Safety Instrumentation Lecture - 1: DR V S Krushnasamy Associate Professor
Safety Instrumentation Lecture - 1: DR V S Krushnasamy Associate Professor
Safety Instrumentation Lecture - 1: DR V S Krushnasamy Associate Professor
SAFETY INSTRUMENTATION
Lecture – 1
Dr V S Krushnasamy
Associate Professor
Prerequisites
Familiarity with Industrial Control Systems
Elementary knowledge of safety.
Module 3
SAFETY INTEGRATED LEVEL (SIL)
Safety Integrated Level SIL 0 / None
SIL1
SIL 2-
SIL 3
SIL 4
RISK
3/14/2019 Dept of Instrumentation Technology 8
DSCE
DEPT OF ELECTRONICS and INSTRUMENTATION
ENGINEERING
IEEI821 Safety Instrumentation
Module 4
SAFETY INSTRUMENTED FUNCTION(SIF) AND SAFE
FAILURE FRACTION(SFF) IN FIELD,UTILITY AND SIM
Safe Failure Fraction (SFF)
Safety Instrumented Function (SIF)
Hazard, Mode of
operation,Detecion,Decision,Action
Safe state, Response time,
Proof –test interval, Spurious trip rate
3/14/2019 Dept of Instrumentation Technology 9
DSCE
DEPT OF ELECTRONICS and INSTRUMENTATION
ENGINEERING
IEEI821 Safety Instrumentation
Module 5
OPERATION, MAINTENANCE, TESTING,
REPORTING AND MANAGEMENT OF PSMP
Reports/Records
Protection System Maintenance Program
(PSMP)
Self Monitoring Capabilities and Limitations
Notifications of Protection Systems Failures
3/14/2019 Dept of Instrumentation Technology 10
DSCE
DEPT OF ELECTRONICS and INSTRUMENTATION
ENGINEERING
IEEI821 Safety Instrumentation
Text Books
1.ld Goettsche. ISA Maintenance of
Instruments and Systems, 2nd Edition ISA.
2. Williams M. Goble, Control system safety
evaluation and reliability ,ISA.
3. Harry Cheddie , William M. Goble , Safety
Instrumented Systems Verification: Practical
Probabilistic Calculation,ISA.
3/14/2019 Dept of Instrumentation Technology 11
DSCE
DEPT OF ELECTRONICS and INSTRUMENTATION
ENGINEERING
IEEI821 Safety Instrumentation
Reference Books
1. Alan McMillan, Electrical Installations in
Hazardous Areas, Butterworth-Heineman
1998.
2. Lindley R. Higgins, R. Keith Mobley, Darrin
Wyckoff, Maintenance Engineering
Handbook Seventh Edition.
3. Jones E. B. Instrument Technology, Vol - I, II,
Hollywell
3/14/2019 Dept of Instrumentation Technology 12
DSCE
DEPT OF ELECTRONICS and INSTRUMENTATION
ENGINEERING
IEEI821 Safety Instrumentation
ASSIGNMENT:
S.No. Topics Relevance to CO's
PEDAGOGICAL INITIATIVES
S.No. Topics Activity planned
WEB RESOURCES:
1. http://en.wikipedia.org/wiki/Electrical_equipment_in_hazardous_areas .
2. http://en.wikipedia.org/wiki/Safety_instrumented_system
3. http://en.wikipedia.org/wiki/Safety_critical_system
4. http://en.wikipedia.org/wiki/Fail-safe
5. https://www.processengr.com/ppt_presentations/safety_lifecycle_training_2015.pdf
6. https://www.emerson.com/documents/automation/consider-these-safety-
instrumented-system-best-practices-en-38176.pdf.
7. https://www.iec.ch/functionalsafety.
8. https://www.csagroupuk.org/wp-
content/uploads/2016/11/CSA_Group_Functional_Safety_IEC_White_Paper_PrV.pdf.
9. http://sellacontrols.com
10. https://www.nerc.com/docs/standards/sar/PSMT_Supplementary_Reference_Draft1
_2009July23.pdf
3/14/2019 Dept of Instrumentation Technology 16
DSCE
DEPT OF ELECTRONICS and INSTRUMENTATION
ENGINEERING
IEEI821 Safety Instrumentation
When/Where
To (Frequency Evidence Course
Method What Max
Whom in the Collected Outcome
course)
3 IA tests
conducted
30 Blue Book 1 to 6
and average
(Continuous
Evaluation)
IA Exam
Internal
is taken
CIE
1 to 6
assignment 10 Book
Students
SEE(Semester End
Examination)
50 1 to 6
course Sheet
Total 100
INDIRECT ASSESSMENT
1 to 6
Effectiveness
Students
Online
Course Exit of Delivery
End of the Question
Survey of Course,
Semester naires
Assessment
Methods
What is an explosion?
An explosion is defined as a sudden reaction involving
rapid physical or chemical decay accompanied by an
increase in temperature or pressure or both.
Important Note:
The presence of these three elements make up
the sides of the ignition triangle. If any one of
the three elements is missing, an explosion will
not occur. All three elements must exist
simultaneously for an explosion to occur.
EPL Gb
Equipment for explosive gas atmospheres, having a ‘high’ level of
protection, which is not a source of ignition in normal operation or
when subject to faults that may be expected, though not necessarily
on a regular basis.
EPL Gc
Equipment for explosive gas atmospheres, having a ‘enhanced’ level
of protection, which is not a source of ignition in normal operation
and which may have some additional protection to ensure that it
remains inactive as an ignition source in the case of regular expected
occurrences [for example failure of a lamp].
s) 3/14/2019 Dept of Instrumentation Technology 77
EPL Da
Equipment for combustible dust atmospheres, having a ‘very
high’ level of protection, which is not a source of ignition in
normal operation or when subject to rare faults.
EPL Db
Equipment for combustible dust atmospheres, having a ‘high’
level of protection, which is not a source of ignition in normal
operation or when subject to faults that may be expected,
though not necessarily on a regular basis.
EPL Dc
Equipment for combustible dust atmospheres, having an
‘enhanced’ level of protection, which is not a source of
ignition in normal operation and which may have some
additional
3/14/2019
protection Dept of Instrumentation Technology 78
DSCE
DEPT OF ELECTRONICS and INSTRUMENTATION
ENGINEERING
IEEI821 Safety Instrumentation
Level of protection ic :
Intrinsically safe circuits in electrical apparatus
of category ‘ib’ must not be capable of causing
an ignition in normal operation:
a]Where distances are critical for safety, they
shall meet the requirements of IEC 60079-11 .
High fuel gas pressure furnace initiates shutdown of main fuel gas
valves.
High reactor temperature initiates fail open action of coolant
valve.
High column pressure initiates fail open action of pressure vent
valve.
Every element in the loop is part of the SIS, and needs to be
considered when doing an analysis of the SIS. This could include
pressure and temperature transmitters, a control system or stand-
alone controller, control valves or other final control devices,
electrical wiring, process piping,power supplies, software, etc
Depressurize / Blowdown
Risks of this sort are usually managed with the methods and tools of
safety engineering. A life-critical system is designed to lose less than
one life per billion [109] hours of operation. Typical design methods
include PROBABILISTIC RISK ASSESSMENT, a method that combines
failure mode and effects analysis [FMEA] with FAULT TREE ANALYSIS.
Safety-critical systems are increasingly computer-based.
3/14/2019 Dept of Instrumentation Technology 134
DSCE
DEPT OF ELECTRONICS and INSTRUMENTATION
ENGINEERING
IEEI821 Safety Instrumentation
INTERLOCKS is:
Focused on events and their logical
relationship;
Applicable to diverse components [e.g.
hardware, software, or operator events];
Graphical [employing symbols and color to
represent event relationships, event types,
and event states]; and Requires no
programming knowledge to use.
3/14/2019 Dept of Instrumentation Technology 146
DSCE
DEPT OF ELECTRONICS and INSTRUMENTATION
ENGINEERING
IEEI821 Safety Instrumentation
Good practices in control interlock for safety :
Never by-pass the calculation [logic] for the SIS, i.e., never turn it
off
Never mechanically block a control, SIS valve so that it cannot close
Never open manual by-pass values around control and shutdown
valves
Never "fix" the alarm acknowledgement button so that new alarms
will not require the action of an operator
Avoid using the same sensor for control, alarm, and SIS. Also, avoid
using the same process connection [thermowell, tap, etc.] for all
sensors.
Avoid combining high and low value alarms into one indication
RELIABILITY REGIMES
Reliability regimes for life-critical systems
consist
Fail-operational systems,
Fail-safe systems,
Fail-secure,
Fail-Passive systems,
Fault-tolerant systems
3/14/2019 Dept of Instrumentation Technology 149
DSCE
DEPT OF ELECTRONICS and INSTRUMENTATION
ENGINEERING
IEEI821 Safety Instrumentation
FAIL-OPERATIONAL SYSTEMS :
Fail-operational systems continue to operate when
their control systems fail.
Examples of these include elevators, the gas
thermostats in most home furnaces, and passively safe
nuclear reactors.
Fail-operational mode is sometimes unsafe. Nuclear
weapons launch -on-loss-of-communications was
rejected as a control system for the U.S. nuclear forces
because it is fail-operational: a loss of communications
would cause launch, so this mode of operation was
considered too risky.
3/14/2019 Dept of Instrumentation Technology 150
DSCE
DEPT OF ELECTRONICS and INSTRUMENTATION
ENGINEERING
IEEI821 Safety Instrumentation
Fail-safe systems
Fail-safe means that a device will not fall the lives or
property in danger situation when it fails.
Fail-safe systems become safe when they cannot operate.
Many medical systems fall into this category.
Fail - safe systems become safe when they cannot operate.
Programmable logic controllers [PLCs]. To make a PLC fail-
safe the system does not require energization to stop the
drives associated. For example, usually, an emergency stop
is a normally closed contact. In the event of a power failure
this would remove the power directly from the coil and also
the PLC input. Hence, a fail-safe system.
3/14/2019 Dept of Instrumentation Technology 151
DSCE
DEPT OF ELECTRONICS and INSTRUMENTATION
ENGINEERING
IEEI821 Safety Instrumentation
FAIL-SECURE SYSTEMS :
Fail-secure means that access or data will not fall into the
wrong hands in a failure. Sometimes the approaches
suggest opposite solutions.
Fail-secure systems maintain maximum security when
they can’t operate.
For example,
While fail-safe electronic doors unlock during power
failures, fail-secure ones will lock, keeping an area secure.
Security doors.
If a building catches fire, fail-secure would lock doors to
prevent unauthorized access to the building.
3/14/2019 Dept of Instrumentation Technology 152
DSCE
DEPT OF ELECTRONICS and INSTRUMENTATION
ENGINEERING
IEEI821 Safety Instrumentation
FAIL PASSIVE SYSTEMS
Fail-Passive systems continue to operate in the event of
a system failure.
Fail-Passive systems a system failure “does no harm”.
An example includes an aircraft autopilot. In the event
of a failure, the aircraft would remain in a controllable
state and allow the pilot to take over and complete the
journey and perform a safe landing in other word
aircraft autopilots that stop controlling the plane, but
won’t steer aircraft in the wrong direction.
3/14/2019 Dept of Instrumentation Technology 153
DSCE
DEPT OF ELECTRONICS and INSTRUMENTATION
ENGINEERING
IEEI821 Safety Instrumentation
FAULT-TOLERANT SYSTEMS :
Fault-tolerant systems avoid service failure when faults are
introduced to the system. An example may include control
systems for ordinary nuclear reactors.
The normal method to tolerate faults is to have several
computers continually test the parts of a system, and
switch on hot spares for failing subsystems. As long as
faulty subsystems are replaced or repaired at normal
maintenance intervals, these systems are considered safe.
Interestingly, the computers, power supplies and control
terminals used by human beings must all be duplicated in
these systems in some fashion.