perbedaan FGS dan ESD System


lanjutan dari artikel sebelumnya.
Buat tambah pengetahuan sekalian di sharing.

saya copas dari web emersonprocessxperts.com, penjelasan mengenai perbedaan Fire & Gas System (FGS) dengan Emergency Shutdown (ESD) System.

cukup detail penjelasannya.

Here’s Mike’s post:

At Emerson Exchange last year, Rafael Lachmann presented on the topic of Fire & Gas System (FGS) solutions with DeltaV SIS. In his presentation, he provided a basic overview of FGS concepts and then he described how DeltaV SIS could be used for FGS applications. He described how emergency shutdown (ESD) systems are different from FGS, how onshore FGS differs from offshore FGS applications, and how DeltaV SIS can be used for FGS applications.

For an ESD, a process upset will result in a process shutdown. ESD systems are preventative layers of protection, meaning that they act to prevent a hazardous event like a chemical release, fire, or explosion from occurring. A FGS is a mitigating layer of protection, because the purpose is to reduce the consequence severity of such an event when it occurs. When a combustible gas, a toxic gas, smoke, flame, or heat is detected, then the FGS will respond by annunciating audible and visual alarms and initiate a water deluge, fire suppression system, or a process shutdown. In the event of a gas leak, the FGS can act to prevent it from becoming a fire or explosion by isolating the leak and ignition sources. In the Deepwater Horizon Accident Investigation Report that was issued by BP in September 2010, this was listed as one of the 8 barriers that were breached.

The fire and gas system did not prevent hydrocarbon ignition. Hydrocarbons migrated beyond areas on Deepwater Horizon that were electrically classified to areas where the potential for ignition was higher. The heating, ventilation and air conditioning system probably transferred a gas-rich mixture into the engine rooms, causing at least one engine to overspeed, creating a potential source of ignition.

A typical ESD safety instrumented function (SIF) is typically quite simple when compared to what is implemented for a FGS. A FGS SIF can be very complex and highly distributed, with 1ooN or 2ooN voting from a large number of detector devices located throughout a unit, process, and plant area. In some cases, a FGS event can initiate a site-wide emergency shutdown.

Another important difference is that an ESD is typically designed as normally energized (de-energize-to-trip) so that it is fail-safe. This way, if there is loss of power or connectivity between system components then the SIS will respond by tripping. This results in higher safety integrity, but it can result in increased spurious trips of the process. For FGS, a spurious trip can have dangerous results. For example, initiating a water deluge system inside a building can cause damage to equipment and can be hazardous to personnel. Chemical fire suppression can be dangerous to personnel, and false alarms degrade the willingness to respond by plant personnel. For this reason, it is common to design a FGS as normally de-energized (NDE).

In a NDE design, the loop must be energized in order to initiate a trip of the FGS. This means that failures such as loss of power or connectivity between components are covert failures unless there is adequate diagnostics to detect the failures. In a NDE design, line monitoring is essential to detect open and short circuit failures in wiring between logic solver I/O and field devices.

The major differences between offshore and onshore FGS design result from the difficulty to evacuate and limited offsite emergency response assistance when an offshore incident occurs. Rafael’s discussion on how onshore FGS differs from offshore FGS will soon be covered in another blog post.

link detailnya bisa di klik disini

Ditulis dalam FGS, SIS. Tag: , . 2 Comments »

pemisahan F&G System dengan SIS


ada topik menarik dari diskusi group SIL di linkedin sehubungan dengan pemisahan Fire & Gas (F&G) System dengan Safety Instrumented System (SIS).

Dulu waktu project Arthit APP (Arthit Process Platform) saya perhatikan F&G System digabung dengan SIS.
Kalau ditempat saya kerja sekarang sih dipisah antara F&G System dengan Emergency Shutdown System.

Dari diskusi di bawah saya setuju dengan yang dipisah.

Berikut cuplikannya.

 

Pertanyaan:

SIS used as F&G system.

Can a SIS be used as a F&G system? Can we integrate both in the same system? You know that when is required by Hazop study thast some F&G detectors shall have process action (close valves, stop pumps), normally we put that detectors into the SIS PLC.
And for mitigation action (when it is required energized to trip)? Supplier (as Emerson) already have devices to used in DElta V SIS for that purpose. With today’s technology, many companies utilize an integrated approach and interfaced the FGS with the ESD system to initiate plant shutdown if hazardous events occur. Any standard that not permitt the F&G and shut down in the same system?

 

Tanggapan para anggota:

Lawrence Blackmore
– I assume we are talking about IEC61511? The more you put in the SIS that contains your SIF’s the more complex it becomes to meet the requirements for operational management of the SIS. Using typical offshore production numbers for…

Ricardo Cordeiro
– What I am trying to araise is: Dont have a seprate F&G system, and implemented into the SIS (same logic solver). There are some vendor talking abou this FGS-SIS integration. So prevention layer with mitigation layer in the same safey…

Ricardo A. Vittoni
– Ricardo, you are right. Although ESD and F&G are both SIS per IEC 61511, you should not run both on the same logic solver.
We can argue two days about pros and cons, but just think about this:

You will need separate I/O cards for ESD…

Paul Gruhn,
– This has been asked a number of times before. The systems are usually separated to ease management of change, simplify the designs, minimize common cause, etc. Many will use the same logic solver technology/type, but still have two separate systems.

Koorosh Moghadam
– Although the idea does not violate any standard, it shall not be taken into practice based on Ricardo and Paul’s comments. However in small scale packages like rotary machines where F&G signals are not noticeable, there is intention of implementing both signals in an individual SIS.

Ricardo Cordeiro
– I think a big concern is when we do a plant shutdown for revamping whatever and the SIS goes to off line, but the F&G system shall be on line even in that cases, because there are works on going and the Fire or gas needs to be detected all the time.

Laxmikant Jahagirdar
– The sensors connected to F& G system are prone to failures & require frequent maintenance. Integration in SIS will add further degradation of SIS other than the reasons mentioned above.

John Thomas
– See kenexis.com. They have some great tutorials on F&G and process safety. Check out their youtube site.

Aria Putra Maulana
– The F&G system provides mitigation for operations when dealing with a loss of containment and fire event. Therefore it is important to ensure the availability of the system through any potential scenario up to abandonment of the facility (up to the highest shutdown hierarchy level). So, we use the same high integrity hardware platform as SIS for F&G for the reasons of ensuring this high availability requirement. You’re right that F&G adopts NDE (equipped with line monitoring) and SIS adopts NE for their final device circuit therefore we should not combine them in one common logic solver as they have different requirement for the fault reaction configuration, i.e. one is non-safety related and the other is safety related (i.e. shutdown the controller on any uncontrollable fault is detected such as short or open circuit of the output loops, cross wiring between output loops, any failure of the suppression diodes in the output module, etc.

Aria Putra Maulana
– So, imagine if we put SIS and F&G in a common logic solver, when there is presence of fire and it causes output circuit fault and SIS DO module failure, it will shutdown the common controller regardless the DO module redundancy and will leave all NDE F&G outputs remain de-energized e.g. power isolation will not be isolated (or circuit breakers will remain close), deluge valves will remain close and cannot be opened, firewater pump will not be able for remote start, etc. thus the system will fail to give protection against the hazard arise.

Ricardo Cordeiro,
– FGS in the same Logic Solver but differnet cards, Emerson has this apllication intregated FGS-SIS (NE to NDE)…

Ricardo Cordeiro,
http://www.emersonprocessxperts.com/2011/02/differences_in/

Ricardo Cordeiro,
http://www2.emersonprocess.com/en-US/brands/deltav/sis/applications/Pages/FGS.aspx

Ricardo Cordeiro,
– Fire and gas systems may be implemented in the SIS logic solver according to IEC 61511/ISA 84.00.01-2004, which requires that the user ensure that the non-SIS functions do not impact the functionality and/or integrity of the SIS.

 

… selengkapnya bisa di klik link ini.

 

Ditulis dalam FGS, SIS. Tag: , . 2 Comments »

SAT Fire System Eagle Quantum Premier (EQP) , Sept. 2015


Bismillah

Sekedar sharing…

Beberapa hari yang lalu juare97 ikut SAT (Site Acceptance Test) dari project upgrade Sistem Fire and Gas di salah satu plant kami.

Sistem Fire and Gas ini menggunakan Eagle Quantum Premier (EQP) menggantikan sistem lama, Eagle Quantum (EQ), yang sudah obsolete.
Project ini hanya mengganti Fire&Gas Controllernya saja, sedangkan detectornya masih pakai existing.

Sistem ini didesain redundant controller dan networknya LON (ring).
Sistem ini buatan Detronics dimana agennya di Indonesia adalah Wifgas.

Berikut penampakannya.

Terlihat berantakan kabelnya karena mmng temporary saja. 🙂

Untuk pengetesan device cukup satu saja masing2 type. Nanti tinggal diganti2 addressnya saja.

Ada IDC (Input seperti Break Glass, Smoke Detector), SAM (HORN), UV/IR, Gas Detector.

SAT ini mengecek barang yang datang apakah sudah sesuai dengan list.
Lalu lanjut dengan menyalakan device (power ON) dan tes fungsi (function test) baik tes Input Output maupun tes logicnya.
Sehingga diharapkan saat Commmissioning bisa berjalan dengan lancar.

Berhubung ada meeting di JKT, juare97 hanya bisa ikut bbrp hari saja.
Jadi tidak melihat instalasi dan commissioningnya.

Semoga berjalan dengan lancar. 🙂

—-

Tambahan info:

Contoh Jaringan LON Redundant EQP.

Redundant EQP, LON dengan field device

Redundant EQP, LON dengan field device

Info lainnya:

http://www.det-tronics.com/ProductCatalog/CertifiedSystems/Pages/EQ3000EQPController.aspx

sumber: SPECIFICATION DATA Eagle QuantumPremier® Fire and Gas Detection / Releasing System (90-1150-3.2_eqp_system.pdf)
SYSTEM DESCRIPTION

The Eagle Quantum Premier system is a third generation hazard protection system that is designed for fire and gas detection, control of notification appliance circuits, and the releasing of various suppression agents. The system utilizes modularized field devices on a digital communication loop. All detection,re-action, and notification activities are coordinated
through a centralized Controller.

The system has the flexibility to utilize any combination of Eagle Quantum Premier field devices. It can be configured as a total gas detection system, a total fire detection system, or a combination of both fire and gas detection. All devices and operating parameters are configured through the Controller.

Third party devices can be integrated into the system either through dry contact closure inputs (using IDCs/DCIOs) or through 4 to 20 mA inputs (using DCUs/Analog Input Modules).

Through its centralized control unit, the Eagle Quantum Premier system provides an open architecture in which systems can be tied together to share information. PLC, DCS and human/machine interface (HMI) systems can communicate directly with the Eagle Quantum Premier system through supported communication protocols. The controller supports up to five serial ports, utilizing Modbus RTU master/slave protocol and Safety System Software (S3) for configuring the EQP system. An optional redundant media ControlNet board is also available.

The Eagle Quantum Premier Controller displays current information about the system. Twelve LEDs are provided to indicate when an alarm or fault condition exists. A four line 20-character vacuum fluorescent display (VFD), controlled by front panel membrane buttons, can display a variety of status and diagnostic information. Alarm and trouble conditions are easily identified, along with the associated device tagname.

The Eagle Quantum Premier system provides operational flexibility through custom designed user logic programs in the controller. Over 50 different types of logic functions are available to allow the system to be optimized for fire and gas applications.

CONTROLLER REDUNDANCY

Two EQP controllers can be configured as a redundant pair, thereby increasing the availability of the system. The controllers work in “Master” and “Hot Standby” mode. Under normal operating conditions, the Standby controller receives the same inputs and update information as the Master, but has no control over the outputs and does not execute user logic. In the event of a switchover, a bumpless transfer occurs.

Controller Redundancy offers the following benefits:
• Automatic configuration of the standby controller
• Bumpless transfer
• Forced and automatic switchover
• No downtime on controller replacement
• Automatic synchronization between controllers
• Increased system availability.

EAGLE QUANTUM PREMIER CONTROLLER

The microprocessorbased Controller continuously monitors the field devices on the Local
Operating Network / Signaling Line Circuit (LON/SLC) and performs the logic functions needed to generate the appropriate output(s). The Controller performs both static and user programmable logic operations. Static logic controls the faceplate displays and relay outputs (alarm, trouble and supervisory) per ANSI/NFPA 72. Static logic also activates built-in annunciation circuits, consisting of both visible and audible alarms.

Programmable logic allows the Controller to be customized to perform a variety of complex logic operations. Using Det-Tronics Safety System Software (S3), the Controller can be programmed to implement any cross-zone monitoring, voting, or timed operations that might be needed in a system.

The Controller also has provisions for communication with external devices and software. An optional ControlNet™ board is available for monitoring Eagle Quantum Premier’s system status
• Simplex / redundancy operation
• Approved annunciation and releasing device per NFPA 72
• Meets FM/CSA guidelines in an approved gas system
• Programmable logic
• Up to five available serial ports
• Transformer isolation of network ports
• Utilizes MODBUS and Allen Bradley ControlNet protocols
• Eight programmable relay outputs
• Eight digital inputs
• Four-line, 20 character alphanumeric display
• LED status indicators
• Fault tolerant communication loop
• Extensive built-in diagnostics
• Supports up to 246 field devices
• FM/CSA/CENELEC/CE