Specification SIL2 – SIL3 Fire and Gas Panel.
Overview
The Fire and Gas control panels for the _____________ project shall be designed, procured,
engineered, FAT tested and supplied and commissioned in accordance with the specification listed
below.
Approvals
The Fire and Gas control panels for the project shall be certified to IEC 61508 1-7 as SIL2 and SIL 3,
EN54, CE marked and certified to the CPD directive by a major notified certification body.
Enclosure
The Fire and Gas Control Panel shall be 19” rack mount and be mounted within a suitable enclosure
that also houses the Control racks, Power Supply and Batteries within a common enclosure
Central Processing Unit
The F&G Panel shall be provided with redundant CPU’s that are hot swappable, each CPU shall have
a dual redundant control BUS, a 16 bit CPU and have separate watchdog controllers for each CPU. All
programmable data and the operating system shall be held in non-volatile FLASH RAM. Should a
CPU be HOT swapped the currently operating CPU will transfer, automatically, the system
configuration to the newly fitted controller to enable hot swappable operation.
The system shall be fitted with double Ethernet ports to allow programming and retrieval of data
and control information.
Fire Detection
All Fire Detection Modules and equipment within the F&G Panel shall be up to SIL2 and SIL3
certified by a major notified body. Input types shall be via either 4-20mA, Addressable Loop, or
conventional inputs. For SIL2 rated functions single I/Os or single addressable shall be used, while
for SIL3 rated functions redundant I/Os shall be used.
Gas Detection
All Gas Detection Modules and equipment within the F&G Panel shall be up to SIL2 and SIL3 certified
by a major notified body. Input types shall be via either 4-20mA, or conventional inputs. For SIL2
rated functions single I/Os shall be used, while for SIL3 rated functions redundant I/Os shall be used.
Alarm Actuation and Control
Actuations and controls within the F&G panel shall be up to SIL2 and SIL3 certified by a major
notified body. Actuation of outputs shall be via either conventional direct pulse monitoring, polarity
reversal monitoring, relay output or addressable output. For SIL2 rated functions single conventional
output or single addressable shall be used, while for SIL3 rated functions conventional redundant
output shall be used.
Extinguishing Module
The Extinguishing module shall be certified to EN12094-1 and be capable of providing suppression
control for up to 64 suppression zones within the one panel.
Extinguishing solution obtained with these modules shall be up to SIL2 and SIL3 certified by a major
notified body. For SIL2 rated functions single module shall be used, while for SIL3 rated functions
redundant modules shall be used.
Power Supply
Power supplies sized according to the load requirements of the project. PSU’s will be housed within
the F&G panel and shall be dual redundant and hot swappable. Hot swapping of one power supply
shall not affect the full functionality of the system. The Batteries for the F&G system shall be
incorporated within the same enclosure as the racks and control system.
Power supply system must be certified to EN54-4 by a notified body.
Programming
Configuration and control software shall operate on a Windows Based PC via a TCP/IP protocol or a
direct RS232 connection and be able to communicate via a LAN or WAN or a Serial Lead.
Operator Interface
The operator interface shall be password controlled and the display shall be at least 320 x 128 pixels.
It shall be of a dust proof design and Led to identify Alarm, Power, Fault, Sounder Disabled, Devices
Disables and Outputs Delayed as a minimum. Buttons shall be provided for Sounder Silence, Panel
silence, Reset, Evacuation, Scroll and assigned function keys.
Networking
The system shall be able to network up to a maximum of 64 panels. Networking between panels
will be via redundant Fabre Optic Network. The networking functionality shall also communicate via
a Modbus protocol.
The system will also be able to communicate with third-part supervisory systems (DCS or SCADA)
using OPC Server or Modbus interface.
Input and Output Cards
Input and Output control cards associated with the system shall be approved for SIL2 and SIL 3
operation. The Suppression Control System for the F&G panel shall be SIL2 and SIL3 Certified.
Operational Temperature shall be -5 to 50degrees Celsius and operational humidity range shall be 5
to 95% non-condensing.
Individual control cards shall be rack mounted and be removable from the front of the rack,
Control cards shall be hot swappable. Hot swap of one card shall not affect the functionality of
the rest of the system.
All control cards shall be self-checking and also be monitored and checked by the system for both
configuration and faults.
The system shall be configurable to a maximum 130 I/O cards divided into 10 racks. The maximum
number of configurable zones for safety shall be 300 and the maximum number of inputs shall be up
to 99, outputs up to 99, and configurable cause and effect rules up to 99 per zones.
Card types shall as a minimum be able to address the following requirements;
• Conventional Input Cards
o 8 Channel conventional Input Card that shall be able to monitor the line.
o Each channel shall have two LEDs showing alarm or pre-alarm condition and fault
condition.
o Line monitoring shall be able to detect open circuit and short circuit.
o Each channel shall be able to detect and differentiate pre-alarm and alarm condition
at two different current thresholds. The thresholds shall be programmable in each
channel using the programming software. These settings shall be stored inside the
conventional input cards memory as well as in the main CPUs.
o To avoid false alarms 0065ach channel shall have an alarm verification routine, such
routine shall be selected to be active or not in each channel. Such routine shall work
as follows: in case a line goes into alarm/pre-alarm, the line is reset for a few
seconds (one cycle off-on), if the line is in alarm/pre-alarm condition after the reset
it shall be considered to be in verified alarm/pre-alarm, otherwise no alarm is given.
o Each line shall be programmable to be latching or non-latching, normally open or
normally closed.
o Each line shall be assigned to one and only one of the followings: Fire alarm, Gas
alarm, Supervisory, Fault, Hidden or Voiced alarm. Management of these different
alarms shall be automatically executed by the panel according to the applicable
reference standard.
o Each line shall be programmable to be auto-resetting after a given time, this time
shall be settable per each zone.
o Conventional inputs shall be used as the input part of a full SIL function achieving
SIL2 rating in single configuration and SIL3 rating in redundant configuration.
• Analogue input cards
o Single channel 4-20mA Input Card – this card is to incorporate an internal digital
display to show , PPM, mA, %LEL, Oxy%, Deg. C or any other scaling range and
include 2 Alarm LED’s and a fault LED together with a function to set the SPAN
function.
o A dual channel 4-20mA Input Card – this card is to incorporate an internal digital
display where each display can be individually configured to show PPM, mA, %LEL,
Oxy%, Deg C or any other scaling range and include 2 Alarm LED’s and a fault LED’s.
o An 8 channel analogue input card that provides LED’s for alarm and fault for each
channel. The analogue input shall be computed by 3 microprocessors.
o All nominal 4-20mA analogue inputs shall read a current range from 0 - 24mA. Value
in a range between 0 and 1mA shall be considered as open circuit fault; values in a
range between 1 and 3.7mA shall be considered as fault in the device, values above
22mA shall be considered as short circuit fault. The 3.7mA fault threshold shall be
programmable via the main HMI.
o Pre-Alarm and Alarm thresholds, scaling of signal into engineered value shall be
settable using the programming software. These settings shall be stored inside the
analogue input cards memory as well as in the main CPUs.
o To avoid false alarms each channel shall have a settable alarm delay option.
o Each line shall be assigned to one and only one of the followings: Fire alarm, Gas
alarm, Supervisory, Fault, Hidden or Voiced alarm. Management of these different
alarms shall be automatically executed by the panel according to the applicable
reference standard.
o Analogic values shall be repeated to any one of the followings: host PC through
TCP/IP as OPC server, Modbus link. Format of the value to be repeated shall be
selectable via programming SW.
o Each line shall be programmable to be auto-resetting after a given time, this time
shall be settable per each zone.
o Analogue inputs shall be used as the input part of a full SIL function achieving SIL2
rating in single configuration and SIL3 rating in redundant configuration
• Direct Monitored Output Cards
o 8 channels output card that provide for 8 separately configurable output 500mA
lines or;
o 4 channels output card that provide for 4 separately configurable output 2.0 A lines.
o Monitoring shall be achieved using directly injected short current pulses (less the
300microsecs) to detect the proper connection of cables to the field device, but
without energy enough to actuate it.
o Parallel connection shall be allowed for up to 4 channels to achieve higher current
outputs: 2A for the 8 channel card and 8A for the 4 channels card.
o Each output shall be separately programmable to at least operate in one of the
following modes: Fixed typically energized, Fixed typically de-energized, Periodic,
Pulsed, Pulsed retained.
o Each output shall be programmable to be the actuation of a sounder: in such a case
the management of the output (silencing and acknowledging) shall be automatically
executed by the panel according to the applicable reference standard, without need
of additional programming.
o For each output it shall be possible to program the status in which the output shall be
operated in case of failure (fail-safe status) as frozen or OFF.
o Direct monitored outputs shall be used as the actuation part of a full SIL function
achieving SIL2 rating in single configuration and SIL3 rating in redundant
configuration.
• Polarity reversal Monitored Output Cards
o 8 channels output card that provide for 8 separately configurable output 250mA lines;
o Monitoring shall be achieved using polarity reversal of the line with current flowing
in counter direction to detect the proper connection of cables to the field device,
when output isn’t actuated.
o Additional current shall be achieved by means of special relay assemblies capable of
keeping the monitoring in polarity reversal condition, while using relay contact
current rating to actuate the output.
o Each output shall be separately programmable to at least operate in one of the
following modes: Fixed typically energized, Fixed typically de-energized, Periodic,
Pulsed, Pulsed retained.
o Each output shall be programmable to be the actuation of a sounder: in such a case
the management of the output (silencing and acknowledging) shall be automatically
executed by the panel according to the applicable reference standard, without need
of additional programming.
o For each output it shall be possible to program the status in which the output shall be
operated in case of failure (fail-safe status) as frozen or OFF.
o Polarity reversal monitoring cards shall not be used as part of a SIL function.
• Non Monitored Output Cards
o 16 channels output card that provide for 16 separately configurable open collector
output;
o The total current output shall be at least 500mA.
o Additional current shall be achieved by means of relays.
o Each output shall be separately programmable to at least operate in one of the
following modes: Fixed typically energized, Fixed typically de-energized, Periodic,
Pulsed, Pulsed retained.
o Each output shall be programmable to be the actuation of a sounder: in such a case
the management of the output (silencing and acknowledging) shall be automatically
executed by the panel according to the applicable reference standard, without need
of additional programming.
o For each output it shall be possible to program the status in which the output shall be
operated in case of failure (fail-safe status) as frozen or OFF.
o Non monitored output cards shall not be used as part of a SIL function.
• Addressable fire detection card
o Each card shall be able to control one fire detection addressable loop.
o Each system shall be able to accommodate up to 130 addressable loops.
o It shall be possible to install up to 126 devices per loop.
o It shall be possible to assign devices installed within one loop to different zones
independently from their address, using the programming software.
o The card shall incorporate all controls and functions available on every device
installable in the addressable loop, comprehending: reading of analogic value
(where applicable), interrogating the device, interpreting all the diagnostic routines.
o The addressable fire card shall be SIL2 certified within the SIL2/SIL3 system.
o SIL2 certified addressable detection devices (e.g smoke/heat detectors, manual call
points etc.) shall be used as input part of a full SIL function achieving SIL2 rating
o SIL2 certified addressable actuation devices (e.g. beacons, sounders etc.) shall be
used as outut part of a full SIL function achieving SIL2 rating
• Control Cards
o Extinguishing Control Card, certified to SIL2 in single configuration and SIL3 in
redundant configuration, performing all required controls and actuations for an
extinguishing function
o Programmable Logic Control Card – able to provide up to 100 separate functions
such as: timers, flip-flop, toggle etc.
o Modbus Protocol Serial Communications Card up to 32 x 16 bit words available
o Relay Cards – for use to control various output controls
o Mimic Display Module to provide a LCD display of the system operation
The system shall be FAT tested in conjunction with the local supplier prior to shipment to site.