Nuclear power plants - Instrumentation and control important to safety - Development of HDL-programmed integrated circuits for systems performing category A functions

IEC 62566:2012 provides requirements for achieving highly reliable 'HDL-Programmed Devices' (HPD), for use in I&C systems of nuclear power plants performing functions of safety category A as defined by IEC 61226. The programming of HPDs relies on Hardware Description Languages (HDL) and related software tools. They are typically based on blank FPGAs or similar micro-electronic technologies.

Kernkraftwerke - Leittechnik für Systeme mit sicherheitstechnischer Bedeutung - Entwicklung HDL-programmierter integrierter Schaltkreise für Systeme, die Funktionen der Kategorie A ausführen

Centrales nucléaires de puissance - Instrumentation et contrôle-commande importants pour la sûreté - Développement des circuits intégrés programmés en HDL pour les systèmes réalisant des fonctions de catégorie A

La CEI 62566:2012 énonce des exigences pour atteindre une fiabilité élevée dans les 'circuits intégrés programmés en HDL' (HPD) destinés aux systèmes d'I&C des centrales nucléaires de puissance réalisant des fonctions de sûreté de catégorie A telles que définies par la CEI 61226. La programmation des HPD repose sur des Langages de Description de Matériel (HDL) et des outils logiciels associés. Ils sont typiquement basés sur des FPGA vierges ou des technologies micro-électroniques similaires.

Jedrske elektrarne - Instrumenti in krmilje, pomembni za varnost - Razvoj HDL-programiranih integriranih vezij za sisteme, ki izvajajo funkcije kategorije A (IEC 62566:2012)

Standard EN IEC 62566 določa zahteve za doseganje visoko zanesljivih HDL-programiranih naprav (HPD) za uporabo v merilni in nadzorni opremi jedrskih elektrarn, ki izvaja funkcije varnostne kategorije A, kot je opredeljeno v standardu IEC 61226. Programiranje HDL-programiranih naprav se izvaja na podlagi opisnega jezika za strojno opremo (HDL) in povezanih orodij programske opreme. Običajno temeljijo na praznih programirljivih poljih vrat (FPGA) ali podobnih mikroelektronskih tehnologijah. Integrirana vezja za splošne namene, kot so mikroprocesorji, niso HDL-programirane naprave. Ta standard določa zahteve za: a) ustrezen življenjski cikel razvoja, ki obravnava vsako fazo razvoja HDL-programiranih naprav, vključno s specifikacijo zahtev, zasnovo, izvajanjem, preverjanjem, integracijo in potrjevanjem, b) načrtovanje in dopolnilne dejavnosti, kot sta spreminjanje in proizvodnja, c) izbiro vnaprej razvitih komponent. To vključuje mikroelektronske vire (kot je prazni FPGA ali CPLD) in izjave HDL, ki predstavljajo vnaprej razvite bloke (PBD), d) uporabo načel enostavnosti in determinizma, ki so ključni za doseganje izvajanja »brez napak« funkcij kategorije A, e) orodja, ki se uporabljajo za zasnovo, izvajanje in preverjanje HDL-programiranih naprav. Ta standard ne postavlja zahtev za razvoj mikroelektronskih virov, ki so običajno na voljo kot »nabavljeni komercialni« elementi in niso razviti v skladu s standardi zagotavljanja kakovosti na področju jedrskih elektrarn. Obravnava razvojne dosežke s temi mikroelektronskimi viri v merilnem in nadzornem projektu s HDL-ji in povezanimi orodji. Ta standard podaja napotke, kako v čim večji meri preprečiti latentne napake, ki ostajajo v HDL-programiranih napravah, in zmanjša dovzetnost za posamezne odpovedi delovanja ter tudi za morebitne odpovedi iz normalnih razlogov (CCF). Zahteve v tem standardu glede jasne in izčrpne dokumentacije naj bi spodbudile učinkovito uporabo standarda IEC 62340. Vidiki zanesljivosti, povezani z okoljsko kvalifikacijo in odpovedmi zaradi staranja ali fizične degradacije, niso obravnavani v tem standardu. Drugi standardi, zlasti IEC 60987, IEC 60780 in IEC 62342, obravnavajo te teme. Točka 5.7 standarda IEC 60880:2006 vsebuje varnostne zahteve, ki se uporabljajo za razvoj HDL-programiranih naprav, kjer je to primerno.

General Information

Status
Published
Publication Date
28-Aug-2014
Withdrawal Date
03-Aug-2017
Drafting Committee
Current Stage
6060 - Document made available - Publishing
Start Date
29-Aug-2014
Completion Date
29-Aug-2014
Standard
EN 62566:2014
English language
55 pages
sale 10% off
Preview
sale 10% off
Preview
e-Library read for
1 day

Standards Content (Sample)


SLOVENSKI STANDARD
01-oktober-2014
Jedrske elektrarne - Instrumenti in krmilje, pomembni za varnost - Razvoj HDL-
programiranih integriranih vezij za sisteme, ki izvajajo funkcije kategorije A (IEC
62566:2012)
Nuclear power plants - Instrumentation and control important to safety - Development of
HDL-programmed integrated circuits for systems performing category A functions
Kernkraftwerke – Leittechnik für Systeme mit sicherheitstechnischer Bedeutung –
Entwicklung HDL-programmierter integrierter Schaltkreise für Systeme, die Funktionen
der Kategorie A ausführen
Centrales nucléaires de puissance - Instrumentation et contrôle-commande importants
pour la sûreté - Développement des circuits intégrés programmés en HDL pour les
systèmes réalisant des fonctions de catégorie A
Ta slovenski standard je istoveten z: EN 62566:2014
ICS:
27.120.20 Jedrske elektrarne. Varnost Nuclear power plants. Safety
2003-01.Slovenski inštitut za standardizacijo. Razmnoževanje celote ali delov tega standarda ni dovoljeno.

EUROPEAN STANDARD EN 62566
NORME EUROPÉENNE
EUROPÄISCHE NORM
August 2014
ICS 27.120.20
English Version
Nuclear power plants - Instrumentation and control important to
safety - Development of HDL-programmed integrated circuits for
systems performing category A functions
(IEC 62566:2012)
Centrales nucléaires de puissance - Instrumentation et Kernkraftwerke - Leittechnik für Systeme mit
contrôle-commande importants pour la sûreté - sicherheitstechnischer Bedeutung - Entwicklung HDL-
Développement des circuits intégrés programmés en HDL programmierter integrierter Schaltkreise für Systeme,
pour les systèmes réalisant des fonctions de catégorie A die Funktionen der Kategorie A ausführen
(CEI 62566:2012) (IEC 62566:2012)
This European Standard was approved by CENELEC on 2014-08-04. CENELEC members are bound to comply with the CEN/CENELEC
Internal Regulations which stipulate the conditions for giving this European Standard the status of a national standard without any alteration.
Up-to-date lists and bibliographical references concerning such national standards may be obtained on application to the CEN-CENELEC
Management Centre or to any CENELEC member.
This European Standard exists in three official versions (English, French, German). A version in any other language made by translation
under the responsibility of a CENELEC member into its own language and notified to the CEN-CENELEC Management Centre has the
same status as the official versions.
CENELEC members are the national electrotechnical committees of Austria, Belgium, Bulgaria, Croatia, Cyprus, the Czech Republic,
Denmark, Estonia, Finland, Former Yugoslav Republic of Macedonia, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia,
Lithuania, Luxembourg, Malta, the Netherlands, Norway, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden, Switzerland,
Turkey and the United Kingdom.

European Committee for Electrotechnical Standardization
Comité Européen de Normalisation Electrotechnique
Europäisches Komitee für Elektrotechnische Normung
CEN-CENELEC Management Centre: Avenue Marnix 17, B-1000 Brussels
© 2014 CENELEC All rights of exploitation in any form and by any means reserved worldwide for CENELEC Members.
Ref. No. EN 62566:2014 E
Foreword
This document (EN 62566:2014) consists of the text of IEC 62566:2012 prepared by SC 45A
"Instrumentation, control and electrical systems of nuclear facilities" of IEC/TC 45 "Nuclear
instrumentation".
The following dates are fixed:
– latest date by which this document has to be implemented (dop) 2015-08-04
at national level by publication of an identical
national standard or by endorsement
– latest date by which the national standards conflicting (dow) 2017-08-04
with this document have to be withdrawn

As stated in the nuclear safety directive 2009/71/EURATOM, Chapter 1, Article 2, item 2, Member
States are not prevented from taking more stringent safety measures in the subject-matter covered by
the Directive, in compliance with Community law. In a similar manner, this European standard does
not prevent Member States from taking more stringent nuclear safety measures in the subject-matter
covered by this standard.
Endorsement notice
The text of the International Standard IEC 62566:2012 was approved by CENELEC as a European
Standard without any modification.

- 3 - EN 62566:2014
Annex ZA
(normative)
Normative references to international publications
with their corresponding European publications
The following documents, in whole or in part, are normatively referenced in this document and are
indispensable for its application. For dated references, only the edition cited applies. For undated
references, the latest edition of the referenced document (including any amendments) applies.
NOTE 1 When an international publication has been modified by common modifications, indicated by (mod),
the relevant EN/HD applies.
NOTE 2 Up-to-date information on the latest versions of the European Standards listed in this annex is
available here: www.cenelec.eu.
Publication Year Title EN/HD Year
IEC 60671 - Nuclear power plants - Instrumentation and EN 60671 -
control systems important to safety -
Surveillance testing
IEC 60880 2006 Nuclear power plants - Instrumentation and EN 60880 2009
control systems important to safety -
Software aspects for computer-based
systems performing category A functions
IEC 60987 2007 Nuclear power plants - Instrumentation and EN 60987 2009
control important to safety - Hardware
design requirements for computer-based
systems
IEC 61513 2011 Nuclear power plants - Instrumentation and EN 61513 2013
control important to safety - General
requirement for systems
IEC 62138 - Nuclear power plants - Instrumentation and EN 62138 -
control important for safety - Software
aspects for computer-based systems
performing category B or C functions
IEC 62340 - Nuclear power plants - Instrumentation and EN 62340 -
control systems important to safety -
Requirements for coping with common
cause failure (CCF)
IAEA guide NS-G-1.3 2002 Instrumentation and control systems - -
important to safety in nuclear power plants

IEC 62566 ®
Edition 1.0 2012-01
INTERNATIONAL
STANDARD
NORME
INTERNATIONALE
Nuclear power plants – Instrumentation and control important to safety –

Development of HDL-programmed integrated circuits for systems performing

category A functions
Centrales nucléaires de puissance – Instrumentation et contrôle-commande

importants pour la sûreté – Développement des circuits intégrés programmés

en HDL pour les systèmes réalisant des fonctions de catégorie A

INTERNATIONAL
ELECTROTECHNICAL
COMMISSION
COMMISSION
ELECTROTECHNIQUE
PRICE CODE
INTERNATIONALE
CODE PRIX XA
ICS 27.120.20 ISBN 978-2-88912-896-9

– 2 – 62566  IEC:2012
CONTENTS
FOREWORD . 5
INTRODUCTION . 7
1 Scope and object . 10
1.1 General . 10
1.2 Use of this Standard . 10
2 Normative references . 11
3 Terms and definitions . 11
4 Symbols and abbreviations . 13
5 General requirements for HPD projects . 14
5.1 General . 14
5.2 Life-cycle. 14
5.3 HPD project management . 17
5.3.1 General . 17
5.3.2 Additional requirements . 17
5.4 HPD quality assurance plan . 17
5.5 Configuration management . 17
6 HPD requirements specification . 18
6.1 General . 18
6.2 Functional aspects of the requirement specification . 18
6.3 Deterministic design . 19
6.4 Fault detection and fault tolerance . 19
6.5 Requirements capture using Electronic System Level tools . 20
6.5.1 General . 20
6.5.2 Requirements on the formalism of tools used at ESL level . 20
6.5.3 Interface with design tools . 20
6.6 Requirements analysis and review . 20
7 Acceptance process for programmable integrated circuits, native blocks and pre-
developed blocks . 21
7.1 General . 21
7.2 Component requirement specification . 21
7.2.1 General . 21
7.2.2 Requirements . 21
7.2.3 Requirements analysis and review . 21
7.3 Rules of use . 22
7.4 Selection . 22
7.4.1 General . 22
7.4.2 Documentation review . 22
7.4.3 Operating experience review . 22
7.4.4 Specific requirements related to the blank integrated circuits . 23
7.5 Acceptance justification . 23
7.6 Modification for acceptance . 24
7.7 Modification after acceptance . 24
7.8 Acceptance documentation . 24
8 HPD design and implementation . 24
8.1 General . 24
8.2 Hardware Description Languages (HDL) and related tools . 24

62566  IEC:2012 – 3 –
8.3 Design . 25
8.3.1 General . 25
8.3.2 Defensive design . 25
8.3.3 Structure . 25
8.3.4 Language and coding rules . 26
8.3.5 Synchronous vs asynchronous design . 27
8.3.6 Power management . 27
8.3.7 Initialization . 28
8.3.8 Non-functional configurations . 28
8.3.9 Testability . 28
8.3.10 Design documentation . 28
8.4 Implementation . 29
8.4.1 General . 29
8.4.2 Products . 29
8.4.3 Files of parameters and constraints . 29
8.4.4 Post-route analyses . 30
8.4.5 Redundancies introduced or removed by the tools . 30
8.4.6 Finite state machines . 31
8.4.7 Static timing analysis . 31
8.4.8 Implementation documentation . 31
8.5 System level tools and automated code generation . 32
8.6 Documentation . 33
8.7 Design and implementation review . 33
9 HPD verification . 33
9.1 General . 33
9.2 Verification plan . 34
9.3 Verification of the use of the pre-developed items . 35
9.4 Verification of the design and implementation . 35
9.5 Test-benches . 36
9.6 Test coverage . 36
9.7 Test execution . 37
9.8 Static verification . 37
10 HPD aspects of system integration . 37
10.1 General . 37
10.2 HPD aspects of the system integration plan . 38
10.3 Specific aspects of system integration . 38
10.4 Verification of the integrated system . 39
10.5 Fault resolution procedures . 39
10.6 HPD aspects of the integrated system test report . 39
11 HPD aspects of system validation . 40
11.1 General . 40
11.2 HPD aspects of the system validation plan . 40
11.3 System validation . 40
11.4 HPD aspects of the system validation report . 40
11.5 Fault resolution procedures . 41
12 Modification . 41
12.1 Modification of the requirements, design or implementation . 41
12.2 Modification of the micro-electronic technology . 41

– 4 – 62566  IEC:2012
13 HPD production . 41
13.1 General . 41
13.2 Production tests . 41
13.3 Programming files and programming activities . 42
14 HPD aspects of installation, commissioning and operation . 42
15 Software tools for the development of HPDs . 42
15.1 General . 42
15.2 Additional requirements for design, implementation and simulation tools . 42
16 Design segmentation or partitioning. 43
16.1 Background . 43
16.2 Auxiliary or support functions . 43
16.2.1 General . 43
16.2.2 Partitioning of auxiliary or support functions of category other than A . 43
17 Defences against HPD Common Cause Failure . 44
17.1 Background . 44
17.2 Requirements . 44
Annex A (informative) Documentation . 45
Annex B (informative) Development of HPDs . 47
Bibliography . 52

Figure 1 – System life-cycle (informative, as defined by IEC 61513) . 15
Figure 2 – Development life-cycle of HPD . 16

62566  IEC:2012 – 5 –
INTERNATIONAL ELECTROTECHNICAL COMMISSION
____________
NUCLEAR POWER PLANTS –
INSTRUMENTATION AND CONTROL IMPORTANT TO SAFETY –
DEVELOPMENT OF HDL-PROGRAMMED INTEGRATED CIRCUITS
FOR SYSTEMS PERFORMING CATEGORY A FUNCTIONS

FOREWORD
1) The International Electrotechnical Commission (IEC) is a worldwide organization for standardization comprising
all national electrotechnical committees (IEC National Committees). The object of IEC is to promote
international co-operation on all questions concerning standardization in the electrical and electronic fields. To
this end and in addition to other activities, IEC publishes International Standards, Technical Specifications,
Technical Reports, Publicly Available Specifications (PAS) and Guides (hereafter referred to as “IEC
Publication(s)”). Their preparation is entrusted to technical committees; any IEC National Committee interested
in the subject dealt with may participate in this preparatory work. International, governmental and non-
governmental organizations liaising with the IEC also participate in this preparation. IEC collaborates closely
with the International Organization for Standardization (ISO) in accordance with conditions determined by
agreement between the two organizations.
2) The formal decisions or agreements of IEC on technical matters express, as nearly as possible, an international
consensus of opinion on the relevant subjects since each technical committee has representation from all
interested IEC National Committees.
3) IEC Publications have the form of recommendations for international use and are accepted by IEC National
Committees in that sense. While all reasonable efforts are made to ensure that the technical content of IEC
Publications is accurate, IEC cannot be held responsible for the way in which they are used or for any
misinterpretation by any end user.
4) In order to promote international uniformity, IEC National Committees undertake to apply IEC Publications
transparently to the maximum extent possible in their national and regional publications. Any divergence
between any IEC Publication and the corresponding national or regional publication shall be clearly indicated in
the latter.
5) IEC itself does not provide any attestation of conformity. Independent certification bodies provide conformity
assessment services and, in some areas, access to IEC marks of conformity. IEC is not responsible for any
services carried out by independent certification bodies.
6) All users should ensure that they have the latest edition of this publication.
7) No liability shall attach to IEC or its directors, employees, servants or agents including individual experts and
members of its technical committees and IEC National Committees for any personal injury, property damage or
other damage of any nature whatsoever, whether direct or indirect, or for costs (including legal fees) and
expenses arising out of the publication, use of, or reliance upon, this IEC Publication or any other IEC
Publications.
8) Attention is drawn to the Normative references cited in this publication. Use of the referenced publications is
indispensable for the correct application of this publication.
9) Attention is drawn to the possibility that some of the elements of this IEC Publication may be the subject of
patent rights. IEC shall not be held responsible for identifying any or all such patent rights.
International Standard IEC 62566 has been prepared by subcommittee 45A: Instrumentation
and control of nuclear facilities, of IEC technical committee 45: Nuclear instrumentation.
The text of this Standard is based on the following documents:
FDIS Report on voting
45A/859/FDIS 45A/865/RVD
Full information on the voting for the approval of this Standard can be found in the report on
voting indicated in the above table.
This publication has been drafted in accordance with the ISO/IEC Directives, Part 2.

– 6 – 62566  IEC:2012
The committee has decided that the contents of this publication will remain unchanged until
the stability date indicated on the IEC web site under "http://webstore.iec.ch" in the data
related to the specific publication. At this date, the publication will be
• reconfirmed,
• withdrawn,
• replaced by a revised edition, or
• amended.
62566  IEC:2012 – 7 –
INTRODUCTION
a) Technical background, main issues and organisation of the Standard
The electronic systems of class 1 (according to IEC 61513) used in Nuclear Power Plants
(NPP) which are required in emergency situations, need to be fully validated and qualified
before being used in operation.
In traditional systems that are computer-based, a separation can be drawn between the
hardware and software portions. The hardware is mainly designed with standardised
components having pre-defined electronic functions such as microprocessors, timers or
network controllers, whereas software is used to coordinate the different parts of the
hardware and to implement the application functions.
Nowadays, I&C designers may build application functions directly in one integrated circuit
using devices such as FPGAs or similar technologies. The function of such an integrated
circuit is not defined by the supplier of the physical component or micro-electronic technology
but by the I&C designer.
The specific integrated circuits addressed by this Standard are:
1) based on pre-developed micro-electronic resources,
2) developed within an I&C project,
3) developed with Hardware Description Languages (HDL) and related tools used to
implement the requirements in a proper assembly of the pre-developed micro-electronic
resources.
Therefore these circuits are named “HDL-Programmed Devices”, (HPD). The HDL statements
which describe a HPD can include the instantiation of Pre-Developed Blocks (PDB) which are
typically provided as libraries, macros, or Intellectual Property cores.
HPDs can be effective solutions to implement functions required by an I&C project. However,
the verification and validation may be limited by issues such as high number of internal paths
and limited observability, if the HPD has not been developed with verifiability in mind.
In order to achieve the reliability required for safety I&C systems, the development of HPDs
shall comply with strict process and technical requirements such as those provided by this
Standard, including the specification of requirements, the selection of blank integrated circuits
and PDBs, the design and implementation, the verification, and the procedures for operation
and maintenance.
It is intended that this Standard be used by hardware designers, operators of NPPs (utilities),
and by regulators. Regulatory bodies will find guidance to assess important aspects such as
design, implementation, verification and validation of HPDs.
b) Situation of the current Standard in the structure of the IEC SC 45A Standard series
IEC 61513 is a first level IEC SC 45A document and gives guidance applicable to I&C at
system level. It is supplemented by guidance at hardware level (IEC 60987) and software
level (IEC 60880 and IEC 62138). IEC 62340 gives requirements in order to reduce and
overcome the possibility of common cause failure of category A functions.
IEC 62566 is a second level IEC SC 45A document which focuses on the activities when
HPDs are developed. It complements IEC 60987 which deals with the generic issues of
hardware design of computer based systems. It refers to IEC 60880 when issues identical to
that of software development are addressed.

– 8 – 62566  IEC:2012
For more details on the structure of the IEC SC 45A Standard series, see item d) of this
introduction.
c) Recommendations and limitations regarding the application of the Standard
It is important to note that this Standard establishes no additional functional requirements for
safety systems.
Aspects for which special requirements and recommendations have been produced are:
1) an approach to specify the requirements of, to design, to implement and to verify “HDL-
Programmed Devices” (HPD, 3.7), and to handle the corresponding aspects of system
integration and validation;
2) an approach to analyse and select the blank integrated circuits, micro-electronic
technologies and Pre-Developed Blocks (PDB, 3.11) used to develop HPDs;
3) procedures for the modification and configuration control of HPDs;
4) requirements for selection and use of software tools used to develop HPDs.
It is recognized that digital technology is continuing to develop at a rapid pace and that it is
not possible for a Standard such as this one to include references to all modern design
technologies and techniques.
To ensure that the Standard will continue to be relevant in future years the emphasis has
been placed on issues of principle, rather than specific technologies. If new techniques are
developed then it should be possible to assess the suitability of such techniques by applying
the safety principles contained within this Standard.
d) Description of the structure of the IEC SC 45A Standard series and relationships
with other IEC documents and other bodies documents (IAEA, ISO)
The top-level document of the IEC SC 45A Standard series is IEC 61513. It provides general
requirements for I&C systems and equipment that are used to perform functions important to
safety in NPPs. IEC 61513 structures the IEC SC 45A Standard series.
IEC 61513 refers directly to other IEC SC 45A Standards for general topics related to
categorization of functions and classification of systems, qualification, separation of systems,
defence against common cause failure, software aspects of computer-based systems,
hardware aspects of computer-based systems, and control room design. The Standards
referenced directly at this second level should be considered together with IEC 61513 as a
consistent document set.
At a third level, IEC SC 45A Standards not directly referenced by IEC 61513 are Standards
related to specific equipment, technical methods, or specific activities. Usually these
documents, which make reference to second-level documents for general topics, can be used
on their own.
A fourth level extending the IEC SC 45 Standard series, corresponds to the Technical Reports
which are not normative.
IEC 61513 has adopted a presentation format similar to the basic safety publication
IEC 61508 with an overall safety life-cycle framework and a system life-cycle framework and
provides an interpretation of the general requirements of IEC 61508-1, IEC 61508-2 and
IEC 61508-4, for the nuclear application sector. Compliance with IEC 61513 will facilitate
consistency with the requirements of IEC 61508 as they have been interpreted for the nuclear
industry. In this framework IEC 60880 and IEC 62138 correspond to IEC 61508-3 for the
nuclear application sector.
62566  IEC:2012 – 9 –
IEC 61513 refers to ISO as well as to IAEA GS-R-3 and IAEA GS-G-3.1 for topics related to
quality assurance.
The IEC SC 45A Standards series consistently implements and details the principles and
basic safety aspects provided in the IAEA code on the safety of NPPs and in the IAEA safety
series, in particular the Requirements NS-R-1, establishing safety requirements related to the
design of Nuclear Power Plants, and the Safety Guide NS-G-1.3 dealing with instrumentation
and control systems important to safety in Nuclear Power Plants. The terminology and
definitions used by SC 45A Standards are consistent with those used by the IAEA.

– 10 – 62566  IEC:2012
NUCLEAR POWER PLANTS –
INSTRUMENTATION AND CONTROL IMPORTANT TO SAFETY –
DEVELOPMENT OF HDL-PROGRAMMED INTEGRATED CIRCUITS
FOR SYSTEMS PERFORMING CATEGORY A FUNCTIONS

1 Scope and object
1.1 General
This International Standard provides requirements for achieving highly reliable “HDL-
Programmed Devices” (HPD), for use in I&C systems of nuclear power plants performing
functions of safety category A as defined by IEC 61226.
The programming of HPDs relies on Hardware Description Languages (HDL) and related
software tools. They are typically based on blank FPGAs or similar micro-electronic
technologies. General purpose integrated circuits such as microprocessors are not HPDs.
This Standard provides requirements on:
a) a dedicated development life-cycle addressing each phase of the development of HPDs,
including specification of requirements, design, implementation, verification, integration
and validation,
b) planning and complementary activities such as modification and production,
c) selection of pre-developed components. This includes micro-electronic resources (such as
a blank FPGA or CPLD) and HDL statements representing Pre-Developed Blocks (PDB),
d) use of simplicity and deterministic principles, recognized to be of primary importance to
achieve “fault free” implementation of category A functions,
e) tools used to design, implement and verify HPDs.
This Standard does not put requirements on the development of the micro-electronic
resources, which are usually available as "commercial off-the-shelf" items and are not
developed under nuclear quality assurance Standards. It addresses the developments made
with these micro-electronic resources in an I&C project with HDLs and related tools.
This Standard provides guidance to avoid as far as possible latent faults remaining in HPDs,
and to reduce the susceptibility to single failures as well as to potential Common Cause
Failures (CCF). The requirements within this Standard for clear and comprehensive
documentation should facilitate the effective application of IEC 62340.
Reliability aspects related to environmental qualification and failures due to ageing or physical
degradation are not handled in this Standard. Other Standards, especially IEC 60987,
IEC 60780 and IEC 62342, address these topics.
Subclause 5.7 of IEC 60880:2006 provides security requirements that apply to the
development of HPDs as applicable.
1.2 Use of this Standard
This Standard provides guidance and requirements to produce verifiable designs and
implementations where justification is necessary due for example to the function performed or
to the importance to safety of its behaviour. Class 1 I&C systems may use HPDs for which full
demonstration of compliance with the requirements of this Standard is not mandatory, e.g.

62566  IEC:2012 – 11 –
when they do not implement the logic of a safety function. However, deviations from this
Standard should be justified.
This Standard describes the activities to develop HPDs, organized in the framework of a
dedicated life-cycle. It also describes activities and guidelines to be used in addition to the
requirements of IEC 61513 for system integration and validation when HPDs are included.
Those requirements of IEC 60987 that relate to programmable logic device development are
applicable, in addition to those of this Standard, where HPDs are part of class 1 I&C systems.
NOTE In case of conflicting requirements, this Standard supersedes those in IEC 60987 about class 1 HPDs.
2 Normative references
The following documents, in whole or in part, are normatively referenced in this document and
are indispensable for its application. For dated references, only the edition cited applies. For
undated references, the latest edition of the referenced document (including any
amendments) applies.
IEC 60671, Nuclear power plants – Instrumentation and control systems important to safety –
Surveillance testing
IEC 60880:2006, Nuclear power plants – Instrumentation and control systems important to
safety – Software aspects for computer-based systems performing category A functions
IEC 60987:2007, Nuclear power plants – Instrumentation and control important to safety –
Hardware design requirements for computer-based systems
IEC 61513:2011, Nuclear power plants – Instrumentation and control important to safety –
General requirements for systems
IEC 62138, Nuclear power plants – Instrumentation and control important for safety –
Software aspects for computer-based systems performing category B or C functions
IEC 62340, Nuclear power plants – Instrumentation and control systems important to safety –
Requirements for coping with common cause failure (CCF)
IAEA guide NS-G-1.3:2002, Instrumentation and Control Systems Important to Safety in
Nuclear Power Plants
3 Terms and definitions
For the purposes of this document, the following terms and definitions apply.
3.1
Application Specific Integrated Circuit , ASIC
integrated circuit designed for specific applications
[IEC 60050-521:2002, 521-11-18]
NOTE Specialized integrated circuit designed for the purpose of one company. It embeds bespoke functions
defined by this company.
3.2
block
one of the parts that make up a design; a block may be subdivided into other blocks

– 12 – 62566  IEC:2012
NOTE A block is either a Pre-Developed Block or a Native Block or a block developed during the considered
project.
3.3
Common Cause Failure, CCF
failure of two or more structures, systems or components due to a single specific event or
cause
[IAEA Safety Glossary 2007 Edition]
NOTE Common causes may be internal or external to an I&C system.
[IEC 61513]
3.4
Electronic System Level, ESL
high-level description of an electronic system, based on a set of processes representing
functionalities of components such as microprocessors, memories, specialized computing
units, or communication channels
NOTE This description allows the designer to partition the system into components, to assess its performance
under different mapping of functions to the components, and to establish the requirements for the components.
It is typically performed with languages such as SystemC (IEEE 1666), SystemVerilog (IEEE 1800), or Matlab (R).
3.5
Field Programmable Gate Array, FPGA
integrated circuit that can be programmed in the field by the I&C producer. It includes
programmable logic blocks (combinatorial and sequential), programmable interconnections
between them and programmable blocks for input and/or outputs. The function is then defined
by the I&C designer, not by the integrated circuit supplier.
NOTE While FPGAs are essentially digital devices, some of them may integrate analog input/outputs and analog
to digital converters. FPGAs may include advanced digital functions such as hardware multipliers, dedicated
memory and embedded processor cores.
3.6
Hardware Description Language, HDL
language used to formally describe the functions and/or the structure of an electronic
component for documentation, simulation or synthesis
NOTE The most widely used HDLs are VHDL (IEEE 1076) and Verilog (IEEE 1364).
3.7
HDL-Programmed Device, HPD
integrated circuit configured (for NPP I&C systems), with Hardware Description Languages
and related software tools
NOTE 1 HDLs and related tools (e.g. simulator, synthesizer) are used to implement the requirements in a proper
assembly of pre-developed micro-electronic resources.
NOTE 2 The development of HPDs can use Pre-Developed Blocks.
NOTE 3 HPDs are typically based on blank FPGAs, PLDs or similar micro-electronic technologies.
3.8
module
one of the parts that make up a design; a module may be subdivided into other modules
NOTE Module” is a synonym of “Block”; “Block” is often used in the context of electronic design. “Module” is the
term used by IEC 60880 and is needed in this Standard for references to IEC 60880.

62566  IEC:2012 – 13 –
3.9
native block
a Block which represents a pre-existing resource in the integrated circuit, e.g. an OR gate or
a more complex block such as a multiplier or a serial transmission controller. By programming
the HPD, the Native Blocks are configured and connected to provide the required function.
3.10
netlist
description of an electronic component in terms of interconnections between its terminal
elements (e.g. Native Blocks)
3.11
Pre-Developed Block, PDB
pre-developed functional block usable in a HDL description
NOTE 1 PDBs are typically provided as libraries, macros, or Intellectual Property cores. They are used in the
development of a HPD and incorporated in this HPD.
NOTE 2 A PDB may need significant work before incorporation in a HPD, e.g. synthesizing an electronic circuit
from the HDL statements, mapping the notional components of this circuit on the hardware structures of the
physical integrated circuit and routing the interconnections.
3.12
Pre-Developed Software, PDS
software part that already exists, is available as a commercial or proprietary product, and is
being considered for use
[IEC 60880]
3.13
Programmable Logic Device, PLD
integrated circuit that consists of logic elements with an interconnection pattern, parts of
which are user programmable.
[IEC 60050-521:2002, 521-11-01]
NOTE 1 Different kinds of PLD exist, e.g. Erasable PLD or Complex PLD (CPLD).
NOTE 2 The differences between “FPGA” and “PLD” are not well defined, but “PLD” usually refers to a simpler
device than “FPGA”.
3.14
Register Transfer Level, RTL
synchronous parallel model of an electronic circuit, describing its behaviour by means of
signals processed according to a combinatorial logic and transferred between registers on
clock pulses. The RTL model is typically written in HDL or generated out of HDL source code.
4 Symbols and abbreviations
ASIC: Application Specific Integrated Circuit
CCF: Common Cause Failure
CPLD: Complex Programmable Logic Device
DRC: Design Rule Check
ESL: Electronic System Level
FPGA: Field Programmable Gate Array
HDL: Hardware Description Language
HPD: HDL-Programmed Device
IP: Intellectual Property
– 14 – 62566  IEC:2012
I&C: Instrumentation and Control
PAL: Programmable Array Logic
PDB: Pre-Developed Block
PDS: Pre-Developed Software
PLD: Programmable Logic Device
RAM: Random Access Memory
RTL: Register Transfer Level
SEU: Single Event Upset
SRAM: Static RAM
STA: Static Timing Analysis
VHDL: Very High Speed Integrated Circuit Hardware Description Language
V&V: Verification and Validation
5 General requirements for HPD projects
5.1 General
This clause first locates the HPD within th
...

Questions, Comments and Discussion

Ask us and Technical Secretary will try to provide an answer. You can facilitate discussion about the standard in here.

Loading comments...