PLC architecture can provide high safety integrity

There's no safety like nuclear safety. Consequently, process safety instrumented systems (SIS) requiring a high safety integrity level (SIL) can benefit from a programmable logic controller (PLC) architecture used in nuclear safety systems. (See this issue's cover articles for related safety topics.

09/01/1998


There's no safety like nuclear safety. Consequently, process safety instrumented systems (SIS) requiring a high safety integrity level (SIL) can benefit from a programmable logic controller (PLC) architecture used in nuclear safety systems. (See this issue's cover articles for related safety topics.)

For instance, a PLC module developed by Framatome Technologies is among those using redundancy and diversity to enhance reliability. If an unsafe condition is detected, the module's two safety-function microprocessors can cause any of the relay outputs to open. Watch-dog timers will open the relay outputs if either processor stops running. Also, an OR gate can be substituted for the AND gate for devices requiring a contact closure (non-failsafe output) to actuate.

Using microprocessors that differ in design, microcode, and software compiler manufacturer minimizes common mode failures that could defeat safety interlocks. Using a common functional design document, diverse software is developed by two software teams working independently. Software is then tested and validated by a third team, independent of the developers.

Different microprocessors with different software ensure the SIS will achieve its safety mission, even if a hardware and/or software fault disables one microprocessor.

Diversity aids reliability

The PLC's self-contained redundancy and diversity complements other redundant and diverse elements to provide an SIS with SIL 3 integrity. SIL 3 is quantified in the ANSI/ISA-S84.01-1996 standard, "Application of Safety Instrumented Systems for the Process Industry," as a probability of failure on demand average range (PFD avg) of 10-3to 10-4.

Specifying diversity in sensor type, manufacturer, and activation methods reduce common mode failures. For example, using one RTD (resistance thermal detector) and one thermocouple, and pressure sensors and ventvalves from different manufacturers, reduces common mode failures. Adding a hardwired, manually operated emergency shutdown circuit also provides diversity. When a high-high pressure, or high-high temperature input signal is detected, the PLC's fail-safe outputs open redundant emergency vent valves to depressurize the reactor.

PLC testing is done on line using continuous diagnostic routines. Off-line testing uses a test computer that injects simulated process signals into the PLC module. Input signals are varied by the test computer and PLC output responses are monitored. Both microprocessors are tested at the same time, and hard copy test records are developed.

Shared memory and a separate microprocessor in the PLC module handle communications with external systems. This architecture makes SIS data available, yet prevents communication interrupts from interfering with safety requirements. This PLC architecture provides the same high reliability and high availability of two PLCs.

For more information about Framatome Technologies, visit www.controleng.com/info .





No comments
The Top Plant program honors outstanding manufacturing facilities in North America. View the 2013 Top Plant.
The Product of the Year program recognizes products newly released in the manufacturing industries.
The Leaders Under 40 program features outstanding young people who are making a difference in manufacturing. View the 2013 Leaders here.
The new control room: It's got all the bells and whistles - and alarms, too; Remote maintenance; Specifying VFDs
2014 forecast issue: To serve and to manufacture - Veterans will bring skill and discipline to the plant floor if we can find a way to get them there.
2013 Top Plant: Lincoln Electric Company, Cleveland, Ohio
Case Study Database

Case Study Database

Get more exposure for your case study by uploading it to the Plant Engineering case study database, where end-users can identify relevant solutions and explore what the experts are doing to effectively implement a variety of technology and productivity related projects.

These case studies provide examples of how knowledgeable solution providers have used technology, processes and people to create effective and successful implementations in real-world situations. Case studies can be completed by filling out a simple online form where you can outline the project title, abstract, and full story in 1500 words or less; upload photos, videos and a logo.

Click here to visit the Case Study Database and upload your case study.

Bring focus to PLC programming: 5 things to avoid in putting your system together; Managing the DCS upgrade; PLM upgrade: a step-by-step approach
Balancing the bagging triangle; PID tuning improves process efficiency; Standardizing control room HMIs
Commissioning electrical systems in mission critical facilities; Anticipating the Smart Grid; Mitigating arc flash hazards in medium-voltage switchgear; Comparing generator sizing software

Annual Salary Survey

Participate in the 2013 Salary Survey

In a year when manufacturing continued to lead the economic rebound, it makes sense that plant manager bonuses rebounded. Plant Engineering’s annual Salary Survey shows both wages and bonuses rose in 2012 after a retreat the year before.

Average salary across all job titles for plant floor management rose 3.5% to $95,446, and bonus compensation jumped to $15,162, a 4.2% increase from the 2010 level and double the 2011 total, which showed a sharp drop in bonus.

2012 Salary Survey Analysis

2012 Salary Survey Results

Maintenance and reliability tips and best practices from the maintenance and reliability coaches at Allied Reliability Group.
The One Voice for Manufacturing blog reports on federal public policy issues impacting the manufacturing sector. One Voice is a joint effort by the National Tooling and Machining...
The Society for Maintenance and Reliability Professionals an organization devoted...
Join this ongoing discussion of machine guarding topics, including solutions assessments, regulatory compliance, gap analysis...
IMS Research, recently acquired by IHS Inc., is a leading independent supplier of market research and consultancy to the global electronics industry.
Maintenance is not optional in manufacturing. It’s a profit center, driving productivity and uptime while reducing overall repair costs.
The Lachance on CMMS blog is about current maintenance topics. Blogger Paul Lachance is president and chief technology officer for Smartware Group.