafety.cn\/en\/academy\/industrial-safety-guide\/iec-62061-safety-of-machinery\/\"},{\"@type\":\"ListItem\",\"position\":5,\"name\":\"Design and development of subsystems\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.reersafety.cn\/en\/#website\",\"url\":\"https:\/\/www.reersafety.cn\/en\/\",\"name\":\"ReeR\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.reersafety.cn\/en\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Design and development of subsystems | ReeR","description":"The standard proposes four predefined architectures and for each of them provides a simplified formula for computation of the PFH.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.reersafety.cn\/en\/academy\/industrial-safety-guide\/iec-62061-safety-of-machinery\/design-and-development-of-subsystems\/","og_locale":"en_US","og_type":"article","og_title":"Design and development of subsystems | ReeR","og_description":"The standard proposes four predefined architectures and for each of them provides a simplified formula for computation of the PFH.","og_url":"https:\/\/www.reersafety.cn\/en\/academy\/industrial-safety-guide\/iec-62061-safety-of-machinery\/design-and-development-of-subsystems\/","og_site_name":"ReeR","article_modified_time":"2023-03-03T09:59:44+00:00","twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"18 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.reersafety.cn\/en\/academy\/industrial-safety-guide\/iec-62061-safety-of-machinery\/design-and-development-of-subsystems\/","url":"https:\/\/www.reersafety.cn\/en\/academy\/industrial-safety-guide\/iec-62061-safety-of-machinery\/design-and-development-of-subsystems\/","name":"Design and development of subsystems | ReeR","isPartOf":{"@id":"https:\/\/www.reersafety.cn\/en\/#website"},"datePublished":"2021-07-27T10:51:04+00:00","dateModified":"2023-03-03T09:59:44+00:00","description":"The standard proposes four predefined architectures and for each of them provides a simplified formula for computation of the PFH.","breadcrumb":{"@id":"https:\/\/www.reersafety.cn\/en\/academy\/industrial-safety-guide\/iec-62061-safety-of-machinery\/design-and-development-of-subsystems\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.reersafety.cn\/en\/academy\/industrial-safety-guide\/iec-62061-safety-of-machinery\/design-and-development-of-subsystems\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.reersafety.cn\/en\/academy\/industrial-safety-guide\/iec-62061-safety-of-machinery\/design-and-development-of-subsystems\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.reersafety.cn\/en\/"},{"@type":"ListItem","position":2,"name":"Academy","item":"https:\/\/www.reersafety.cn\/en\/academy\/"},{"@type":"ListItem","position":3,"name":"Safety guide","item":"https:\/\/www.reersafety.cn\/en\/academy\/industrial-safety-guide\/"},{"@type":"ListItem","position":4,"name":"IEC 62061 Safety of machinery","item":"https:\/\/www.reersafety.cn\/en\/academy\/industrial-safety-guide\/iec-62061-safety-of-machinery\/"},{"@type":"ListItem","position":5,"name":"Design and development of subsystems"}]},{"@type":"WebSite","@id":"https:\/\/www.reersafety.cn\/en\/#website","url":"https:\/\/www.reersafety.cn\/en\/","name":"ReeR","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.reersafety.cn\/en\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"}]}},"_links":{"self":[{"href":"https:\/\/www.reersafety.cn\/en\/wp-json\/wp\/v2\/pages\/39454"}],"collection":[{"href":"https:\/\/www.reersafety.cn\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.reersafety.cn\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.reersafety.cn\/en\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/www.reersafety.cn\/en\/wp-json\/wp\/v2\/comments?post=39454"}],"version-history":[{"count":36,"href":"https:\/\/www.reersafety.cn\/en\/wp-json\/wp\/v2\/pages\/39454\/revisions"}],"predecessor-version":[{"id":66693,"href":"https:\/\/www.reersafety.cn\/en\/wp-json\/wp\/v2\/pages\/39454\/revisions\/66693"}],"up":[{"embeddable":true,"href":"https:\/\/www.reersafety.cn\/en\/wp-json\/wp\/v2\/pages\/39413"}],"wp:attachment":[{"href":"https:\/\/www.reersafety.cn\/en\/wp-json\/wp\/v2\/media?parent=39454"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}