How to Avoid Shooting Yourself in the Foot with Your SIS? Maruti Dey – Technical Consultant
Presenters <ul><li>Maruti Dey  </li></ul>
Conceptual Design <ul><li>Using the SIS transmitters for dual-purpose applications: </li></ul><ul><ul><li>Use in Safety Fu...
Introduction <ul><li>You can minimize the risk of creating a safety demand (SIS or PSV) from BPCS single loop failures (dr...
Problems / Challenges <ul><li>A number of hazards have been identified where failure of the BPCS loop would cause the cont...
DeltaV SIS Architecture - Separate <ul><li>In the SIS system, the power supplies, communication channels, hardware, and re...
DeltaV SIS Architecture - Integrated <ul><li>Overhead functions such as configuration, operations, maintenance, asset mana...
DeltaV SIS Architecture <ul><li>Integrated but separate architecture allows BPCS/SIS controls on DeltaV control network. <...
Original Design – Use of 3 SIS Transmitters
Original Design – Middle of 3 data points
Original Design – Middle of 3 data points <ul><li>The original SIS design was 2oo3, and it was assumed middle of 3 PV data...
Data Latency issues <ul><li>This causes the data to be transferred in a non-synchronous manner, with varying time delays. ...
PID Control Loops <ul><li>Most of the loops have pressure, flow, and level controllers for small volumes.  In order to kee...
Faster I/O Update Speeds – DeltaV11.3 <ul><li>For time it takes for I/O data to be read by the DeltaV Controller on the co...
SIS / BPCS Configuration <ul><li>In order to keep 2oo3 voting on the SIS, and good quality control, installation of a 4th ...
Designs Considered – Option 1 <ul><li>Use 2oo3 voting on SIS transmitters with no BPCS transmitters </li></ul><ul><li>Reso...
Designs Considered – Option 2 <ul><li>Use 3 SIS Transmitters for 2oo3 voting and 1 BPCS transmitter for PID control </li><...
Designs Considered – Option 3 <ul><li>Use 2oo2D for SIS voting AND 1 BPCS transmitter for PID control </li></ul><ul><li>Re...
Minimizing DCS Single Instrument Failures and Safety Demand
Findings <ul><li>It was proposed that the software configuration will prevent the BPCS controller from causing an inadvert...
Solution #1 – Deviation Alarming <ul><li>Use the SIS PV data to calculate deviations between the 3 transmitters. If the de...
Solution #2 – Backup PID Control <ul><li>The SIS PV data will be available to be used for the BPCS controller, as backup d...
Potential Process Risks <ul><li>Transitioning from manual to auto on a new transmitter selection may introduce a bump if P...
Software Logic <ul><li>The deviation calculations are used to trip the controller to MANUAL when a large deviation is dete...
Software Configuration
Software Configuration – Case 1 to Manual <ul><li>If BPCS transmitter is selected AND there is a deviation between SIS1 an...
Software Configuration – Case 2 to Manual <ul><li>If BPCS transmitters is not selected (Ex: OOS) AND there is a deviation ...
Future considerations – DeltaV 11.3 <ul><li>With data latency issues eliminated with DeltaV Version 11.3, do you eliminate...
Questions <ul><li>Thank you. </li></ul><ul><li>? </li></ul>
Upcoming SlideShare
Loading in …5
×

How to Avoid Shooting Yourself in the Foot with Your SIS?

2,981 views

Published on

Presented by Emerson's Maruti Dey at the 2010 Emerson Exchange in San Antonio, Texas.

Published in: Education, Technology, Business
  • Be the first to comment

  • Be the first to like this

How to Avoid Shooting Yourself in the Foot with Your SIS?

  1. 1. How to Avoid Shooting Yourself in the Foot with Your SIS? Maruti Dey – Technical Consultant
  2. 2. Presenters <ul><li>Maruti Dey </li></ul>
  3. 3. Conceptual Design <ul><li>Using the SIS transmitters for dual-purpose applications: </li></ul><ul><ul><li>Use in Safety Functions (SIS Voting) </li></ul></ul><ul><ul><li>Use for integrating with BPCS process control scheme </li></ul></ul><ul><li>This is possible due to common DeltaV HMI and software configuration platform for both SIS and BPCS. </li></ul>
  4. 4. Introduction <ul><li>You can minimize the risk of creating a safety demand (SIS or PSV) from BPCS single loop failures (driving control valve too far open or closed) with </li></ul><ul><ul><li>the use of well-designed instrumentation </li></ul></ul><ul><ul><li>deviation alarming </li></ul></ul><ul><ul><li>backup PID loop control. </li></ul></ul>
  5. 5. Problems / Challenges <ul><li>A number of hazards have been identified where failure of the BPCS loop would cause the control valve to close, creating a safety demand. SIFs were added to address these hazards. </li></ul><ul><li>A review of the SIFs determined that demands created by the BPCS transmitter failure could be eliminated/reduced by utilizing the 2oo2D SIS transmitters to detect the failure of the BPCS loop and place the control loop in a safe mode. </li></ul>
  6. 6. DeltaV SIS Architecture - Separate <ul><li>In the SIS system, the power supplies, communication channels, hardware, and real-time operating systems are completely independent of the BPCS. </li></ul>
  7. 7. DeltaV SIS Architecture - Integrated <ul><li>Overhead functions such as configuration, operations, maintenance, asset management, training, alarm handling can be shared between the BPCS and SIS. </li></ul>
  8. 8. DeltaV SIS Architecture <ul><li>Integrated but separate architecture allows BPCS/SIS controls on DeltaV control network. </li></ul><ul><li>Same engineering, maintenance, & operations environment </li></ul><ul><li>No serial communication because controls integrated within DeltaV. </li></ul><ul><ul><li>No need for extensive data mapping </li></ul></ul><ul><ul><li>No handshaking logic that is common in disparate solutions </li></ul></ul>
  9. 9. Original Design – Use of 3 SIS Transmitters
  10. 10. Original Design – Middle of 3 data points
  11. 11. Original Design – Middle of 3 data points <ul><li>The original SIS design was 2oo3, and it was assumed middle of 3 PV data would be transferred from the SIS to the BPCS controller, across the redundant control network. The use of middle of 3 SIS data points helps prevent bad data being provided to the controller and filters the data to keep control valve action to a minimum. However, there is a data latency issue, caused by the data transfer from the SIS to the BPCS. </li></ul>
  12. 12. Data Latency issues <ul><li>This causes the data to be transferred in a non-synchronous manner, with varying time delays. </li></ul>
  13. 13. PID Control Loops <ul><li>Most of the loops have pressure, flow, and level controllers for small volumes. In order to keep up with the fast process dynamics, these controllers run every half second. Using asynchronous data would result in poor quality control, so this situation was deemed unacceptable. </li></ul>
  14. 14. Faster I/O Update Speeds – DeltaV11.3 <ul><li>For time it takes for I/O data to be read by the DeltaV Controller on the control side: </li></ul><ul><ul><li>V10 or lower: one update per second </li></ul></ul><ul><ul><li>V11.3: DeltaV SIS will allow one update per 100 milliseconds </li></ul></ul><ul><li>Consequently, SIS update speeds in V11.3 may eliminate data latency issues. </li></ul>
  15. 15. SIS / BPCS Configuration <ul><li>In order to keep 2oo3 voting on the SIS, and good quality control, installation of a 4th transmitter would be required. The team viewed this design as excessive. The compromise was to land one of these transmitters directly on the BPCS, and dedicate it for control. 2oo2D was considered adequate coverage for any SIF up to SIL2. </li></ul>
  16. 16. Designs Considered – Option 1 <ul><li>Use 2oo3 voting on SIS transmitters with no BPCS transmitters </li></ul><ul><li>Resolution: Not considered due to data latency caused by data transfer from SIS to BPCS. </li></ul>
  17. 17. Designs Considered – Option 2 <ul><li>Use 3 SIS Transmitters for 2oo3 voting and 1 BPCS transmitter for PID control </li></ul><ul><li>Resolution: Team viewed this design (4 transmitters) as excessive. </li></ul>
  18. 18. Designs Considered – Option 3 <ul><li>Use 2oo2D for SIS voting AND 1 BPCS transmitter for PID control </li></ul><ul><li>Resolution: This achieved goals of using BPCS transmitter for PID control with option to use valid SIS transmitters for backup PID control if necessary. </li></ul>
  19. 19. Minimizing DCS Single Instrument Failures and Safety Demand
  20. 20. Findings <ul><li>It was proposed that the software configuration will prevent the BPCS controller from causing an inadvertent safety demand on the safety system. This will provide the same type of coverage that the Middle of 3 scheme provides, while preserving the 2oo2D design. The software configuration would require the PV data from the SIS is passed to the BPCS for two purposes. </li></ul>
  21. 21. Solution #1 – Deviation Alarming <ul><li>Use the SIS PV data to calculate deviations between the 3 transmitters. If the deviation between the SIS transmitters and the BPCS transmitter becomes large, we will force the BPCS controller into MANUAL. This will function as the alternative protection to Middle of 3 data configuration. </li></ul>
  22. 22. Solution #2 – Backup PID Control <ul><li>The SIS PV data will be available to be used for the BPCS controller, as backup data source. When the deviation alarming forces the BPCS controller to MANUAL, the board operator can select which SIS signal he can control with, until the BPCS transmitter can be repaired. </li></ul>
  23. 23. Potential Process Risks <ul><li>Transitioning from manual to auto on a new transmitter selection may introduce a bump if PV tracking is not used (ex: level controls). </li></ul><ul><li>Selection of faulty transmitter which appears healthy could introduce a process bump. </li></ul><ul><li>Should transmitter selection require supervisor access in order to ensure proper process risk management? </li></ul>
  24. 24. Software Logic <ul><li>The deviation calculations are used to trip the controller to MANUAL when a large deviation is detected for any transmitter selection. This transition to MANUAL will prevent the controller from driving the control valve too far open or closed, and will be alarmed so the operator can assess the situation and take appropriate action. </li></ul>
  25. 25. Software Configuration
  26. 26. Software Configuration – Case 1 to Manual <ul><li>If BPCS transmitter is selected AND there is a deviation between SIS1 and BPCS AND there is a deviation between SIS2 and BPCS, then controller is placed in MANUAL. </li></ul><ul><li>Solution may now be to control with one of the SIS transmitters until the BPCS transmitter is fixed. </li></ul>
  27. 27. Software Configuration – Case 2 to Manual <ul><li>If BPCS transmitters is not selected (Ex: OOS) AND there is a deviation between SIS1 and SIS2 transmitters, then controller is placed in MANUAL. </li></ul><ul><li>Since both BPCS and SIS transmitters may not be reliable, then this loop will have to be controlled manually by the Operator. </li></ul>
  28. 28. Future considerations – DeltaV 11.3 <ul><li>With data latency issues eliminated with DeltaV Version 11.3, do you eliminate the need for using BPCS transmitters for PID loop control? </li></ul>
  29. 29. Questions <ul><li>Thank you. </li></ul><ul><li>? </li></ul>

×