《BS EN 50129-2003 中文版 铁路应用 -通信、信号和处理系统-信号的安全相关电子处理系统.pdf》由会员分享,可在线阅读,更多相关《BS EN 50129-2003 中文版 铁路应用 -通信、信号和处理系统-信号的安全相关电子处理系统.pdf(187页珍藏版)》请在三一文库上搜索。
1、Page 1 of 187 EN 50129:2003 British Standard ? A single copy of this British Standard is licensed to FELIX HERZING 23 May 2003 ? FELIX HERZING 2003 ? 5? 23? This is an uncontrolled copy. Ensure use of the most current version of this document by searching British Standards Online at bsonline.techind
2、ex.co.uk ? bsonline.techindex.co.uk ? ? Page 2 of 187 EN 50129:2003 BRITISH STANDARD ? BS EN 50129:2003 Railway applications Communication, signalling and processing systems Safety related electronic systems for signalling ? ? ? ? ? The European Standard EN 50129:2003 has the status of a British Sta
3、ndard ? EN 50129:2003 ? ICS 93.100 NO COPYING WITHOUT BSI PERMISSION EXCEPT AS PERMITTED BY COPYRIGHT LAW ? ? ? BSI Page 3 of 187 EN 50129:2003 BS EN 50129:2003 ISBN 0 580 418146 National foreword ? This British Standard is the official English language version of EN 50129:2003. ? 50129:2003 ? The U
4、K participation in its preparation was entrusted by Technical Committee GEL/9, Railway electrotechnical applications, to Subcommittee GEL/9/1, Signalling and communications, which has the responsibility to: ?aid enquirers to understand the text; ?present to the responsible international/European com
5、mittee any enquiries on the interpretation, or proposals for change, and keep the UK interests informed; ?monitor related international and European developments and promulgate them in the UK. ? GEL/9? ? ? GEL/9/1? ? ?/? ? ? A list of organizations represented on this subcommittee can be obtained on
6、 request to its secretary. ? Cross-References ? The British Standards which implement international or European publications referred to in this document may be found in the BSI Catalogue under the section entitled “International Standards Correspondence Index”, or by using the “Search” facility of
7、the BSI Electronic Catalogue or of British Standards Online. ? BSI? ? BSI ? This publication does not purport to include all the necessary provisions of a contract. Users are responsible for its correct application. ? ? ? Compliance with a British Standard does not of itself confer immunity from leg
8、al obligations. ? Page 4 of 187 EN 50129:2003 This British Standard was published under the authority of the Standards Policy and Strategy Committee on 7 May 2003 ? ? 2003 ? 5 ? 7 ? BSI 7 May 2003 ISBN 0 580 41814 6 Summary of pages ? This document comprises a front cover, an inside front cover, the
9、 EN title page, pages 2 to 94, an inside back cover and a back cover. ? ? ? ? 94 ? ? The BSI copyright date displayed in this document indicates when the document was last issued.? ? ? ? ? Amendments issued since publication ? ? ? Page 5 of 187 EN 50129:2003 EUROPEAN STANDARD EN 50129 February 2003
10、?EN 50129 2003?2? ICS93: 100Supersedes ENV 50129:1998 ?ENV 50129:1998 Railway applications Communications, signalling and processing systems Safety related electronic systems for signaling ? ? ? ? ? This European Standard was approved by CENELEC on 2002-12-01. CENELEC members are bound to comply wit
11、h the CEN/CENELEC Internal Regulations which stipulate the conditions for giving this European Standard the status of a national standard without any alteration. ?2002?12?01?CENELEC?CENELEC?CENELEC ? Up-to-date lists and bibliographical references concerning such national standards may be obtained o
12、n application to the Central Secretariat or to any CENELEC member. ?CENELEC? ? This European Standard exists in three official versions (English, French, German). A version in any other language made by translation under the responsibility of a CENELEC ? Page 6 of 187 EN 50129:2003 member into its o
13、wn language and notified to the Central Secretariat has the same status as the official versions. ?CENELEC? ? ? ? CENELEC members are the national electrotechnical committees of Austria, Belgium, Czech Republic, Denmark, Finland, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Luxembourg,
14、 Malta, Netherlands, Norway, Portugal, Slovakia, Spain, Sweden, Switzerland and United Kingdom. CENELEC? ? ? CENELEC European Committee for Electrotechnical Standardization ? Central Secretariat?: rue de Stassart 35, B ? 1050 Brussels ? 2003 CENELEC? All rights of exploitation in any form and by any
15、 means reserved worldwide for CENELEC members. 2003 CENELEC CENELEC? Ref. No. EN 50129:2003 E ? Page 7 of 187 EN 50129:2003 Foreword? This European Standard was prepared by SC 9XA, Communication, signalling and processing systems, of Technical Committee CENELEC TC 9X, Electrical and electronic appli
16、cations for railways. ?CENELEC TC 9X? ?SC 9XA? The text of the draft was submitted to the formal vote and was approved by CENELEC as EN 50129 on 2002-12- 01. ?2002?12?01?CENELEC? 50129? This European Standard supersedes ENV 50129: 1998. ?ENV50129?1998? This European Standard was prepared under a man
17、date given to CENELEC by the European Commission and the European Free Trade Association and supports the essential requirements of Directive 96/48/EC. ?CENELEC? 96/48/EC? The following dates were fixed: ? latest date by which the EN has to be implemented at national level by publication of an ident
18、ical national standard or by endorsement (dop) 2003-12-01 latest date by which the national standards conflicting with the EN have to be withdrawn(dow) 2005-12-01 ?EN? ?(dop) 2003-12-01 ?EN?(dow) 2005-12-01 Annexes designated “normative” are part of the body of the standard. Annexes designated “info
19、rmative” are given for information only. In this standard, Annexes A, B and C are normative and Annexes D and E are informative. ? ? ? A?B?C ? D ? E ? ? Page 8 of 187 EN 50129:2003 ? ? ? 13 ?. 14 ?. 16 3.1Definitions ? 16 3.2Abbreviations 27 ? ?. 28 ?. 30 5.1? 30 5.2?. 33 5.3Evidence of safety manag
20、ement ? 37 5.4Evidence of functional and technical safety ? 44 5.5Safety acceptance and approval ?. 48 ? A. 57 A.1 Introduction?. 57 A.2 Safety requirements ?. 57 A.3 Safety integrity ?. 59 A.4 Allocation of safety integrity requirements? 61 A.5 Safety Integrity Levels ? 78 ? B. 84 B.1 ? 84 B.2 ? 85
21、 B.3 ?. 90 B.4 ?101 B.5 ?.106 B.6?113 ? C115 C.1 ?.115 C.2 ?115 C.3 ?.116 C.4 ?.117 C.5 ?.118 C.6 ?.119 C.7 ?.120 ? D148 D.1 Introduction?148 D.2 Achievement of physical internal independence ?.148 D.3 Achievement of physical external independence ?151 ? Page 9 of 187 EN 50129:2003 D.4 Example of a
22、method for single-fault analysis ?153 D.5 Example of a method for multiple-fault analysis ?155 ? E164 ? 1 ? CENELEC ? 14 ? 2 EN 50129 ? 29 ? 3 ?. 33 ? 4 ?. 36 ? 5 ? 38 ? 6 ? 40 ? 7 ?. 48 ? 8 ?. 53 ? 9 ?/?. 56 ? A. 1 ? 58 ? A. 2 ?. 62 ? A. 3 ? 64 ? A. 4 ?. 66 ? A. 5 ? 71 ? A. 6 ? 73 ? A. 7 ? FAT ? 76
23、 ? A. 8 SILs?. 81 ? B. 1 ? 96 ? B. 2 ?.100 ? D. 1 ?158 ? A. 1 SIL ?. 82 ? C.1 ?.130 ? C.2 ?.131 ? C.3 ?.132 ? C.4 ?.135 ? C.5 ?.136 ? C.6 ?138 ? C.7 ?140 ? C.8 ?141 ? C.9 ?.142 ? C.10 ?143 ? C.11 ?.145 ? C.12 ?/?145 ? Page 10 of 187 EN 50129:2003 ? C.13 ?.146 ? C.14 ?.146 ? C.15 ?.146 ? C.16 ?147 ?
24、D. 1 - ? n? 2 ? ? ?.159 ? E. 1- ?.168 ? E. 2?5.3.6?.169 ? E. 3 - ?5.3.3?170 ? E. 4 -?/?/?171 ? E. 5 - ?172 ? E. 6?176 ? E. 7 - ?/?/?.177 ? E. 8 - ?.178 ? E. 9 - ?.178 ? E. 10 - ?.181 ? Page 11 of 187 EN 50129:2003 Introduction ? This document is the first European Standard defining requirements for
25、the acceptance and approval of safety-related electronic systems in the railway-signaling field. Until now only some differing national recommendations and general advice of the UIC (International Union of Railways) on this topic were in existence. ? ? UIC? ? Safety-related electronic systems for si
26、gnaling include hardware and software aspects. To install complete safety-related systems, both parts within the whole life-cycle of the system have to be taken into account. The requirements for safety-related hardware and for the overall system are defined in this standard. Other requirements are
27、defined in associated CENELEC standards. ? ? ? CENELEC? ? The aim of European railway authorities and European railway industry is to develop compatible railway systems based on common standards. Therefore cross-acceptance of Safety Approvals for sub-systems and equipment by the different national r
28、ailway authorities is necessary. This document is the common European base for safety acceptance and approval of electronic systems for railway signaling applications. ? ? ? Cross-acceptance is aimed at generic approval, not specific applications. Public procurement within the European Community con
29、cerning safety-related electronic systems for railway signaling applications will in future refer to this standard when it becomes an EN. ? EN ? ? The standard consists of the main part (Clause 1 to Clause 5) and Annexes A, B, C, D and E. The requirements defined in the main part of the standard and
30、 in Annexes A, B and C is normative, whilst Annexes D and E are informative. ? 1 ? 5? A?B?C?D?E ? ? A?B?C ? D ? E ? ? Page 12 of 187 EN 50129:2003 This standard is in line with, and uses relevant sections of EN 50126: “Railway applications: The Specification and Demonstration of Dependability- Relia
31、bility, Availability, Maintainability and Safety (RAMS)“. This standard and EN 50126 are based on the system life-cycle and are in line with EN 61508-1, which is replaced by the set of EN 50126/EN 50128/EN 50129, as far as Railway Communication, Signaling and Processing Systems are involved. Meeting
32、 the requirements in these standards is sufficient to ensure that further compliance to EN 61508-1 need not be evaluated. ? EN 50126? ?RAMS? ? ? ? EN 50126 ? ? EN 50126 ? EN 61508-1 ? EN 61508-1 ? EN 50126/EN/ 50128/EN 50129 ? ? EN 61508 ? Because this standard is concerned with the evidence to be p
33、resented for the acceptance of safety related systems, it specifies those life-cycle activities which shall be completed before the acceptance stage, followed by additional planned activities to be carried out after the acceptance stage. Safety justification for the whole of the life-cycle is theref
34、ore required. ? ? ? ? ? This standard is concerned with what evidence is to be presented. Except where considered appropriate, it does not specify who should carry out the necessary work, since this may vary in different circumstances. ? ? For safety-related systems, which include programmable elect
35、ronics, additional conditions for the software are defined in EN 50128. ? EN 50128 ? Additional requirements for safety-related data communication are defined in EN 50159-1 and EN 50159-2. ? EN 50159-1 ? EN 50159-2 ? ? Page 13 of 187 EN 50129:2003 ? ? ? This standard is applicable to safety-related
36、electronic systems (including sub-systems and equipment) for Railway signaling applications. ? ? The scope of this standard, and its relationship with other CENELEC standards, are shown in Figure 1. ? 1 ? CENELEC ? Thisstandard is intended to apply to all safety-related railway signaling systems/sub
37、-system/equipment. However, the hazard analysis and risk assessment processes defined in EN 50126 and this standard are necessary for all railways signaling systems/sub-systems/equipment, in order to identify any safety requirements. If analysis reveals that no safety requirements exist (i.e.: that
38、the situation is non-safety related), and provided the conclusion is not revised as a consequence of later changes, this safety standard ceases to be applicable. ?/?/? ?/?/? EN 50126 ? ? ? ? ? ? ? This standard applies to the specification, design, construction, installation, acceptance, operation,
39、maintenance and modification/extension phases of complete signaling systems, and also to individual sub-systems and equipment within the complete system. Annex C includes procedures relating to electronic hardware components. ?/? ? C ? ? This standard applies to generic sub-systems and equipment (bo
40、th application-independent and those intended for a particular class of application), and also to systems/sub-systems/equipment for specific applications. ? ? ?/?/? This standard is not applicable to existing systems/sub-systems/equipment (i.e. those that had already been accepted prior to the creation of this standard). However, as far as reasonably practicable, this standa