Experience with Safety Integrity Level (SIL) （安全完整性水平经验)）.pdf

Experience with Safety Integrity Level (SIL) Allocation in Railway Applications Peter Wigger Institute for Software, Electronics, Railroad Technology (ISEB), T‹V InterTraffic GmbH, a company of the T‹V Rheinland / Berlin-Brandenburg Group Abstract The paper presents methods for defining Safety Integrity Levels (SIL) for Railroad systems. Methods for determination of risk targets are presented. Experience from a project is given and practical ways to define a SIL are presented. 1. Introduction Probabilistic safety approaches are conquering more and more fields of application in safety tech- nology. Railroad technology is one of these areas. The European Standards prEN 50126 [2], EN 50128 [3], ENV 50129 [4] have introduced the concept of a probabilistic safety approach to rail- road technology. In many places, ideas have been taken from IEC 61508 [7]. Section two gives an overview on safety integrity levels in railroad technology and on methods. The third section pre- sents experience with methods for defining safety integrity levels by presenting an example, the assessment of the Copenhagen Metro ñ a driverless automatic system. Conclusions are drawn in the fourth section. 2. Safety Integrity Levels in Railroad Technology 2.1 Definition of Safety Integrity Level In the beginning of railroad technology the goal was to avoid accidents. Methods have been de- rived, e.g. to avoid braking of rails. Signalling systems have been introduced, to avoid collisions. The philosophy was to have methods, systems and procedures that prevent accidents. Obviously, this goal has ne