🎛️ IEC 60546-1 – Controllers with Analogue Signals for Industrial Process Control



IEC 60546-1 Ed. 2.0 (2010) | International Electrotechnical Commission | Controllers with analogue signals for use in industrial-process control systems — Part 1: Methods for evaluating performance

📋 Scope and Controller Classification

IEC 60546-1 specifies performance evaluation methods and test procedures for analogue-signal controllers used in industrial process control. The standard covers PID controllers and more complex computational controllers (ratio controllers, feedforward compensators, cascade controllers, etc.) operating on standard analogue signals: 4–20 mA DC current, 1–5 V DC voltage, and 20–100 kPa pneumatic. Controllers are classified by function and structure into six main types: Proportional (P), Proportional-Integral (PI), Proportional-Derivative (PD), Proportional-Integral-Derivative (PID), PID with integral limiting, and advanced controllers with external reset feedback—the last addressed for solving reset windup problems caused by secondary-loop saturation in cascade control. The second edition (2010) added evaluation content for digital features of intelligent analogue controllers, including communication-interface response-delay impact on control performance and auto-tuning function performance assessment.

🔬 Core Performance Parameters and Test Methods

The core of analogue controller performance evaluation centers on repeatability, accuracy, and disturbance-rejection capability of steady-state and dynamic characteristics. The standard mandates all baseline performance tests under constant temperature (25 ± 2°C), constant humidity (≤65% RH), and rated supply conditions. Key parameters include input-output conversion accuracy, proportional-band/integral-time/derivative-time setting accuracy, and controller output response under various disturbances.

Parameter	Symbol	Requirement	Test Condition
Proportional Band Accuracy	PB	±5% (max ±10%)	Open-loop: measure input change for 100% output change
Integral Time Accuracy	Ti	±25% (low range), ±10% (mid-high)	Output ramp slope after input step
Derivative Time Accuracy	Td	±25%	Constant output offset after input ramp
Output Linearity	—	≤ 0.2% span	Multi-point input sweep (min. 10 points)
Common-Mode Rejection Ratio	CMRR	≥ 120 dB (DC), ≥ 90 dB (50/60 Hz)	Apply CM voltage input-to-earth
Load Variation Effect	%	≤ 0.1% span (0–100% Rmax)	Output load from zero to max rating
Ambient Temperature Effect	%/°C	≤ 0.01% span/°C	0°C to +50°C, 10°C steps

🏗️ Controller-Specific Requirements for Safety Instrumented Systems

When analogue controllers serve in Safety Instrumented Systems (SIS), performance evaluation must extend beyond basic control accuracy into the functional safety domain—encompassing Hardware Fault Tolerance (HFT), Diagnostic Coverage (DC), and Proof Test Interval (TI). Under the IEC 61511 framework, analogue controllers used in SIS must supply failure-probability data corresponding to their Safety Integrity Level (SIL). A frequently overlooked but critical issue is the controller’s output readback diagnostic mechanism: if the controller relies solely on its internal DAC value to verify output correctness without an independent actual-electrical-parameter feedback loop at the output terminals, it cannot detect DAC self-faults, output amplifier faults, or loose terminal connections causing actual output deviation. Its diagnostic coverage then plummets from assumed >90% to actual <60%, directly causing SIL downgrade. Therefore, for SIL 2 and above applications, controller outputs must be equipped with independent A/D readback channels, and the power supply must adopt dual-redundant architecture (1oo2D or 2oo3) to prevent single-point power failure from disabling all controllers.

⚠️ Engineering Design Insight: The reset windup problem in analogue PID controllers is among the most common yet most overlooked performance killers in process control. When the actuator reaches a physical limit (e.g., valve fully open or closed) while the process variable still deviates from setpoint, the integral term of a PI/PID controller continues to accumulate, driving the controller output “deeply buried” beyond the actuator limit. When the process variable finally crosses the setpoint requiring a reverse output action, the integral term requires an “unwind” time to exit saturation, causing severe overshoot and oscillation. Standard anti-windup schemes include: back-calculation (requires actuator position feedback); conditional integration (integrate only when error sign matches output direction); and external reset (feed the secondary controller’s actual output back to the primary as an integral limiting signal). The last scheme is particularly effective in cascade control but requires hardware support for an external reset input terminal—one of the most frequently overlooked functional requirements during model selection. Another engineering pain point directly related to controller selection is the default failsafe direction of the control output: for a fail-closed safety valve, the controller on power loss must output 0% (4.00 mA); for a fail-open safety valve, it must output 100% (20.00 mA). This seemingly trivial configuration cannot be truly failsafe in logic alone if the output-stage circuit was not hardware-designed with the appropriate pull-up or pull-down resistor.

🔑 Bottom Line: IEC 60546-1 establishes a complete evaluation framework for analogue process controllers, but its most important lesson in the Industry 4.0 context is this: even the most “traditional” 4–20 mA analogue controller, when deployed in a Safety Instrumented System, has its internal diagnostic architecture and output readback capability directly determining whether the system can achieve the target SIL. Overlooking such details is equivalent to embedding systemic vulnerabilities in the safety loop’s weakest link.