UL 913: Intrinsically Safe Equipment

Every flammable gas, vapor, and dust has a minimum ignition energy (MIE), the smallest spark that can set it off. Intrinsic safety (IS) is the protection concept built around that fact: design the electrical circuit so that even under fault conditions, it physically cannot release enough energy to exceed the MIE of the surrounding atmosphere. No spark, no ignition, no explosion.

UL 913 is the North American standard that governs how intrinsically safe apparatus and associated apparatus are tested, evaluated, and certified. It covers equipment intended for use in Class I, II, and III, Division 1 hazardous locations, as well as Class I, Zone 0 and Zone 1 areas. The international equivalent is IEC 60079-11, which covers the same protection concept under the IECEx and ATEX certification systems used outside North America.

Intrinsic safety is the only protection method that is safe during normal operation, under expected faults, and under specific combinations of two simultaneous faults. That makes it the gold standard for instrumentation in the most dangerous classified areas. It is also the only technique that allows live maintenance in a Division 1 or Zone 0 area without a hot work permit.

The core idea is energy limitation. Every component in the circuit is chosen and tested to guarantee that the total available electrical energy (from voltage, current, and stored energy in capacitors and inductors) stays below the minimum ignition energy of the target gas group, even when things go wrong.

UL 913 tests equipment under normal operation, one fault, and two simultaneous faults. The standard defines specific "safety factors" that multiply the test spark energy to provide margin. For Group A (acetylene) and Zone 0 applications, the safety factor is 1.5x. For Group D (propane, methane) in Division 1, it is 1.0x with specific fault conditions applied.

Energy Limiting Components

Three types of components do the work of keeping energy below the ignition threshold:

• Current-limiting resistors cap the maximum current that can flow, even into a short circuit. They are sized so that the maximum power dissipation stays below the ignition threshold.
• Voltage-clamping zener diodes shunt excess voltage to ground before it can build up. Redundant zeners (typically three in series) ensure that even if one fails shorted, the remaining diodes still clamp.
• Energy-storage limiters restrict the capacitance and inductance in the circuit. Capacitors store electrical charge, inductors store magnetic energy, and both can release that energy as a spark. The standard sets maximum allowed values for each based on the gas group.

Ignition Curves

UL 913 uses ignition curves (voltage vs. current graphs for resistive circuits, and voltage vs. capacitance or current vs. inductance for reactive circuits) to determine safe limits. These curves are derived from extensive spark testing in standard gas/air mixtures. Equipment is certified for a specific gas group (A, B, C, or D) based on which curve it falls below.

Equipment rated for Group A is safe for all groups. Equipment rated only for Group D cannot be used in Group A, B, or C atmospheres.

There are two approaches to certifying intrinsically safe circuits, and the choice between them has major implications for how you specify, install, and maintain the equipment.

Entity Concept

Each device (barrier, field instrument, cable) is evaluated independently and given a set of "entity parameters" that describe its electrical characteristics. These parameters are published on the device label and in its control drawing. Any combination of entity-rated devices whose parameters are mathematically compatible can be connected without additional certification.

The key entity parameters are:

• Vmax / Voc - Maximum voltage the device can accept (field device) or the open-circuit voltage the barrier can deliver
• Imax / Isc - Maximum current the device can accept (field device) or the short-circuit current the barrier can deliver
• Ci / Li - Internal capacitance and inductance of the field device (contributes to stored energy)
• Ca / La - Maximum allowed external capacitance and inductance that the barrier can drive safely

For a valid entity combination: Voc must be less than or equal to Vmax, Isc must be less than or equal to Imax, and (Ci + Ccable) must be less than or equal to Ca, and (Li + Lcable) must be less than or equal to La.

System Approval

The entire circuit (barrier, field device, cable type, and cable length) is tested and certified as a single system. Nothing can be substituted without going back to the certifying body for re-evaluation. This approach is simpler for the end user because there are no parameter calculations, but it is rigid. Replacing a failed transmitter with a different model, or even a different cable length, requires new certification.

The barrier (also called an "associated apparatus") sits between the safe area (control room, marshalling cabinet) and the hazardous area (field). Its job is to limit the energy that can reach the hazardous area, regardless of what happens on the safe-area side. If a power supply fails, a wiring fault occurs, or someone accidentally connects 120V to the wrong terminal, the barrier prevents dangerous energy from reaching the field device.

Zener Barriers (Shunt-Diode Safety Barriers)

The simplest and cheapest type. A zener barrier contains zener diodes that clamp voltage, a series resistor that limits current, and a fuse that blows if the zener diodes fail. They work by shunting excess energy to ground, which means they require a dedicated IS ground connection with less than 1 ohm impedance.

The downside: that ground bond is critical. If the IS ground degrades (corrosion, loose connection, missing earth), the barrier cannot shunt fault energy, and the IS protection is compromised. Zener barriers also introduce a voltage drop into the loop (typically 1-2V), which can matter for long 4-20mA runs.

Galvanic Isolators

Galvanic isolators use transformers, optocouplers, or capacitive coupling to provide complete electrical isolation between the safe and hazardous sides. No common ground path exists, so there is no dependency on an IS ground. They also break ground loops that can cause measurement noise in 4-20mA circuits.

Modern installations overwhelmingly favor galvanic isolators despite their higher cost. The elimination of the IS ground requirement removes a maintenance burden and a common point of failure. Most barrier manufacturers now offer isolator modules that are pin-compatible replacements for their zener barrier lines.

UL 913 certified equipment carries a distinctive blue marking (a blue label, blue triangle, or blue nameplate field) that identifies it as intrinsically safe. This blue color coding is recognized across the industry and makes it easy for electricians to distinguish IS-rated equipment from general-purpose or explosionproof equipment.

What the Label Tells You

A typical UL 913 label includes the following information:

• Classification - "Class I, Division 1, Groups A, B, C, D" tells you which gas groups and hazardous area division the device is rated for
• Temperature code - T4 (135C), T3 (200C), etc. The maximum surface temperature of the device under fault conditions. Must be below the autoignition temperature of the target gas.
• Entity parameters - Vmax, Imax, Ci, Li (for field devices) or Voc, Isc, Ca, La (for barriers). These numbers are what you use for entity compatibility calculations.
• Control drawing number - The drawing that specifies allowed connections, cable types, cable lengths, and any restrictions.
• Certification mark - UL listing mark, CSA mark, or FM approval mark from a Nationally Recognized Testing Laboratory (NRTL).

Common Temperature Codes

Installing intrinsically safe wiring correctly is just as important as using certified equipment. The NEC (NFPA 70), Article 504, governs IS circuit installation in the United States. The fundamental principle: IS wiring must be kept physically separated from all non-IS wiring to prevent energy from non-IS sources from entering the IS circuit.

Wiring Separation Rules (NEC 504.30)

• IS conductors must not be placed in any raceway, cable tray, or enclosure with non-IS conductors, unless separated by a grounded metal barrier or distance
• IS wiring must be identified with blue color (blue insulation, blue cable jacket, or blue labeling at intervals)
• IS terminal blocks must be separated from non-IS terminal blocks by at least 50mm (2 inches), or by a grounded metal partition
• Junction boxes containing IS circuits must be labeled "INTRINSICALLY SAFE"

Cable Parameters

Cable capacitance and inductance per unit length add stored energy to the IS circuit. Longer cables mean more stored energy. The control drawing specifies the maximum allowed cable parameters (typically in pF/m and uH/m) and maximum cable length. When calculating entity compatibility, you must include the cable's contribution: total Ci + Ccable must not exceed the barrier's Ca, and total Li + Lcable must not exceed the barrier's La.

Grounding

If you are using zener barriers, you need a dedicated IS ground bus with less than 1 ohm impedance to the plant grounding electrode. This ground must be separate from the instrument signal ground and the power ground. Galvanic isolators do not require this dedicated ground, which is one of their main advantages.

Any facility that processes, stores, or handles flammable gases, vapors, or combustible dusts will have areas classified as hazardous locations under the NEC. Intrinsically safe equipment is one of the approved protection methods for these areas. Here are the industries where you will most commonly encounter IS requirements.

IS equipment requires regular inspection to maintain its protection integrity. Unlike general-purpose equipment, the safety of an IS circuit depends on the precise electrical characteristics of every component in the loop, including the cable. Changes that would be harmless in a regular circuit (swapping a transmitter for a different model, extending a cable run) can compromise IS protection.

Inspection Checklist

• Barrier integrity - Verify that barriers show no signs of overheating, discoloration, or physical damage. Check fuse continuity on zener barriers.
• Ground continuity (zener barriers) - Measure the IS ground bus impedance. It must remain below 1 ohm. Check all terminations for corrosion or looseness.
• Cable condition - Look for damage to blue IS cables, especially at penetrations, cable trays, and junction boxes. Verify that blue color coding is visible and legible.
• Wiring separation - Confirm that IS wiring has not been mixed with non-IS wiring since the last inspection. This happens more often than you would expect, usually during unrelated maintenance work.
• Label legibility - Equipment labels (blue marking, entity parameters, temperature code, control drawing number) must be readable. Replace or re-mark any faded labels.
• Control drawing availability - A current copy of each control drawing should be accessible at the barrier marshalling cabinet and in the maintenance office. If a drawing is missing, obtain a replacement from the manufacturer before doing any work on that loop.

Device Replacement

Replacing a field device in an IS loop is not the same as swapping a transmitter in a general-purpose circuit. Before installing a replacement device:

• Verify the replacement device's entity parameters against the control drawing
• Confirm the Vmax of the replacement is greater than or equal to the barrier's Voc
• Confirm the Imax of the replacement is greater than or equal to the barrier's Isc
• Verify that (Ci of new device + Ccable) does not exceed the barrier's Ca
• Verify that (Li of new device + Lcable) does not exceed the barrier's La
• Check that the temperature code is appropriate for the gas group at the installation location
• Update the control drawing if the replacement is a different model than the original