SISTEMA – the software utility for evaluation of

safety-related parts of control systems

What is SISTEMA capable of?

The SISTEMA software utility (Safety Integrity Software Tool for the Evaluation of Machine Applica-
tions) provides developers and testers of safety-related machine controls with comprehensive sup-
port in the evaluation of safety in the context of EN ISO 13849-1. The tool, which runs on Windows,
enables users to model the structure of the safety-related parts of control systems (SRP/CS) based
upon the "designated architectures", and ultimately permits automated calculation of the reliability
values at various levels of detail, including that of the attained Performance Level (PL).

Relevant parameters such as the risk parameters for determining the required performance level
(PLr), the category of the SRP/CS, measures against common-cause failures (CCF) on multi-
channel systems, the average component quality (MTTFd) and the average test quality (DC) of com-
ponents and blocks, are entered step by step in input dialogs. Once the required data have been
entered into SISTEMA, the results are calculated and displayed instantly. A practical advantage for
the user is that each parameter change is reflected immediately on the user interface with its impact
upon the entire system. Users are spared time-consuming consultation of tables and calculation of
formulae (calculation of the MTTFd by means of the "parts count" method, symmetrization of the
MTTFd for each channel, estimation of the DCavg, calculation of the PFH and PL, etc.), since these
tasks are performed by the software. This enables the user to vary parameter values and to assess
the effects of changes with little effort. The final results can be printed out in a summary document.

How is SISTEMA used?

SISTEMA processes basic elements from a total of six hierarchy levels:

 The project (PR),

 the safety function (SF),

 the subsystem (SB),

 the channel (CH)/test channel (TE),

 the block (BL) and

 the element (EL).

The relationship between them is shown briefly in Figure 1.

SISTEMA software utility (September 2011) page 1 of 4

www.dguv.de/ifa

Figure 1: Hierarchy levels considered in SISTEMA

The user first opens a project, after which he can define the machine/dangerous point which is to be
analysed. Finally, all required safety functions are assigned to the project. The safety functions can
be defined and documented by the user, and a PLr assigned to them. The PL actually attained by the
parameterized SRP/CS is determined automatically from the subsystems which – in a series
arrangement – execute the safety function. Each subsystem is based upon a designated architec-
ture from the standard, as a function of the selected Category. The architecture determines, among
other things, whether the control system is of single-channel, single-channel-tested or redundant
design, and whether a special test channel must be considered during evaluation. Each channel can
in turn be subdivided into any desired number of blocks, for which the user enters either an MTTFd
value and a DC value directly or, on the lowest hierarchy level, the values for the individual compo-
nents of which the block is composed.

User-friendly library functions complete SISTEMA's functionality. Many manufacturers of compo-

nents provide SISTEMA libraries of their products' data. The IFA's website is the best source of links
to these libraries. Users can however create libraries of their own, in which they can store subsys-
tems that they have developed themselves or frequently used components. Libraries can be used
either locally on the user's system or centrally by servers.

SISTEMA software utility (September 2011) page 2 of 4

www.dguv.de/ifa

The SISTEMA user interface

Figure 2: SISTEMA user interface

The SISTEMA user interface is divided into four areas (see Figure 2). The greater part of the inter-
face is occupied by the workspace in the centre. Depending upon which view is active, the work-
space contains an editable input dialog or a partial view of the overview document. The content of
the active view is determined by the basic element selected from the hierarchy described above, and
is selected from a tree view on the left-hand side. Each branch in the tree view represents one basic
element. Basic elements can be created, deleted, moved or copied in the tree view. The details of
the selected basic element are entered in the input dialog in the editing view. Each input dialog is
further sub-divided into different areas by tabs. The final tab in each input dialog contains a table
summarizing all lower-level branches and listing the main information. If, for example, the user has
marked a block in the tree view, this table shows all elements contained within it, together with their
MTTFd and DC values.

The tree view also shows status information for each basic element. The status information takes the
form of a coloured symbol adjacent to the branch. A red cross indicates that a condition of the stan-
dard is not satisfied, that a limit value is exceeded, or that a general inconsistency is present owing
to which a required value cannot be calculated. A warning is output in this case. A yellow symbol
indicates a non-critical message (e.g. a basic element has not yet been named). All other basic ele-
ments are marked with a green tick. The colour marking is also always inherited to the branches
higher up in the hierarchy, red having the highest and green the lowest priority. All warnings and
information concerning the active basic element are displayed in the message window below the
workspace.

SISTEMA software utility (September 2011) page 3 of 4

www.dguv.de/ifa

The area below the tree view shows the main context information for the selected basic element.
This information comprises the PL, PFH, MTTFd, DCavg and CCF of the higher-level subsystem, and
the PLr, PL and PFH of the higher-level safety function (this applies, of course, only to basic ele-
ments on lower hierarchy levels). The consequences of any changes to the displayed parameters
are thus displayed immediately to the user.

In addition to its flexibility, the SISTEMA user interface is notable for its ease of use and intuitive-
ness. Context help on the right-hand side facilitates the learning process. The wizard supplied with
the application offers further help: it supports new users step by step in the virtual modelling of their
control systems, and assures rapid access.

Where can SISTEMA and instructions for use be obtained from?

The SISTEMA software can be downloaded from the IFA's website www.dguv.de/ifa under Webcode
e34183. Following registration, the tool will be available as freeware for use and distribution free of
charge. The modification of SISTEMA is not permitted. SISTEMA is supplied in the following lan-
guages: English, German, French, Italian and Finnish. Further languages are to follow. Instructions
on the use of SISTEMA can be found in the SISTEMA cookbooks (Webcode e109249) and the help
file installed with SISTEMA. Up-to-date information and additional help for EN ISO 13849-1 can be
found under Webcode e89507 and at www.dguv.de/ifa/13849.

Contact:

Institut für Arbeitsschutz der

Deutschen Gesetzlichen Unfallversicherung (IFA)
Divsion 5.1
Dr Michael Huelke
Alte Heerstr. 111
53757 Sankt Augustin
Germany
E-Mail: [email protected]

SISTEMA software utility (September 2011) page 4 of 4