04第三章(上) IntroductionToSafetyEngineering《安全学原理》
合集下载
相关主题
- 1、下载文档前请自行甄别文档内容的完整性，平台不提供额外的编辑、内容补充、找答案等附加服务。
- 2、"仅部分预览"的文档,不可在线预览部分如存在完整性等问题,可反馈申请退款(可完整预览的文档不适用该条件!)。
- 3、如文档侵犯您的权益，请联系客服反馈,我们会尽快为您处理(人工客服工作时间：9:00-18:30)。
安全工程是一门应用科学，与系统工程关系密切。安全工程确保生 命关键系统即使部件发生故障也能按需要运行。
1
Introduction to Safety engineering
A life-critical system or safety-critical system is a system whose failure or malfunction may result in death or serious injury. An Example of a LifeCritical System：The picture below illustrates what can happen when a life-critical system fails. This particular crash took place at the Paris Air Show a few years ago. Our understanding is that a mechanical failure caused the crash. The pilot sustained only minor injuries.
Introduction to Safety engineering
Safety engineering is an applied science strongly related to systems engineering. Safety engineering assures that a life-critical system behaves as needed even when pieces(部件) fail.
生命关键系统或安全关键系统指的是当该系统发生故障时，可能导致死
亡或者严重的伤害。一个生命关键系统的例子：下图显示了一个生命关
键系统发生故障时能够导致什么事情发生。这次特殊的坠落发生在几年
前的巴黎航空表演上。据我们理解是机械故障导致这次坠落。飞行员伤
Βιβλιοθήκη Baidu害较小。
2
Introduction to Safety engineering
“本质安全”系统是一种很巧的机械布置，不会产生伤害（很明显是一种 最佳的布置形式，但通常不可能）。例如“本质安全”飞机是不可能的。 “故障安全”系统指的是当发生故障时不会产生伤害。“故障容许”系 统发生故障时还能继续工作，尽管其运行能力从某种形式上下降了。
5
Introduction to Safety engineering
安全工程师能够区分不同程度的不正常运行状态：故障发生在设备某零 件不按设计运转的时候；事故仅发生在工作人员（不是修理工）不得不 应付该情况的时候；严重事故能够危及一个或几个人；灾难性的事故危 及、伤害或杀死大量的人。
3
Introduction to Safety engineering
Safety engineers also identify different modes of safe operation: A “probabilistically(概率的) safe” system has no single point of failure, and enough redundant(多余的) sensors(传感器), computers and effectors so that it is very unlikely to cause harm (usually "very unlikely" means less than one human life lost in a billion hours of operation).
Safety engineers distinguish different extents of defective(有缺陷的) operation: A "fault" is said to occur when some piece of equipment does not operate as designed. A "failure" only occurs if a human being (other than a repair person) has to cope with the situation. A "critical" failure endangers one or a few people. A "catastrophic“(灾 难的) failure endangers, harms or kills a significant number of people.
安全工程师也能够鉴别不同方式的安全运行状态：“概率安全”系统没 有个别失灵的部件，并且有足够多的传感器，计算器和效应器以至于完 全不可能引起伤害（通常“完全不可能”指小于十亿小时的运行导致一 人丧命的概率）。
4
Introduction to Safety engineering
An “inherently(本固有的) safe” system is a clever mechanical arrangement that cannot be made to cause harm- obviously the best arrangement, but this is not always possible. For example, “inherently safe” airplanes are not possible. A “fail-safe” system is one that cannot cause harm when it fails. A “fault-tolerant(容忍)" system can continue to operate with faults, though its operation may be degraded in some fashion.
1
Introduction to Safety engineering
A life-critical system or safety-critical system is a system whose failure or malfunction may result in death or serious injury. An Example of a LifeCritical System：The picture below illustrates what can happen when a life-critical system fails. This particular crash took place at the Paris Air Show a few years ago. Our understanding is that a mechanical failure caused the crash. The pilot sustained only minor injuries.
Introduction to Safety engineering
Safety engineering is an applied science strongly related to systems engineering. Safety engineering assures that a life-critical system behaves as needed even when pieces(部件) fail.
生命关键系统或安全关键系统指的是当该系统发生故障时，可能导致死
亡或者严重的伤害。一个生命关键系统的例子：下图显示了一个生命关
键系统发生故障时能够导致什么事情发生。这次特殊的坠落发生在几年
前的巴黎航空表演上。据我们理解是机械故障导致这次坠落。飞行员伤
Βιβλιοθήκη Baidu害较小。
2
Introduction to Safety engineering
“本质安全”系统是一种很巧的机械布置，不会产生伤害（很明显是一种 最佳的布置形式，但通常不可能）。例如“本质安全”飞机是不可能的。 “故障安全”系统指的是当发生故障时不会产生伤害。“故障容许”系 统发生故障时还能继续工作，尽管其运行能力从某种形式上下降了。
5
Introduction to Safety engineering
安全工程师能够区分不同程度的不正常运行状态：故障发生在设备某零 件不按设计运转的时候；事故仅发生在工作人员（不是修理工）不得不 应付该情况的时候；严重事故能够危及一个或几个人；灾难性的事故危 及、伤害或杀死大量的人。
3
Introduction to Safety engineering
Safety engineers also identify different modes of safe operation: A “probabilistically(概率的) safe” system has no single point of failure, and enough redundant(多余的) sensors(传感器), computers and effectors so that it is very unlikely to cause harm (usually "very unlikely" means less than one human life lost in a billion hours of operation).
Safety engineers distinguish different extents of defective(有缺陷的) operation: A "fault" is said to occur when some piece of equipment does not operate as designed. A "failure" only occurs if a human being (other than a repair person) has to cope with the situation. A "critical" failure endangers one or a few people. A "catastrophic“(灾 难的) failure endangers, harms or kills a significant number of people.
安全工程师也能够鉴别不同方式的安全运行状态：“概率安全”系统没 有个别失灵的部件，并且有足够多的传感器，计算器和效应器以至于完 全不可能引起伤害（通常“完全不可能”指小于十亿小时的运行导致一 人丧命的概率）。
4
Introduction to Safety engineering
An “inherently(本固有的) safe” system is a clever mechanical arrangement that cannot be made to cause harm- obviously the best arrangement, but this is not always possible. For example, “inherently safe” airplanes are not possible. A “fail-safe” system is one that cannot cause harm when it fails. A “fault-tolerant(容忍)" system can continue to operate with faults, though its operation may be degraded in some fashion.