电梯、自动扶梯和自动人行道的电气要求.第6部分:自动扶梯和自动人行道安全相关应用中的可编程电子系统（PESSRAE）

[中文适用范围]： 1.1 本文件适用于住宅楼、办公室、医院、宾馆、工业厂房等使用的自动扶梯和自动人行道产品系列。 本文件涵盖了使用可编程电子系统执行电动操作时需要解决的那些方面。 自动扶梯和自动人行道的安全功能 (PESSRAE)。 本文件适用于在 PESSRAE 应用中参考本文件的自动扶梯和自动人行道规范、标准或法律中确定的自动扶梯和自动人行道安全功能。 本文件中规定的安全完整性等级 (SIL) 应理解为在参考书目中引用的自动扶梯和自动人行道规范、标准和法律的背景下对于 PESSRAE 应用有效。1.2 本文件也适用于新的或与本文件所述不同的 PESSRAE 应用。1.3 本文件对电气安全/保护装置的要求是，无需考虑符合本文件和其他相关标准所有要求的电气安全/保护装置发生故障的可能性。 本文件： a) 使用安全完整性等级（SIL）来规定 PESSRAE 实施的安全功能的目标故障率； b) 规定了实现功能安全完整性的要求，但没有规定谁负责实施和维护这些要求（例如，设计者、供应商、业主/运营公司、承包商）；根据安全规划和国家法规，该责任被分配给不同的各方； c) 适用于自动扶梯和自动人行道应用中使用的 PE 系统，满足公认的自动扶梯和自动人行道标准的最低要求，例如 EN 115、ASME A17.1/CSA B44 或日本建筑标准电梯执法令和自动扶梯； d) 定义了本文件与 IEC 61508 之间的关系，并定义了本文件与 ISO 22200 之间的关系； e) 概述自动扶梯和自动人行道安全功能及其安全状态条件之间的关系； f) 适用于特定于硬件和软件设计的阶段和活动，但不适用于设计后发生的阶段和活动，例如采购和制造； h) 提供与硬件和软件安全验证相关的要求； i) 建立特定自动扶梯和自动人行道安全功能的安全完整性等级； j) 规定实现规定的安全完整性水平所需的技术/措施；  k) 定义了根据本文档 PESSRAE 可以实现的最高性能级别 (SIL 3)，并定义了最低性能级别 (SIL 1)。1.4 本文件不涵盖： a) PE 系统设备本身引起的危险，如触电等； b) 当故障模式定义明确且复杂程度相对较低时，故障安全概念可能很有价值。 由于 PESSRAE 的复杂性都在本文件的范围内，因此故障安全的概念被认为是不合适的； c) PESSRAE 在自动扶梯和自动人行道安全功能中完整应用所需的其他相关要求，例如系统集成规范、温度和湿度、机械结构、包含 PESSRAE 的开关、执行器或传感器的安装和标签。 d) 可预见的滥用，涉及与恶意或未经授权的行为相关的安全威胁。 本文档可用于需要考虑安全威胁分析的情况，前提是已重新评估指定的 SIL。 [外文原描述]： 1.1 This document is applicable to the product family of escalators and moving walks used in residential buildings, offices, hospitals, hotels, industrial plants, etc. This document covers those aspects that need to be addressed when programmable electronic systems are used to carry out electric safety functions for escalators and moving walks (PESSRAE). This document is applicable for escalator and moving walk safety functions that are identified in escalator and moving walk codes, standards, or laws that reference this document for PESSRAE application. The safety integrity levels (SILs) specified in this document are understood to be valid for PESSRAE application in the context of the referenced escalator and moving walk codes, standards, and laws in the Bibliography. 1.2 This document is also applicable for the application of PESSRAE that are new or deviate from those described in this document. 1.3 The requirements of this document regarding electrical safety/protective devices are such that it is not necessary to take into consideration the possibility of a failure of an electric safety/protective device complying with all the requirements of this document and other relevant standards. This document: a) uses safety integrity levels (SIL) for specifying the target failure rate for the safety functions to be implemented by the PESSRAE; b) specifies the requirements for achieving safety integrity for a function but does not specify who is responsible for implementing and maintaining the requirements (for example, designers, suppliers, owner/operating company, contractor); this responsibility is assigned to different parties according to safety planning and national regulations; c) applies to PE systems used in escalator and moving walk applications that meet the minimum requirements of a recognized escalator and moving walk standards, such as EN 115, ASME A17.1/CSA B44 or The Japan Building Standard Law Enforcement Order For Elevator and Escalator; d) defines the relationship between this document and IEC 61508 and defines the relationship between this document and ISO 22200; e) outlines the relationship between escalator and moving walk safety functions and their safe-state conditions; f) applies to phases and activities that are specific to design of hardware and software but not the phases and activities which occur post design, for example sourcing and manufacturing; h) provides requirements relating to the hardware and software safety validation; i) establishes the safety integrity levels for specific escalator and moving walk safety functions; j) specifies techniques/measures required for achieving the specified safety integrity levels; k) defines a maximum level of performance (SIL 3) which can be achieved for a PESSRAE according to this document and defines a minimum level of performance (SIL 1). 1.4 This document does not cover: a) hazards arising from the PE systems equipment itself such as electric shock etc.; b) the concept of fail-safe that can be of value when the failure modes are well defined and the level of complexity is relatively low. The concept of fail-safe was considered inappropriate because of the full range of complexity of PESSRAE that are within the scope of this document; c) other relevant requirements necessary for the complete application of a PESSRAE in an escalator and moving walk safety function, such as system integration specifications, temperature and humidity, the mechanical construction, mounting and labelling of switches, actuators, or sensors that contain PESSRAE. d) foreseeable misuse involving security threats related to malevolent or unauthorized action. This document can be used in cases where a security threat analysis needs to be considered, provided that the specified SIL has been reassessed.