Intrinsic safety is a method of explosion protection that keeps the electrical and thermal energy in a circuit so low that it cannot generate a spark or hot surface capable of igniting a flammable atmosphere, even when the circuit develops a fault. Unlike explosion-proof enclosures that contain an ignition after it happens, intrinsic safety prevents the ignition source from ever forming.
Every other major protection concept, flameproof enclosures (Ex d), increased safety (Ex e), assumes a spark or arc might occur and either contains the resulting explosion or removes conditions that let sparks appear. Intrinsic safety (Ex i) takes a different approach: it caps voltage and current at the source so that even a broken wire, a short circuit, or a shorted component cannot release enough energy to ignite the surrounding gas, vapor, or dust atmosphere. Field instruments such as transmitters, switches, and small actuators typically operate at power levels low enough that this approach is practical, which is why intrinsic safety dominates process instrumentation in hazardous areas.
IEC/EN 60079-11 defines intrinsic safety sub-levels by how many independent faults the circuit must tolerate while remaining incapable of ignition:
The standard distinguishes "countable" faults, credible failures such as a component short or an open circuit that must be counted toward the ia or ib fault tally, from faults treated as non-countable because adequate spacing, creepage, and clearance in the equipment's construction make them sufficiently unlikely. Only countable faults are used to size the fault-tolerance case for ia, ib, or ic.
The fault tolerance a circuit provides determines the most demanding zone it may enter:
| Protection level | Equipment Protection Level (EPL) | Typical gas zone | Fault tolerance |
|---|---|---|---|
| Ex ia | Ga | Zone 0 | Two faults |
| Ex ib | Gb | Zone 1 | One fault |
| Ex ic | Gc | Zone 2 | No fault (normal operation only) |
Zone 0 covers areas where an explosive atmosphere is present continuously or for long periods, so equipment there must keep working safely even after two independent things go wrong, which is why Ex ia is the minimum level required for Zone 0 (equipment certified Ex ia can also be installed in Zone 1 or Zone 2, since it meets or exceeds what those zones require). Zone 1 covers areas where the atmosphere is likely to occur during normal operation, and Zone 2 covers areas where it is only expected briefly or under abnormal conditions. This same energy-limiting logic underpins other area-classification decisions plant teams make around arc flash risk and ground fault protection, where the goal is likewise to stop an electrical fault from becoming an ignition or injury event.
A Zener barrier is a passive network of Zener diodes, resistors, and a fuse installed at the boundary between the safe area and the hazardous area. In normal operation, the resistors limit current and the circuit passes the instrument's signal through unimpeded. If a fault in the safe-area equipment pushes voltage above the Zener threshold, the diodes clamp the voltage and divert the excess fault current to a dedicated intrinsically safe earth, while the fuse protects the diodes from thermal damage. Zener barriers are simple and inexpensive, but they require a low-resistance, verified IS ground connection to work, and that ground must be maintained and tested as part of the loop.
A galvanic isolator achieves the same energy limitation without a shared electrical path. Internally it uses a transformer, relay, or opto-isolator to separate the hazardous-area circuit from the safe-area circuit while still passing the measurement or control signal across the barrier. Because there is no direct electrical connection between the two sides, galvanic isolators do not depend on a dedicated IS ground, which simplifies installation and removes a common source of nuisance faults. They generally cost more than Zener barriers but are now the more common choice in new installations for this reason.
Every piece of associated apparatus (the barrier or isolator) and every piece of intrinsically safe field apparatus (the transmitter, switch, or other device) carries a set of certified entity parameters on its nameplate or datasheet. For the loop to be intrinsically safe, these parameters must be compared and matched before the system is wired:
This entity concept lets engineers mix and match certified barriers and field devices from different manufacturers without a system-level certification test, as long as every parameter check passes and the combined output power stays within the certified limits for the gas group and temperature class involved. Getting this matching wrong, or skipping it during a field device swap, is one of the most common ways an intrinsically safe loop is unintentionally compromised.
Intrinsically safe loops still fail like any other instrumentation circuit: barrier fuses blow, IS grounds corrode, cable insulation degrades, and field devices drift or fail outright. Because these faults often show up first as subtle performance loss rather than an outright alarm, condition-based visibility into the line matters as much in hazardous areas as anywhere else in the plant. Fabrico reads machine condition and OEE directly from the line and auto-routes a work order the moment a loss is detected, using computer vision to catch degradation that point sensors alone can miss, built and hosted in the EU with EU data residency, and backed by ISO 27001, ISO 20000-1, and ISO 9001 certification. Book a Fabrico demo.
No. Explosion-proof (Ex d, flameproof) equipment allows an internal ignition to occur but contains it inside a robust enclosure so it cannot escape. Intrinsic safety limits energy so that an ignition-capable spark or hot surface never forms in the first place.
Only after re-checking the entity parameter comparison for the new device against the installed barrier or isolator. A replacement with higher Ci or Li, or a lower Vmax or Imax, can invalidate the certified loop even if it fits the same physical connection.
IS wiring is typically run in separate, clearly identified cable (often light blue) or segregated from non-IS conductors, and must meet the insulation and separation requirements in the relevant installation standard so that a fault in a non-IS circuit cannot couple energy into the IS loop.
Ex ia is only required where the equipment must operate in Zone 0. In Zone 1, Ex ib meets the required protection level at typically lower cost and design complexity, so specifying ia everywhere would be over-engineering rather than added safety.
Anmeldung
Blog
