MAST2776B Process Instrumentation TS Lesson 5 Rev.00
MAST2776B Process Instrumentation TS Lesson 5 Rev.00
Rev.00 – 28/07/2023
Course Objective
▪ Lesson 5:
▪ Lesson 4:
✓ Emergency Systems and logics
✓ Valves in Automation & Control
Systems
✓ Course Review
✓ Final Assessment Questionnaire
and Correction
3 Eni corporate university
MAST2776B - Process Instrumentation & Control Systems
Iraq
Lesson Objective
▪ This lesson aims to provide an ▪ This lesson will treat the following topics:
overview about the measurements • ICSS
and related instruments of main • Emergency Shutdown System
process variables • Fire & Gas System
Important Definitions
▪ Basic Process Control System (BPCS): a generic term to describe both DCS and PLC
▪ The Integrated Control and Safety System (ICSS) approach seeks to combine the
functionality of both in a single overall system architecture
Definition
An Integrated Control and Safety System (ICSS) is a technology platform that combines
elements of process control and functional safety into a single architecture.
▪ Traditionally Safety Instrumented Systems and Process Control Systems have been physically
separated.
▪ They have been supplied by specialist companies
▪ Now the standard IEC 61508, which have less prescriptive safety standards, allow for the
possibility of SIS and BPCS to be combined.
ICSS
8 eni corporate university
ICSS
ESD
IEC 61508
is an international standard governing the entire life cycle of safety-
related electrical, electronic or programmable electronic (E / E / PE)
products and systems, including their application, design, use and
maintenance.
▪ The important concept for the standard is separation, which is commonly interpreted as
functional separation.
• Safety and non-safety functions must be independent
• Failure of a non safety-related function must not cause a dangerous failure of a safety-
related function
ICSS Architecture
▪ Basic Process Control System and Safety Instrumented System can be:
▪ Separate
• Totally separate and work independently
▪ Interfaced
• They use different control and I/O hardware
• Different suppliers
• Connected by a gateway to exchange data
Interfaced systems
11 eni corporate university
ICSS
ICSS Architecture
▪ Integrated
• Separate control and I/O hardware
• Single supplier
• Common networks, engineering tools,
operator interface
Integrated systems
▪ Common
• Common platform
• Single system
• Single supplier Common systems
Integrated Architecture
▪ The Common approach is possible, but an ICSS is most often realized by using the Integrated
approach.
▪ The goal is to achieve integrated control & safety by appropriate level of:
• Separation
• Resistance to common cause faults
• Access protection
• Security
▪ Hardware Diversity
▪ Safety Islands
• each of these islands contains
measures to detect and control faults
at the hardware level and at the
safety function level
• interference from the standard
elements of the system on the safety
function is prevented
ICSS Benefits
ICSS Benefits
▪ Reduced Operational Expenditure (Opex)
• Better visibility of the information for the operator (alarms and general data)
• Maintenance is simplified
• The use of smart transmitters allows to predict problems
ICSS Benefits
▪ Easier management of change
• Integrated toolsets and a single database can also make it easier and quicker
to manage changes to the safety system logic in accordance with IEC 61511
IEC 61511
This standard was developed and then updated in 2017 by the international
electrotechnical commission - the IEC - with the aim of creating a single set of
requirements that would consider the entire life cycle of SIS (Safety Instrumented
Systems) such as identification, design, installation, operation, maintenance, specific
for the process industry
ACTIVITY
True False
ICSS combines the functionality of both the DCS and the PLC
▪ In the Oil and Gas industry, an Emergency Shutdown is a safety system that is designed to
minimize the consequences of an emergency situation, such as a failure, to reduce the potential
of flooding, escape of hazardous materials, or outbreak of fire.
▪ The ESD system could act rising an alarm to alert the operators and initiating emergency
equipment such as block valve stations, pump stations, relief tanks to minimize the quantity
of oil dispersed to the environment.
▪ The ESD intervention can be therefore summarized in two steps:
• Spill source control;
• Containment and recovery of spilled hydrocarbons at the spill source to prevent their
distribution.
▪ The ESD system, initiated by a temperature transmitter located on the motor, will act
switching the motor off and putting the driven equipment in a safe condition (e.g. closing
related valves, starting the spare equipment, etc.).
Main Features
Main Features
What does fail- safe mean?
A fail-safe is a design feature or practice that in the event of a specific type of failure,
inherently responds in a way that will cause no or minimal harm to other equipment, to the
environment or to people
ESD Actions
International Standards
Main Components
Alarm Conditions
Initiating device…
Inputs from the Fire and Gas detection system can also be used to initiate
Emergency Shutdown
Manual Initiation
• Maintenance purposes
• Safety measures
ESD Valves
▪ These valves are designed to stop the flow of a hazardous fluid or external
hydrocarbons (gases) upon the detection of a dangerous event
▪ Their actuators are fail-safe fluid power type. Typical examples of these are:
• Pneumatic cylinder
• Hydraulic cylinder
• Electro-hydraulic actuator
Example of an emergency
Shutdown Valve
Blowdown Valves
▪ These valves are designed to open upon ESD action to release gas to atmosphere or flare
and therefore preventing a potentially dangerous overpressure situation
ESD Levels
▪ Typically, there are four levels of ESD.
• Level 1: Complete Shutdown of Plant
ESD Levels
ESD Levels
▪ It can be initiated:
• Automatically
• Manually via a pushbutton
• Heating medium
• Drains
• Diesel oil
• HVAC
▪ It is initiated by:
• System instrumentation recognizing system upset conditions
• Confirmed fire or gas detection from MACs
ESD Operation
▪ Emergency plans and procedures ▪ Typically plans and procedures will be formulated to
can be categorized as: cover:
• emergency procedures • total power failure
• procedures to deal with upset • loss of emergency power generation
operating conditions • fire
• procedures to deal with • explosion
equipment failure
• major oil spill
• release of toxic gas
• release of flammable gas
• chemical spill.
ESD Operation
▪ Operations during the Emergency Shutdown:
• Ensure that personnel, the environment and plant and equipment have been
protected by the ESD system
• Check the plant to confirm that all shutdown devices have gone to their fail
safe positions.
• Establish the cause of the trip and take the necessary steps to rectify it.
ESD Inputs
Valve V-2
▪ Normal operation
• The solenoid of the V-1 three-way valve is energized, allowing line product to be
routed to the diaphragm of valve V-2, the ESD valve.
• The line gas pressure acts on the ESD valve diaphragm, against the force of the valve
spring, to maintain the valve in the open position.
52 eni corporate university
ESD
ESD Inputs
Valve V-2
• The three-way valve will close its path to the ESD diaphragm valve and vent line gas to
atmosphere
▪ The figures show when the block can be requested with manual activation (HS), while for the
interventions generated by fire and very low pressure, refer to the above-mentioned cause-
effect diagrams.
Activity
Explain what are the primary reasons
or cause behind the intervention of
general block systems with and
PSD without depressurization without depressurization measures in
PSD with depressurization Cancel depression place?
▪ The emergency system intervention area covers the entire treatment system, from the well to the plants.
In order to have a complete and, at the same time, detailed control, different levels of intervention have
been designed.
▪ All the plants, both Off-Shore and On-Shore, are equipped with multi-level hierarchical logic systems,
according to the extent and the deviations relevance and to the normal process conditions. They are
classified as follows:
• LSD (Local Shutdown): it consists in the rapid closure or rapid block of the production localized in a
limited portion of the plant or of a single well, due to a process anomaly.
• PSD (Production Shutdown or Process Shutdown): consists in the rapid closure or rapid block of the
whole production, due to a process anomaly.
• ESD (Emergency Shutdown): consists in the rapid closure or rapid block of the whole production, due
to a fire.
59 eni corporate university
C&E Matrices
▪ The levels highlights a hazard scale to which correspond from localized to global interventions
on the entire treatment plant.
▪ The emergency (ESD) and production (PSD) block sequences are performed by a PLC
(Programmable Logic Controller) or DCS (Distributed Control System) system, and they are
activated through a hydraulic generation system.
▪ Thus, the system provides for the rapid closure, according to a pre-established sequence, of a
portion or of all the actuated valve (SDV = shut-down valve) of the production system by
means of a single automatic or manual command of the control system and the potential
opening of the actuated valve (BDV= Blow-down valve) for the plant depressurization.
▪ While the emergency closure can be remotely operated (remote control), the valves re-
opening requires the operator intervention «on site» to control all the recovery and plant
pressurization phases. The emergency command is installed not only on the panel located in
the control room, but also in other strategic points.
▪ For instance, on sea platforms it can be installed in lower risk areas such as offices, helipad,
docking gangway, etc.
61 eni corporate university
ESD
Causes & Effects (C&E) Chart
▪ C&E Chart or Matrix is a logic matrix which lists the detectable problems (causes) against the
automatic control reactions (effects) taken to safeguard the process and process area.
CAUSES EFFECTS
▪ the problem (event) ▪ the action taken; the
VS
▪ the location or equipment location/equipment affected
involved (process component) (process component)
▪ the device detecting the problem ▪ which shutdown devices are
(normally the instrument tag n°.) activated (by tag n°.).
LEGEND:
▪ T - Time Delay
▪ R - Reset
▪ X - Close Action
▪ A - Alarm
▪ O - Open Action
▪ & - Combination of action
Open position
Close position x
Close x
73 eni corporate university
Causes & Effects (C&E) Chart
Close x
Trip
ACTIVITY
True False
Introduction
F&G detection, Alarm and Control System consists of the following components:
• Detection and initiation devices
• Alarm devices
• Fire alarm enunciator panel
• Local fire alarm control panels
• Subsidiary fire alarm panels
The function of the fire detection, alarm and control system is:
• To identify the presence of fire in all significant areas of the production and processing
facilities
• To instigate audible and visual alarm annunciations in the local area where the fire
started, in the Central Control Room (CCR)
Fire Detection
Various fire detection and alarm systems are employed throughout hydrocarbon production and
treatment plants. These detection devices are:
• Smoke detectors
• Heat detectors
• Flame detectors
• Fusible plug detectors
• Linear detectors
• MACs
▪ In some cases, alarms can generate further action such as shutting down of equipment or start-up
of a DELUGE SYSTEM.
▪ Overall, actions performed after activation of an initiator are described in the relevant C&E.
Smoke Detectors
Smoke Detectors
Photoelectric Smoke Detectors consists of:
• A light source
• A reflection chamber A A
• A light-sensitive photocell
A Light Source
A Light Source
B Photo-detector
B Photo-detector
B B
Photoelectric chamber
82 eni corporate university
F&G System
Smoke Detectors
Inside the smoke detector there is a light and a sensor, positioned at a 90-degree angle to each other.
▪ Normally, the light from the light source on the left shoots straight across and misses the sensor.
▪ When smoke enters the chamber, however, the smoke particles scatter the light and some light hits the sensor.
▪ The sensor then triggers an alarm in the F&G system.
▪ As with the ionisation detector, the photoelectric detector is addressable; the location and intensity of smoke can,
therefore, be determined. The alarm signal is sent to the local fire alarm panel.
▪ In normal conditions no smoke particles are present and therefore , the photoelectric detector is working in normal
condition
▪ If smoke particles are present, the photoelectric detector is working in alarm condition
Heat Detectors
Heat detectors are:
• Less prone to false alarms
• Not as sensitive as Smoke Detectors
• Useful where high-speed detection is not required
Example of Smoke Detector
▪ Heat detectors normally require less maintenance than other types of detectors because of their principle of
operation and simple construction.
▪ These factors may result in fewer unwarranted alarms; however, since heat detectors are inherently slower in
operation than other types of electrical detectors, they should be considered for installation in areas where
high-speed detection is not required.
Fire Detectors
Typical Fire Detector
Flame Detectors
Cone of vision
Advantages of IR Detector:
▪ Very fast response to hydrocarbon fires
▪ Not as affected by oil film on lens or smoke as UV detectors
▪ 120° cone of vision
▪ Non-sensitive to arcing and sparking
Advantages of IR Detector:
Limitations of IR Detector:
▪ Can be blinded by airborne contaminations such as steam, oil
mist or smoke
▪ May not respond to high pressure “blowtorch” type flame
because of lack of flicker frequency
▪ Blind to hydrogen, sulphur fires and H2S fires
Gas Detectors
There are essentially two types of Gas Detectors: