GB/T 50770-2013 GBT50770-2013石油化工安全儀表系統(tǒng)設(shè)計規(guī)范:英文

專用

人人文庫

NATIONALSTANDARD

OFTHEPEOPLESREPUBLICOFCHINA

CodeforDesignofSafetyInstrumentedSystem

inPetrochemicalEngineering

GB/T50770-2013

ChiefDevelopmentDepartment:ChinaPetrochemicalCorporation

ApprovalDepartment:MinistryofHousingandUrban-RuralDevelopment

ofthePeoplesRepublicofChina

ImplementationDate:September1，2013專用

人人文庫

ChinaPlanningPress

Beijing2019

ChineseeditionfirstpublishedinthePeoplesRepublicofChinain2013

EnglisheditionfirstpublishedinthePeoplesRepublicofChinain2019

byChinaPlanningPress

rd

，，專用

3FloorCTowerGuohongBuilding

No.A11，Muxidi-Beili，XichengDistrict

Beijing，100038

PrintedinChinabyBeijingJingyintangGraphicPrintingCenter

?2013byMinistryofHousingandUrban-RuralDevelopmentof

thePeoplesRepublicofChina

Allrightsreserved.Nopartofthispublicationmaybereproducedortransmittedinanyformor

byanymeans人人文庫，graphic，electronic，ormechanical，includingphotocopying，recording，

oranyinformationstorageandretrievalsystems，withoutwrittenpermissionofthepublisher.

Thisbookissoldsubjecttotheconditionthatitshallnot，bywayoftradeorotherwise，belent，

resold，hiredoutorotherwisecirculatedwithoutthepublisherspriorconsentinanyformof

blindingorcoverotherthanthatinwhichthisispublishedandwithoutasimilarcondition

includingthisconditionbeingimposedonthesubsequentpurchaser.

ISBN978-7-5182-1091-6

AnnouncementofMinistryofHousingandUrban-Rural

DevelopmentofthePeoplesRepublicofChina

No.1623

AnnouncementoftheMinistryofHousingandUrban-RuralDevelopmentofthe

PeoplesRepublicofChinaonIssueofNationalStandardCodeforDesignof

SafetyInstrumentedSysteminPetrochemicalEngineering

TheCodeforDesignofSafetyInstrumentedSysteminPetrochemicalEngineeringhasbeen

approvedasanationalstandardwithaserialnumberofGB/T50770-2013，anditwillbeimplemented

onSeptember1，2013.

AuthorizedbytheResearchInstituteofStandardsandNorms，MinistryofhousingandUrban-

RuralDevelopmentofP.R.China，thiscodeispublishedanddistributed專用byChinaPlanningPress.

MinistryofHousingandUrbanRuralDevelopmentofthePeoplesRepublicofChina

-

February7，2013

人人文庫

Foreword

ThiscodeisdevelopedbySinopecEngineeringIncorporationincooperationwithotherinvolved

organizationsbasedontherequirementsofDocumentJIANBIAO〔2008〕No.105issuedbythe

MinistryofHousingandUrbanRuralDevelopmentNoticeontheDevelopmentandRevisionPlanof

--"

NationalEngineeringConstructionStandards（2ndGroup）in2008".

Inpreparingthiscode，theworkingteamdevelopedthecodebasedonwideandextensive

investigationsandstudiesmade，practicessummarized，commentsrequestedaswellasreferencesto

internationalcodesandstandards.

Thiscodecomprises15chapters，andmainlyincludesGeneralprovisions，Terminologiesand

abbreviations，Safetylifecycle，Safetyintegritylevel，GeneralRequirementsforDesign，Sensors，F(xiàn)inal

elements，Logicsolvers，Communicationinterfaces，Humanmachineinterfaces，Applicationsoftware，

Engineeringdesign，Configuration，integrationandcommissioning，acceptancetesting，Operationand

maintenance，Managementofchanges，Documentationmanagementetc.

TheMinistryofHousingandUrban-RuralDevelopmentofthePeoplesRepublicofChinaisin

chargeofadministrationofthiscode，ChinaPetrochemicalCorporation（專用SinopecGroup）isresponsible

foritsroutinemanagement，andSinopecEngineeringIncorporationistaskedforexplanationofspecific

technicalcontents.Ifanycommentsandrecommendationsareproposedinimplementation，please

sendyourcomments/recommendationstoSinopecEngineeringIncorporation（Address：21Anyuan，

AnhuiBeiLi，ChaoyangDistrict，Beijing，Postcode：100101）asareferenceforrevisingthiscodeinthe

future.

Chiefdevelopmentorganization，codevelopmentorganization，participatingdevelopment

-

organization，chiefdrafterandchiefreviewerofthecode：

ChiefDevelopmentOrganization:

SinopecEngineeringIncorporation

-

CoDevelopmentOrganization:

ChinaHuanqiuContractingandEngineeringCorp.

SinopecNingboEngineeringCo.，Ltd

BeijingConsenAutomationControlCo.，Ltd

SinopecHoneywell（Tianjin）Co.Ltd

人人文庫-

ParticipatingDevelopmentOrganization:

SinopecLuoyangPetrochemicalEngineeringCorporation

SinopecShanghaiEngineeringCo.，Ltd

CNPCEastChinaDesignInstitute

CNPCDaqingPetrochemicalEngineeringCo.，Ltd

SinopecYangziPetrochemicalCo.，Ltd

HIMA（Shanghai）SafetySystemCo.，Ltd

TimingWinner（Beijing）AutomationEquipmentCo.，Ltd

·1·

ChiefDrafter:

HuangBuyuYeXiangdongFanZonghaiMaLeiHuChenZhangJianguo

GaoShengjunLiLeiLinRongHuTongyinZhuXiangxuanZhangYuekun

WangFabingZhangTongke

ChiefReviewer:

ZhaoYongdengDingLanrongWangLifengWangChenglinWangShengli

LiuJunLiYumingSongZhiyuanYangJinchengLinHongjun

ZhouJiaxiangZhaoZhuGuZhengGeChunyuPeiBingan

專用

人人文庫

·2·

Contents

1GeneralProvisions·……………（1）

2TermsandAbbreviations………………………（2）

2.1Terms…………………………（2）

2.2Abbreviations…………………（4）

3SafetyLifeCycle………………（5）

3.1GeneralRequirements……………（5）

3.2EngineeringDesign……………（5）

3.3Integration，CommissioningandAcceptanceTesting…………………（6）

3.4OperationandMaintenance………………………（6）

4SafetyIntegrityLevel…………（7）

4.1GeneralRequirements……………（7）

4.2SafetyIntegrityLevelAssessment…………………（7）

5GeneralRequirementsforDesign………………（9）

6Sensors…………………………專用（10）

6.1GeneralRequirements……………（10）

6.2SeparationRequirementsforSensors………………（10）

6.3RedundancyRequirementsforSensors……………（10）

6.4RedundancyMethodsofSensors…………………（10）

6.5DiscreteSensors………………（10）

7FinalElements…………………（11）

7.1GeneralRequirements……………（11）

7.2SeparationRequirementsforControlValves………（11）

7.3RedundancyRequirementsforControlValves………（11）

7.4ControlValveAccessories……………………（11）

8LogicSolvers……………………（12）

8.1GeneralRequirements…………（12）

8.2SeparationRequirementsforLogicSolvers…………（12）

8.3RedundancyRequirements人人文庫forLogicSolvers………（12）

8.4ConfigurationRequirementsforLogicSolvers………（12）

8.5ConfigurationRequirementsforLogicSolverInterfaces………………（13）

9CommunicationInterfaces………………………（14）

9.1GeneralRequirements……………（14）

9.2ConfigurationRequirementsforCommunicationInterfaces……………（14）

10HumanMachineInterfaces……………………（15）

10.1OperatorStations………………（15）

10.2AuxiliaryConsoles……………（15）

10.3MaintenanceOverrideSwitches…………………（15）

·1·

10.4OperationOverrideSwitches……………………（16）

10.5ResetPushButtons……………（16）

10.6EmergencyShutdownPushButtons………………（16）

10.7EngineeringWorkstationsandSequenceEventRecorders…………（16）

11ApplicationSoftware…………（17）

11.1ConfigurationandProgramming…………………（17）

11.2SecurityofApplicationSoftware…………………（17）

11.3DesignandConfigurationofApplicationSoftware…………………（17）

12EngineeringDesign……………（18）

12.1BasicEngineeringDesign（BED）………………（18）

12.2DetailedEngineeringDesign（DED）……………（18）

13Configuration，IntegrationandCommissioning，AcceptanceTesting………（20）

13.1Configuration，IntegrationandCommissioning……………………（20）

13.2AcceptanceTesting……………（20）

14OperationandMaintenance，ManagementofChanges………（22）

15DocumentationManagement…………………（23）

ExplanationofWordinginThisCode……………（24）

ListofReferenceCodes/Standards…………………專用（25）

人人文庫

·2·

1GeneralProvisions

Thiscodeisdevelopedtopreventandmitigatetheprocessrisks，securethestaffandproperty

1.0.1

safetyandprotecttheenvironmentinpetrochemicalplants.

Thiscodeisapplicabletotheengineeringdesignofsafetyinstrumentedsystemforgrassroots，

1.0.2

revampandexpansionprojectsinpetrochemicalplants.

Inadditiontothiscode，theengineeringdesignofsafetyinstrumentedsystemshallalsocomply

1.0.3

withthecurrentnationalcodesandstandards.

專用

人人文庫

·1·

2TermsandAbbreviations

2.1Terms

Safetyinstrumentedsystem

2.1.1

Aninstrumentedsystemthatisusedtoimplementoneormoresafetyinstrumentedfunctions.

Risk

2.1.2

Thespecifichazardouseventsandconsequencesthatarepredicted.

Processrisk

2.1.3

Theriskthatisgeneratedfromvariationsofprocessconditionsduetoabnormalevents.

Safetylifecycle

2.1.4

Awholetimedurationfromthestartoftheconceptdesigntoallsafetyinstrumentedfunctionsare

nolongeravailableforuse.

Hazard

2.1.5

Thepossibilityresultingindangerouseventssuchasinjurytopersonnel，illhealth，propertyloss

anddamagetoenvironment.

Riskassessment專用

2.1.6

Awholeprocesstoassesstherisksizeandtodeterminetheriskrating.

Protectionlayer

2.1.7

Anyindependentmechanismthatisusedforriskreductionbyusingcontrolling，preventingand

mitigatingmeasures.

Safetyfunction

2.1.8

Afunctiontobeimplementedbysafetyinstrumentedsystem，othersafetyrelatedsystemsor

externalriskreductionfacilitiesforthepurposeofachievingormaintainingtheprocessinsafestate.

Safetyinstrumentedfunction

2.1.9

Asafetyprotectionfunctionorsafetycontrolfunctionimplementedbysensors，logicsolvers，final

elementsandrelatedsoftwareforthepurposeofpreventingandmitigatingconsequencesofdangerous

eventsorkeepingtheprocessinsafestate.

Fault

2.1.10

Anabnormalconditionthatmaypossiblyresultinthereductionorlossofimplementingcapability

ofthefunctionalunits人人文庫.

Safetyintegrity

2.1.11

Theaverageprobabilityofsafetyinstrumentedfunctionsthatareachievedbysafetyinstrumented

systemunderthespecifiedconditionsandwithinthespecifiedtime.

Safetyintegritylevel

2.1.12

ThelevelofsafetyfunctionthatisrangedfromSIL1toSIL4inanorderfromlowleveltohighlevel.

Failure

2.1.13

Aterminationofonecertainfunctionorimplementingcapabilityofonefunctionalunit.

Dangerousfailure

2.1.14

Afailurethatmaypossiblyresultinpotentialdangerousconditionorfunctionlossofsafety

·2·

instrumentedsystem.

Safefailure

2.1.15

Afailurethatmaynotresultinpotentialdangerousconditionorfunctionlossofsafety

instrumentedsystem.

Sensor

2.1.16

Acomponentofsafetyinstrumentedsystem，whichisusedtomeasuretheprocessvariables.

Logicsolver

2.1.17

Acomponentofsafetyinstrumentedsystem，whichisusedforperforminglogicfunctions.

Finalelement

2.1.18

Acomponentofsafetyinstrumentedsystem，whichisusedtoexecutethecommandsorspecified

actionsoflogicsolverstokeeptheprocessinsafestate.

Basicprocesscontrolsystem

2.1.19

Asystemthatrespondstotheinputsignalsfromprocessmeasurementsandotherrelateddevices，

otherinstruments，controlsystemsoroperatorsandgeneratesoutputsignalsbasedonprocesscontrol

rules，algorithmsanddesiredmannertoperformprocesscontrolandoperationofrelatedequipments.

Failsafe

2.1.20-

Afunctionthatenablesthecontrolledprocessintoaprespecifiedsafestateincaseoffailureof

-

safetyinstrumentedsystem.

Redundancy專用

2.1.21

Twoormorecomponentsorsystemsthatareusedtoindependentlyperformonesamefunctionfor

achievingmutualbackupandswitchover.

-

Faulttolerant

2.1.22

Acapabilitythatthefunctionalunitiscapableofcontinuouslyexecutingthespecifiedfunctionsin

caseoffaultorerror.

Onoffvariable

2.1.23-

Avariablethathasonly0or1digitandusedtoindicatethestateofanobjectoranevent.Itisalso

calleddiscretevariable.

Switch

2.1.24

Adevicethathastwostablepositions，includingsoftwareswitchandhardwareswitch.

Pushbutton

2.1.25

Adevicethathasonlyonestableposition，includingsoftwarepushbuttonandhardwarepushbutton.

Mechanicalcontact

2.1.26

Amechanical人人文庫electricaldevicethatcompriseselectricallyconductivemetalcomponents，which

maychangetheenergizingordeenergizingstateundertheactionofexternalfactors.

-

Contact

2.1.27

Anelectricaldevicethatenablesthechangeofenergizingordeenergizingstateundertheactionof

-

externalfactors，includingmechanicalcontactandelectroniccontact.Softwarecontactisalsoincluded

inarithmeticcomponentsofprogrammablelogicsolver.

Normallyclosedcontact

2.1.28

Acontactthatisclosedundernormalconditionswithouteffectofexternalfactors.

Normallyopencontact

2.1.29

Acontactthatisopenundernormalconditionswithouteffectofexternalfactors.

·3·

Programmableelectronicsystem

2.1.30

Asystemthatisusedforcontrolling，protectingormonitoringpurposesbasedontheelectronic

devicesthatmaybefunctionorientedprogrammedorchangetheoperationprocedures.

-

2.2Abbreviations

BPCS（BasicProcessControlSystem）

CPU（CentralProcessUnit）

EMC（ElectroMagneticCompatibility）

FAT（FactoryAcceptanceTesting）

FLD（FunctionalLogicDiagram）

FBD（FunctionalBlockDiagram）

FDS（FunctionalDesignSpecification）

HAZOP（HazardandOperabilityStudy）

HMI（HumanMachineInterface）

HSE（Health，SafetyandEnvironment）

MOS（MaintenanceOverrideSwitch）

OOS（OperationalOverrideSwitch）

PES（ProgrammableElectronicSystem）

PHA（PreliminaryHazardAnalysis）專用

PFDProbabilityofFailureonDemandAverage）

avg（

PLC（ProgrammableLogicController）

SAT（SiteAcceptanceTesting）

SER（SequenceofEventsRecorder）

SIF（SafetyInstrumentedFunction）

SIL（SafetyIntegrityLevel）

SIS（SafetyInstrumentedSystem）

UPS（UninterruptablePowerSupply）

人人文庫

·4·

3SafetyLifeCycle

3.1GeneralRequirements

Inengineeringdesignofpetrochemicalplants，managementactivitiesshallbedeterminedfor

3.1.1

SISateachstageduringSISsafetylifecycle.

ThesafetylifecycleofSISshouldincludeengineeringdesignstage，integration，commissioning

3.1.2

andacceptanceteststage，operationandmaintenancestage.

Safetylifecycleactivities（Figure3.1.3）shouldincludeSISconceptdesign，processhazard

3.1.3

analysisandriskassessment，allocationofsafetyfunctionsfordifferentprotectionlayers，SIL

assessmentandreview，technicalrequirementsforSIS，basicengineeringdesignforSIS，detailed

engineeringdesignforSIS，SISintegration，commissioningandacceptancetesting，SISoperation，

maintenanceandmanagementofchanges，SISfunctiontestingandSISdecommissioningetc.

專用

人人文庫

Figure3.1.3Workflowforsafetylifecycle

3.2EngineeringDesign

Conceptdesignshouldincludepreliminaryprocesshazardanalysis，mainsafetycontrol

3.2.1

strategiesandmeasures，andcorrespondingdescriptions.

·5·

Processhazardanalysisandriskassessmentshouldincludeidentificationofthedangerousevents

3.2.2

andtheircausesoftheprocessandrelatedequipment，thesequence，possibilityandconsequencesof

thedangerousevents，determinationofrequirementsandmeasuresforriskreduction，and

determinationofSIFs.ProcesshazardanalysisandriskassessmentshouldemployHAZOPmethodor

PHAmethod，andmayusesafetychecklistmethod，failuremodeandconsequenceanalysismethod，

causeandeffectanalysismethodetc.

Allocationofsafetyfunctionsfortheprotectionlayersmayincludeassigningthesafetyfunctions

3.2.3

ofprotectionlayersforpreventing，controllingormitigatingprocessrisksandassigningtherisk

reductiontargetsoftheSIFs.Thesafetyfunctionsofprotectionlayersshallbeassignedinaccordance

withthecurrentnationalstandardFunctionalSafetyofElectrical/Electronic/ProgrammableElectronic

SafetyrelatedSystemsGB/T20438andFunctionalSafetyafetyInstrumentedSystemsforProcess

--s

IndustrySectorGB/T21109.

SILsmaybeassessedanddeterminedbasedontheresultsofprocesshazardanalysisand

3.2.4

allocationofsafetyfunctionsfortheprotectionlayers.

TechnicalrequirementsforSISmayincludesafetyinstrumentedfunctionsandsafetyintegrity

3.2.5

levels，processsafetystates，operationmodes，andtestintervals.

BasicengineeringdesignforSISshouldincludeSISdesigndescription，SISspecification，cause

3.2.6

andeffectdiagramorfunctionnarratives.

DetailedengineeringdesignforSISshouldincludeSISdesign專用description，SISspecification，

3.2.7

functionallogicdiagram，andconfigurationprogramming.

3.3Integration，CommissioningandAcceptanceTesting

SISintegration，commissioningandacceptancetestingshallcomplywiththetechnicalrequirements

3.3.1

specifiedinSISspecificationsandthefunctionallogicdiagrams.

SIScommissioningshallcomplywithtechnicalrequirementsforSIS.

3.3.2

AcceptancetestingforSISshallincludeFATandSAT.Hardware，systemsoftwareandapplication

3.3.3

softwareforSISshallcomplywithtechnicalrequirementsforSIS.

3.4OperationandMaintenance

Operationandmaintenanceshallfollowtheoperationandmaintenanceprocedures，andenable

3.4.1

operationandmaintenanceprocesstocomplywiththefunctionalsafetyrequirementsasspecifiedinthe

technicalspecificationforSIS.

ModificationsorchangesmadetothehardwareandapplicationsoftwareofSISshallfollowthe

3.4.2人人文庫

managementofchanges（MOC）procedure，theyshallbeauthorizedandapprovedinaccordancewith

MOCapprovalprocedure，thedesignedSILshallnotbechanged，andMOCrecordsshallberetained.

Trainingshallbeprovidedfortheoperationandmaintenancestaffsonaregularbasis，and

3.4.3

trainingcoursesshouldincludeSISfunctions，preventableprocesshazards，sensorsandfinalelements，

SISlogicactions，alarmsetpointsofSISandprocessvariables，andresponseafterSISisactivated.

FunctionaltestintervalsshallbedeterminedbasedonSIStechnicalrequirements，and

3.4.4

functionaltestsshallbemadeinaccordancewithSIStestprocedures.

SISdecommissioningshallbereviewedandapproved.SISupdateproceduresshallbe

3.4.5

developedasrequired，andtheupdatedSISshallachievethespecifiedSIFs.

·6·

4SafetyIntegrityLevel

4.1GeneralRequirements

Safetyintegrityshouldbecomprisedofhardwaresafetyintegrityandsystemsafetyintegrity.

4.1.1

SafetyintegritylevelsmayincludeSIL1，SIL2，SIL3andSIL4.

4.1.2

Inlowdemandmode，thesafetyintegritylevelofsafetyinstrumentedfunctionsshallbemeasured

4.1.3

bytheprobabilityoffailureondemandaverage，andshouldbedeterminedinaccordancewithTable4.1.3.

Table4.1.3Safetyintegritylevelofsafetyinstrumentedfunction（lowdemandmode）

SafetyintegritylevelSIL）Probabilityoffailurelowdemandmode）ondemandaveragePFD）

（（（avg

≥10-5且＜10-4

4

≥10-5to＜10-4

≥10-4且＜10-3

3

≥10-4to＜10-3

≥10-3且＜10-2

2

≥10-3專用to＜10-2

≥10-2且＜10-1

1

≥10-2to＜10-1

Inhighdemandmode，thesafetyintegritylevelofsafetyinstrumentedfunctionsshallbe

4.1.4

measuredbytheprobabilityoffailureondemandaverage，andshouldbedeterminedinaccordancewith

Table4.1.4.

Table4.1.4Safetyintegritylevelofsafetyinstrumentedfunction（highdemandmode）

Safetyintegritylevel（SIL）Frequencyofdangerousfailure（highdemandmode）（perhour）

≥10-9且＜10-8

4

≥10-9to＜10-8

≥10-8且＜10-7

3

≥10-8to＜10-7

≥10-7且＜10-6

2

人人文庫≥10-7to＜10-6

≥10-6且＜10-5

1

≥10-6to＜10-5

4.2SafetyIntegrityLevelAssessment

SILassessmentshouldincludethefollowingcontents：

4.2.1

TodeterminetheSILforeachsafetyinstrumentedfunction.

1

Todeterminethediagnosis，maintenanceandtestingrequirements.

2

ThemethodsusedtoassesstheSILshallbedeterminedbasedontheprocesscomplexity，the

4.2.2

·7·

currentnationalstandards，riskcharacteristics，riskreductionmethodsandstaffexperiences.Main

assessmentmethodsshallbelayerofprotectionanalysismethod，riskmatrixmethod，calibratedrisk

graphmethod，empiricalmethodorotherpropermethods.

ReviewmeetingshouldbeusedforassessingtheSIL.Maindocumentsforreviewshould

4.2.3

includeP&IDs，processdescription，plantandequipmentlayouts，hazardousareaclassification

drawings，safetyinterlockcauseandeffectdiagramsandotherrelateddocuments.Andthemainstaffs

--

involvedinSILassessmentshouldbesourcedfromprocess，processcontrol（instrument），HSE，

equipment，processoperationandmanagementdisci