PCD530A102 ABB 高性能控制器 AC 800M HI提供SIL3 TÜV认证控制环境

AC 800M HI提供SIL3 TÜV认证控制环境，可采用一个控制器实现安全和关键过程控制，并且不降低安全等级。当配置SIL1-2系统，AC800M HI实现1oo1​D结构——结合 PM865 的应用程序执行和在SM811/SM810的诊断和监测功能。当配置为SIL3系统，AC800M​ HI实现1oo2D结构——在PM865 和 SM811中并行执行应用程序。

嵌入式安全控制中的应用，在标准库中可用的所有功能应用SIL分类应用程序标记为：SIL2，SIL 2限制、SIL3或SIL3限制。嵌入式安全措施防止安全应用的降级。SIL选择激活相关的约束和限制，如只有SIL分类的元素才可以用于SIL等级的应用。

对于SIL级别的应用，只可以使用三种IEC 61131-3语言：功能块图、结构化文本，以及顺序功能图（仅SIL1-2）。对于非SIL应用，可以使用全部五种IEC 61131-3语言。

800xA中面向对象的工程学环境以及SIL-适应性函数库有效地支持了整个系统安全生命周期。800xA 的工程环境包括依靠非SIL适应性组态的安全维护。只要被确定为安全应用程序，工程系统将自动限制用户的配置选择，在SIL要求未能满足时阻止下载

下载流程和运行时间环境都要应用到一系列的安全措施。这些措施是防火墙机制嵌入式控制和安全的重要组成部分。不同级别的循环冗余校验(CRC)保护、带比较功能的双代码生成器和带再生效功能的编辑器是AC800M高完整性嵌入式防火墙机制的少数几个特点。

系统800xA还专门为安全系统工程提供了以下额外的措施：

• IEC61131-3编程语言的使用
• 访问控制和超驰（强制）控制
• 应用程序变化报告
• 应用程序库和解决方案

组态语言

功能块图表（适用于 Non-SIL 和 SIL1-3）

功能块图表是一种用来描述信号和数据流的图形语言，通过程序库存储软件元素和互相连接来表示这些信号和数据流。功能块程序易于开发，因为是由图表产生，所以也易于理解。

结构程序（适用于 Non-SIL 和 SIL1-3）

结构程序（ST）是一种高级编程语言。它的结构范围很广，包括：任务（assignments）,、函数引用、公式表达（expressions）、条件语言、迭代等。由于ST逻辑和结构性的设计，特别适用于编写高级、紧凑又不易理解的程序。根据IEC61131-3标准，它对SIL应用程序有一些限制（回路，禁止行执行和返回）

顺序功能图（适用于 Non-SIL 和 SIL1-2）

顺序功能图(SFC)是一种描述控制系统行为序列的图形语言，它被用来描述时间驱动或事件驱动的控制序列。流程图通过步骤、变化和选择节点显示顺序。这种语言对于按照顺序进行的控制任务非常适合，即有一系列清晰的步骤，每一步都要求一定的数据输入，且通常只有完成了上一步才能进行下一步。

PCD530A102

The AC 800M HI offers a SIL3 TUV certified control environment that enables safe and critical process control with one controller without compromising safety levels. When configured with SIL1-2 systems, the AC800M HI implements the 1oo1D architecture – combining the application execution of the PM865 with the diagnostic and monitoring capabilities of the SM811/SM810. When configured as a SIL3 system, the AC800M HI implements a 1oo2D architecture – executing applications in parallel in the PM865 and SM811.

Applications in embedded security control, all functions available in the standard library for application SIL classification applications are labeled: SIL2, SIL2 restricted, SIL3, or SIL3 restricted. Embedded security measures prevent the degradation of secure applications. SIL selection activates associated constraints and limitations, such as that only elements classified by SIL may be used in SIL grade applications.

For SIL level applications, only three IEC 61131-3 languages can be used: function block diagrams, structured text, and sequential function diagrams (SIL1-2 only). For non-SIL applications, all five IEC 61131-3 languages can be used.

The object-oriented engineering environment in 800xA and the SIL-adaptive function library effectively support the entire system safety lifecycle. The engineering environment for the 800xA includes security maintenance that relies on non-SIL adaptive configurations. As long as the application is determined to be safe, the engineering system will automatically limit the user’s configuration options and prevent the download if the SIL requirements are not met

Both the download process and the run-time environment are subject to a number of security measures. These measures are an important part of embedded control and security of firewall mechanism. Different levels of cyclic redundancy check (CRC) protection, a dual code generator with comparison, and an editor with revalidation are just a few of the features of the AC800M high integrity embedded firewall mechanism.

System 800xA also provides the following additional measures specifically for safety systems engineering:

The use of IEC61131-3 programming language
Access control and override (force) control
Application change report
Application libraries and solutions

Configuration language

Functional block chart (for Non-SIL and SIL1-3)

Functional block charting is a graphical language used to describe signals and data flows represented by libraries storing software elements and interconnecting them. Function blocks are easy to develop and, because they are generated by diagrams, easy to understand.

Structure program (for Non-SIL and SIL1-3)

Structured programming (ST) is a high-level programming language. It has a wide range of structures, including assignments, function references, expressions, conditional language, iteration, and so on. Due to the logical and structural design of ST, it is especially suitable for writing advanced, compact and difficult to understand programs. According to the IEC61131-3 standard, it has some restrictions on SIL applications (loop, forbidden line execution and return).

Sequential function diagram (for Non-SIL and SIL1-2)

Sequential Function Diagram (SFC) is a graphical language that describes the sequence of behavior of a control system. It is used to describe time-driven or event-driven control sequences. The flowchart shows the sequence through steps, changes, and selection of nodes. This language is well suited for control tasks that are carried out sequently, that is, with a clear series of steps, each requiring a certain amount of data input, and usually only after the previous step has been completed can the next one proceed.