CSA序言这是第61800-5-2号CSA C22.2《可调速电力驱动系统-第5-2部分:安全要求-功能》的第一版，与加拿大的不同之处在于，该版本采用了同名的IEC（国际电工委员会）标准61800-5-2（第二版，2016-04）。它是CSA集团根据《加拿大电气规范》第二部分发布的一系列标准之一。为简洁起见，本标准通篇称为“CSA C22.2 No.61800-5-2”。 在使用本标准进行合格评定之前，可调速电力驱动系统需要符合CSA C22.2第274-17号《可调速驱动》中的要求。本标准被认为适用于本标准规定范围内的合格评定。本标准是根据加拿大标准委员会对加拿大国家标准的要求制定的。CSA集团已将其发布为加拿大国家标准。 范围作为产品标准的IEC 61800的本部分规定了安全相关电力驱动系统（PDS（SR））在功能安全方面的设计和开发、集成和验证要求，并提出了建议。它适用于IEC 61800-2中提及的IEC 61800系列标准其他部分所涵盖的可调速电力驱动系统。注1:“集成”一词是指PDS（SR）本身，而不是将其纳入安全系统- 相关应用。注2:IEC 61800的其他部分包括额定值规范、EMC、电气安全等。本国际标准适用于声称PDS（SR）的功能安全，并且PDS（SR）主要在高需求或连续模式下运行的情况（见3.15）。虽然PDS（SR）可以采用低需求模式操作，但本标准专注于高需求和连续模式。为高需求或连续模式实现的安全子功能也可用于低需求模式。 IEC 61508系列中给出了低需求模式的要求。附录F中提供了估计按需危险故障平均概率（PFDavg）值的一些指南。IEC 61800的这一部分根据IEC 61508的框架规定了PDS（SR）的安全相关考虑，并介绍了PDS（SR）作为安全相关系统子系统的要求。其旨在促进实现PDS（SR）中与安全子系统安全性能相关的电气/电子/可编程电子（E/E/PE）部分- PDS的功能。PDS（SR）的制造商和供应商将使用IEC 61800本部分的规范性要求，向用户（系统集成商、原始设备制造商）指示其设备的安全性能。这将有助于使用IEC 61508的原则将PDS（SR）纳入安全相关控制系统，并可能其特定的部门实施（例如IEC 61511、IEC 61513、IEC 62061或ISO 13849）。通过应用IEC 61800系列本部分的要求，满足了PDS（SR）所需的IEC 61508的相应要求。 IEC 61800本部分未规定以下要求:特定应用的危害和风险分析；识别该应用的安全子功能；SIL对这些安全子功能的初始分配；驱动设备，接口布置除外；二次危险（例如生产或制造过程中的故障）；电气、热力和能源安全考虑，见IEC 61800-5-1；PDS（SR）制造工艺； PDS（SR）信号和命令的有效性。安全方面（例如网络安全或PDS（SR）访问安全）注3 PDS（SR）的功能安全要求取决于应用程序，可以视为装置整体风险评估的一部分。如果PDS（SR）供应商不负责驱动设备，则安装设计师负责风险评估，并指定PDS（SR）的功能和安全完整性要求。 IEC 61800的本部分仅适用于在SIL不大于SIL 3的情况下实施安全子功能的PDS（SR）。图1显示了IEC 61800本部分中考虑的PDS（SR）的安装和功能部分，并显示了PDS（SR）的逻辑表示，而不是其物理描述。

CSA PrefaceThis is the first edition of CSA C22.2 No. 61800-5-2, Adjustable speed electrical power drive systems - Part 5-2: Safety requirements - Functional, which is an adoption, with Canadian deviations, of the identically titled IEC (International Electrotechnical Commission) Standard 61800-5-2 (second edition, 2016-04). It is one in a series of Standards issued by CSA Group under Part II of the Canadian Electrical Code. For brevity, this Standard will be referred to as "CSA C22.2 No. 61800-5-2" throughout. Adjustable speed electrical power drive systems will need to comply with the requirements within CSA C22.2 No. 274-17, Adjustable speed drives, prior to using this Standard for conformity assessment. This Standard is considered suitable for use for conformity assessment within the stated scope of the Standard. This Standard has been developed in compliance with Standards Council of Canada requirements for National Standards of Canada. It has been published as a National Standard of Canada by CSA Group.ScopeThis part of IEC 61800, which is a product standard, specifies requirements and makes recommendations for the design and development, integration and validation of safety related power drive systems (PDS(SR)) in terms of their functional safety considerations. It applies to adjustable speed electrical power drive systems covered by the other parts of the IEC 61800 series of standards as referred in IEC 61800-2.NOTE 1 The term "integration" refers to the PDS(SR) itself, not to its incorporation into the safety-related application.NOTE 2 Other parts of IEC 61800 cover rating specifications, EMC, electrical safety, etc. This International Standard is applicable where functional safety of a PDS(SR) is claimed and the PDS(SR) is operating mainly in the high demand or continuous mode (see 3.15). While low demand mode operation is possible for a PDS(SR), this standard concentrates on high demand and continuous mode. Safety sub-functions implemented for high demand or continuous mode can also be used in low demand mode. Requirements for low demand mode are given in IEC 61508 series. Some guidance for the estimation of average probability of dangerous failure on demand (PFDavg) value is provided in Annex F. This part of IEC 61800 sets out safety-related considerations of PDS(SR) s in terms of the framework of IEC 61508, and introduces requirements for PDS(SR)s as subsystems of a safety-related system. It is intended to facilitate the realisation of the electrical/ electronic/programmable electronic (E/E/PE) parts of a PDS(SR) in relation to the safety performance of safety sub-function(s) of a PDS. Manufacturers and suppliers of PDS(SR)s by using the normative requirements of this part of IEC 61800 will indicate to users (system integrator, original equipment manufacturer) the safety performance for their equipment. This will facilitate the incorporation of a PDS(SR) into a safety-related control system using the principles of IEC 61508, and possibly its specific sector implementations (for example IEC 61511, IEC 61513, IEC 62061 or ISO 13849). By applying the requirements from this part of the IEC 61800 series, the corresponding requirements of IEC 61508 that are necessary for a PDS(SR) are fulfilled. This part of IEC 61800 does not specify requirements for:  the hazard and risk analysis of a particular application;  the identification of safety sub-functions for that application;  the initial allocation of SILs to those safety sub-functions;  the driven equipment except for interface arrangements;  secondary hazards (for example from failure in a production or manufacturing process); the electrical, thermal and energy safety considerations, which are covered in +IEC 61800-5-1;  the PDS(SR) manufacturing process;  the validity of signals and commands to the PDS(SR).  security aspects (e.g. cyber security or PDS(SR) security of access)NOTE 3 The functional safety requirements of a PDS(SR) are dependent on the application, and can be considered as a part of the overall risk assessment of the installation. Where the supplier of the PDS(SR) is not responsible for the driven equipment, the installation designer is responsible for the risk assessment, and for specifying the functional and safety integrity requirements of the PDS (SR). This part of IEC 61800 only applies to PDS(SR)s implementing safety sub-functions with a SIL not greater than SIL 3. Figure 1 shows the installation and the functional parts of a PDS(SR) that are considered in this part of IEC 61800 and shows a logical representation of a PDS(SR) rather than its physical description.