Guideline for Applying Functional Safety to Autonomous Systems in Mining
Total Page:16
File Type:pdf, Size:1020Kb
20200709_Guideline_for_Applying_Functional_Safety_to_Autonomous_Systems- GMG-AM-FS-v01-r01 GUIDELINE FOR APPLYING FUNCTIONAL SAFETY TO AUTONOMOUS SYSTEMS IN MINING SUBMITTED BY Functional Safety for Autonomous Equipment Sub-committee VERSION DATE 09 Jul 2020 APPROVED BY Autonomous Mining Working Group 31 Jul 2020 and GMG Executive Council 12 Aug 2020 PUBLISHED 18 Aug 2020 DATE DOCUMENT TO BE REVIEWED 18 Aug 2022 PREPARED BY THE FUNCTIONAL SAFETY FOR AUTONOMOUS EQUIPMENT SUB-COMMITTEE OF THE AUTONOMOUS MINING WORKING GROUP Global Mining Guidelines Group (GMG) ii | GUIDELINE FOR APPLYING FUNCTIONAL SAFETY TO AUTONOMOUS SYSTEMS IN MINING DISCLAIMER Although the Global Mining Guidelines Group (GMG) believes that the information on https://gmggroup.org, which includes guidelines, is reliable, GMG and the organizations involved in the preparation of the guidelines do not guarantee that it is accu- rate or complete. While the guidelines are developed by participants across the mining industry, they do not necessarily rep- resent the views of all of the participating organizations. This information does not replace or alter requirements of any national, state, or local governmental statutes, laws, regulations, ordinances, or other requirements. Your use of GMG guide- lines is entirely voluntary. CREDITS Organizations Involved in the Preparation of these Guidelines ABB, Abbott Risk Consulting, Agnico Eagle, Airobiotics, Alex Atkins & Associates, Ambuja Cements, AMOG Consulting, Antofa- gasta Minerals, Australian Droid + Robot, Autonomous Solutions, BBA, BHP, British Columbia Ministry of Energy and Mines, Cadia Valley Operations, Calibre Global, Canadian Natural Resources, Canary HLE, Caterpillar, CEMI, CITIC Pacific Mining, Clickmox, DMIRS, Digital Mine from GE Transportation (a Wabtec Company), ECG Engineering, Edge Case Research, Epiroc, Finning, Fluidmesh/CISCO, Fortescue Metals Group, Fundación Chile, Glencore, Gold Fields, Government of Alberta, Hard Line, Haultrax, Hitachi, Hudbay Minerals, Imperial Oil, Infosys, Intersystems Chile, Ionic Engineering, JVA, Kevin Connelly, KMC Min- ing, Komatsu, Lang O’Rourke, Liebherr, Ma’aden, Maclean Engineering, Marcus Punch, Marubeni Corporation, METS Ignited, MineARC Systems, Minetec, Modular Mining Systems, New Gold, Newmont Goldcorp, NIOSH, Nova Systems, OSISoft, Phoenix Contact, Proudfoot, RCT, Riivos, Rio Tinto, Rock Tech, Roy Hill, SafeAI, Sandvik, Santoencanto, SAP Asia, Scania, Schnieder Electric, Seyo, SMS Equipment, Stantec, Strategy Focused Innovation, Suncor, Symbiotic Innovations, Syncrude, Teck, Terry Reid, Thiess, Tommy Mar tinez, Vale, Vedanta Resources, Whitehaven Coal Project Leaders Chirag Sathe, Principal Equipment Automation, BHP Gareth Topham, Principal Functional Safety, Rio Tinto COPYRIGHT NOTICE This document is copyright protected by the Global Mining Guidelines Group (GMG). Working or committee drafts can be reproduced and used by GMG participants during guideline development. GMG hereby grants permission for interested indi- viduals/organizations to download one copy. Written permission from GMG is required to reproduce this document, in whole or in part, if used for commercial purposes. To request permission, please contact: Global Mining Guidelines Group Heather Ednie, Managing Director [email protected] http://www.gmggroup.org Reproduction for sales purposes may be subject to royalty payments or a licensing agreement. Violators may be prosecuted. Global Mining Guidelines Group (GMG) GUIDELINE FOR APPLYING FUNCTIONAL SAFETY TO AUTONOMOUS SYSTEMS IN MINING | 1 TABLE OF CONTENTS 1. FOREWORD 2 2. DEFINITIONS OF TERMS AND ABBREVIATIONS 2 3. KEYWORDS 2 4. SCOPE 2 5. INTRODUCTION 3 6. CONTEXTUAL BACKGROUND ON IMPLEMENTING AUTONOMOUS AND SEMI-AUTONOMOUS 3 SYSTEMS 3 6.1 Managing People and Change 3 6.2 Operation 3 6.3 Original Product Supplier and Mine Operator Relationship 4 6.4 Risk Assessment and Emergency Management 4 6.5 Configuration 4 7. RECOMMENDED REFERENCE MATERIAL 4 8. FUNCTIONAL SAFETY LIFECYCLE 5 9. SOFTWARE DEVELOPMENT, VERIFICATION, AND VALIDATION 12 9.1 Architectural Considerations 12 9.2 Lifecycle Considerations 12 9.3 Developing Conventional System Elements 13 10. COMPETENCY MANAGEMENT 14 11. CYBERSECURITY 14 12. ASSURANCE DOCUMENTATION 14 13. NON-DETERMINISTIC SYSTEMS 15 14. FUTURE WORK 15 15. RESOURCES AND REFERENCES 16 APPENDIX A: FUNCTIONAL SAFETY IN OVERALL SAFETY MANAGEMENT 18 APPENDIX B: SUMMARY OF STANDARDS 19 B.1 Key Standards 19 B.2 Non-Core Standards 19 APPENDIX C: EXAMPLE FUNCTIONAL SAFETY MANAGEMENT PLAN 21 APPENDIX D: POTENTIAL ACTIVITIES FOR SOFTWARE DEVELOPMENT 22 Global Mining Guidelines Group (GMG) 2 | GUIDELINE FOR APPLYING FUNCTIONAL SAFETY TO AUTONOMOUS SYSTEMS IN MINING 1. FOREWORD Independent: In a review or investigation setting, refers to a The Global Mining Guidelines Group (GMG) is a network of separation of responsibilities to maintain objectivity. representatives from mining companies, equipment and Integrity level / performance level: Identification of the risk technology suppliers, research organizations, academia, reduction required to be provided by each safety function. regulatory agencies, consultancies, and industry associa- Examples include machine performance level (MPL), per- tions who collaborate to tackle the challenges facing our formance level (PL), and safety integrity level (SIL). industry. GMG aims to accelerate the improvement of mining Mine operator: The mining operation applying functional performance, safety, and sustainability and creates guide- safety to autonomous systems in mining who is responsible lines, such as this one, that address common industry chal- for the functional safety lifecycle of the application. lenges. GMG guidelines are peer-reviewed documents that Non-deterministic system: A system or aspects of a system offer best practices, advise on the implementation of new where decisions are derived from complex sensor and pro- technologies, develop industry alignment, or educate cessing algorithms and / or involve machine learning (e.g., broadly. They are developed through industry-wide collabo- emergency intervention systems, advanced driver assistance ration to assist the global mining community in implement- systems, and artificial intelligence route planning). It may not ing practices to improve operations and / or implement new be possible to establish an integrity level / performance level technologies. Please note that GMG guidelines are not rating (e.g., MPL / PL / SIL) when using these systems. industry standards. Draft documents are checked and Original product supplier (OPS): The equipment manufac- approved by working group members prior to approval by turer or integrator who is responsible for part or all of the the GMG Executive Council. functional safety lifecycle of the product. Please note: If some of the elements of this document are Safety function: The machine functions that are required to subject to patent rights, GMG and the Canadian Institute of achieve or maintain a safe state and of which failure or Mining, Metallurgy and Petroleum (CIM, of which GMG is a malfunction could increase the risk of injury or harm to the legal entity) are not responsible for identifying such patent involved people or environment. rights. System operator: The person with control over a system. System safety: Measures that are taken to confirm that the 2. DEFINITIONS OF TERMS AND overall design of a system is safe to operate. Functional ABBREVIATIONS safety is a part of system safety. Autonomous machine: Refers to autonomous and semi- * The formal IEC International Standard IEC 61508 definition of func- autonomous machines (ASAMs) as they are defined in ISO tional safety is: “The part of the overall safety relating to the EUC 17757 (2019a, 3.1.3.1 and 3.1.3.2). In this guideline, it refers (Equipment Under Control) and the EUC control system that specifically to mining machines. depends on the correct functioning of the E/E/PE (Electrical/Elec- Autonomous system: Refers to autonomous and semi- tronic/Programmable Electronic) safety-related systems and other risk reduction measures.” autonomous systems (ASAMS) as they are defined in ISO 17757 (2019a, 3.1.2). In this guideline, it refers specifically to mining systems. 3. KEYWORDS Competency: Having people with the necessary knowledge, Autonomous mining, autonomous systems, functional skill, and experience to apply functional safety to safety, lifecycle, mobile autonomous machines, risk man- autonomous systems. agement, safety Deterministic system: A system where outcomes are deter- mined based on known and understood modes and condi- 4. SCOPE tions. This document provides guidance on the application of Functional safety: Refers to “the part of the overall safety that functional safety to new deployments of autonomous sys- depends on a system or equipment operating correctly in tems in mining in surface and underground operations. It is response to its inputs.” It is defined as “the detection of a intended as a starting point to help readers who are imple- potentially dangerous condition resulting in the activation of a menting autonomous systems navigate communication protective or corrective device or mechanism to prevent haz- with other key stakeholders, but is not an exact process to ardous events arising or providing mitigation to reduce the follow and does not serve as a standard or set of rules. It consequence of the hazardous event” (Source: www.iec.ch).* covers in situ material—the mining and related support Functional safety