PETRONAS TECHNICAL STANDARDS

DESIGN AND ENGINEERING PRACTICE

MANUAL

HUMAN-MACHINE INTERFACE IN A CONTROL

ROOM

PTS 32.00.00.11

FEBRUARY 2011

 2010 PETROLIAM NASIONAL BERHAD (PETRONAS)

All rights reserved. No part of this document may be reproduced, stored in a retrieval system or transmitted in any form or by any
means (electronic, mechanical, photocopying, recording or otherwise) without the permission of the copyright owner.
Summary of Changes
Section Description of Changes

1.3.2 Specific Followings were added (highlighted in bold):

definitions
Display: What is seen on a visual display unit, shall be LCD or latest
proven industry technology

1.3.3 Abbreviations Followings were deleted (strikethrough), added and replaced (strikethrough):

- CRT: Cathode Ray Tube

- HFE: Human Factor Engineering
- LCD: Liquid Cristal Display
- PEFS P&ID: Process Engineering Flow Scheme Piping and
Instrumentation Diagram

2. GENERAL Followings were added (highlighted in bold):

Within the context of control room design this PTS currently covers only the
information ergonomics of the HMI (see Figure 1). The physical layout of the
control room and the organisation of work are outside the scope of this PTS
but shall be considered in the overall design of the control room (see
ISO/DIS 11064-3 and PTS 34.17.10.30.). Human factors engineering
(HFE) shall be part of the control system and control room design (see
PTS 30.00.60.10 and PTS 30.00.60.15)

3.4 CENTRALISED Followings were added (highlighted in bold) and deleted (strikethrough and
HMI highlighted in bold):

The DCS interface shall be the centralised interface for all control and
monitoring systems and subsystems, which include ODS, optimisation, IPS,
FGS, tank gauging systems, machine monitoring system, QMIs, radio
trunking system, telephone system and CCTV.

NOTES:
1. The operator requires access to the process and system parameters to carry out
his tasks and does not need to know the hardware origin of information displayed
on the HMI.

2. For FGS see PTS 32.30.20.11 for details.

NOTES:

Status of instrument equipment subsystems shall be displayed in the DCS to

warn the operator of subsystem malfunctions. Warnings should indicate the
severity of malfunction and the course of action to be taken by the operator.

Detailed diagnostics for maintenance personnel may also be displayed I

the DCS if convenient and cost effective, otherwise they may use other
interfaces is recommended to be available in a separate dedicated
Asset Management System console.

ODS often have their own HMI, though they also remain accessible on
the DCS screens via windowing techniques. ODS manipulates
historical data for a long time frame and is of little use for immediate
operator actions. Data calculated or scanned by the ODS from another
system and which is necessary for the operator to execute his tasks
shall be presented on the DCS. Attention shall be paid by the
Contractor to detailing business variable that can be cascaded to the
operator so that he (or the various control systems) can react by
adjusting the plant

3.5.1 Operators Followings were added (highlighted in bold) and deleted (strikethrough and
Section Description of Changes

highlighted in bold):

The HMI should also be configured with:

- Displays which help the operator achieve a safe and environment-minded,
optimum economy operation.
- Basic shift summary report for shift hand over purposes.
- Display summaries and handover reports to enable the clear
handover from one operational shift to another.
- Operational reports on plant performance, maintenance activities and
operational planning
Detailed shift hand over reports, such as production rate, utilities
consumption, etc. for Operator shift hand over, etc are normally
available in a separate dedicated system.

4.1.2 Trend Group Followings were added:

Notes:
1. Selection of the points or tags to be grouped in one control group
page or trending page shall be done together with process engineer or panel
operator for efficient control.

2. Grouping and trending number assignment shall consider any

requirement for future expansion for every process units. This is to ensure
future addition of points can be grouped and trended within that particular
process unit without affecting the allocation number for other process units.

6. ODS DISPLAY The whole section contents were replaced by the followings:

ODS displays is a management tool for the Operation Management team to

make informed decisions.

Typical basic function of ODS displays are as followings:

 Configured to provide a summarized plant key performance indicators

e.g. total feedstock, total production, total energy utilization, total
venting or flaring and etc.
 Provide flexibility for time reporting based on day, week, or month.
 Provide ability to do reporting in term of printing, pdf format or e-mail,

The decision to incorporate ODS in overall system architecture shall be

made by Principal.
7.5.2 Colours Followings were added (highlighted in bold):

Colour shall be used conservatively to avoid an appearance of clutter and

extra strain on the eyes. The number and usage of colours should be
carefully allocated reserving the more prominent colours for
urgent/emergency situations. The number of colours used for coding
information on the displays used to monitor control and process shall
be limited. Effective colour scheme usage can significantly improve
the ease of use and comprehensibility of display information.

7.5.2.1 Typical The whole section contents were replaced by the followings:
colour conventions
Overall grayscale colour scheme should be considered to reduce eye-strain
and fatigue to Panel Operators. When abnormal situation occurs, the
grayscale colour scheme should gradually change to brighter colour scheme
Section Description of Changes

to provide attention to the panel operator to the particular area. See

Appendices for example.

7.5.3 Highlighting The whole section contents were deleted.

7.5.4.1 Numeric Followings were deleted:
data point
Colours or shaped borders may be considered to distinguish between
different data points e.g. flow, level, pressure, temperature etc.

Typical data point display behavior

Normal Green

Alarm Black text on red or yellow, blinking until acknowledged

Manual entry Black text on white (inverse video)

Bad value To the left of the value, black on magenta (inverse video)
"U" for unavailable, "L" for last known value, "F" for fault

7.5.4.2 Bar display The whole section contents were deleted.

8. ALARM The whole section contents were replaced by the followings:

MANAGEMENT
Detail alarm management guidelines, see PTS 32.30.60.19.

9. CONSOLE Followings were added:

DESIGN
For HFE design requirements on overall DCS consoles, see PTS
30.00.60.15.

9.2 CONSOLE The whole section contents were replaced by the followings:
DIMENSIONS AND
SHAPE Console dimensions and shape shall refer to PTS 30.00.60.15.

9.3 CONTROL The whole section contents were replaced by the followings:
ROOM LIGHTING
CONSIDERATIONS Control room lighting considerations shall refer to PTS 30.00.60.15

10.1 INTEGRITY Followings were added:

- Any HMI related changes and modifications on hardware and software

shall follow existing Plant MOC procedures.

12. REFERENCES Followings were added:

Human Factors Engineering in PTS 30.00.60.10

Project
Human Factors Engineering – PTS 30.00.60.15
Human/Machine Interface and
Control Room Design
Alarm Management Guidelines PTS 32.30.60.19
 PREFACE

PETRONAS Technical Standards (PTS) publications reflect the views, at the time of publication, of
PETRONAS OPUs/Divisions.

They are based on the experience acquired during the involvement with the design, construction,
operation and maintenance of processing units and facilities. Where appropriate they are based on, or
reference is made to, national and international standards and codes of practice.

The objective is to set the recommended standard for good technical practice to be applied by
PETRONAS' OPUs in oil and gas production facilities, refineries, gas processing plants, chemical
plants, marketing facilities or any other such facility, and thereby to achieve maximum technical and
economic benefit from standardisation.

The information set forth in these publications is provided to users for their consideration and decision
to implement. This is of particular importance where PTS may not cover every requirement or diversity
of condition at each locality. The system of PTS is expected to be sufficiently flexible to allow
individual operating units to adapt the information set forth in PTS to their own environment and
requirements.

When Contractors or Manufacturers/Suppliers use PTS they shall be solely responsible for the quality
of work and the attainment of the required design and engineering standards. In particular, for those
requirements not specifically covered, it is expected of them to follow those design and engineering
practices which will achieve the same level of integrity as reflected in the PTS. If in doubt, the
Contractor or Manufacturer/Supplier shall, without detracting from his own responsibility, consult the
owner.

The right to use PTS rests with three categories of users:

1) PETRONAS and its affiliates.

2) Other parties who are authorised to use PTS subject to appropriate contractual arrangements.
3) Contractors/subcontractors and Manufacturers/Suppliers under a contract with users referred
to under 1) and 2) which requires that tenders for projects, materials supplied or - generally -
work performed on behalf of the said users comply with the relevant standards.

Subject to any particular terms and conditions as may be set forth in specific agreements with users,
PETRONAS disclaims any liability of whatsoever nature for any damage (including injury or death)
suffered by any company or person whomsoever as a result of or in connection with the use,
application or implementation of any PTS, combination of PTS or any part thereof. The benefit of this
disclaimer shall inure in all respects to PETRONAS and/or any company affiliated to PETRONAS that
may issue PTS or require the use of PTS.

Without prejudice to any specific terms in respect of confidentiality under relevant contractual
arrangements, PTS shall not, without the prior written consent of PETRONAS, be disclosed by users
to any company or person whomsoever and the PTS shall be used exclusively for the purpose they
have been provided to the user. They shall be returned after use, including any copies which shall
only be made by users with the express prior written consent of PETRONAS.

The copyright of PTS vests in PETRONAS. Users shall arrange for PTS to be held in safe custody
and PETRONAS may at any time require information satisfactory to PETRONAS in order to ascertain
how users implement this requirement.
 TABLE OF CONTENTS

1. INTRODUCTION ........................................................................................................... 1
1.1 SCOPE .................................................................................................................................... 1
1.2 DISTRIBUTION, INTENDED USE AND REGULATORY CONSIDERATIONS ...................... 1
1.3 DEFINITIONS AND ABBREVIATIONS ................................................................................... 1
1.4 CROSS-REFERENCES .......................................................................................................... 3
2. GENERAL ...................................................................................................................... 4
3. HMI DESIGN PHILOSOPHY .......................................................................................... 5
3.1 INTRODUCTION ..................................................................................................................... 5
3.2 OPERATING PHILOSOPHY ................................................................................................... 5
3.3 PROCESS SITUATIONS ........................................................................................................ 5
3.4 CENTRALISED HMI ................................................................................................................ 7
3.5 USERS AND THEIR REQUIREMENT .................................................................................... 7
4. DCS DISPLAYS ............................................................................................................. 9
4.1 MANUFACTURERS’ STANDARD DISPLAYS ....................................................................... 9
4.2 GRAPHIC DISPLAYS............................................................................................................ 10
4.3 DISPLAY PAGE ALLOCATION ............................................................................................ 16
5. DISPLAY NAVIGATION ............................................................................................... 17
5.1 GENERAL ............................................................................................................................. 17
5.2 DISPLAY NAVIGATION AND COMMAND TOOLS .............................................................. 17
6. ODS DISPLAYS ........................................................................................................... 19
7. GUIDELINES FOR GRAPHIC DISPLAY BUILDING AND CONFIGURATION ............. 20
7.1 GENERAL ............................................................................................................................. 20
7.2 DENSITY OF INFORMATION ON SCREEN ........................................................................ 20
7.3 GENERIC GRAPHIC TEMPLATE......................................................................................... 20
7.4 LAYOUT FOR PROCESS SCHEME DISPLAYS .................................................................. 21
7.5 CONFIGURATION STANDARDS ......................................................................................... 22
8. ALARM MANAGEMENT .............................................................................................. 29
DETAIL ALARM MANAGEMENT GUIDELINES, SEE PTS 32.30.60.19. ............................ 29
9. CONSOLE DESIGN ..................................................................................................... 30
FOR HFE DESIGN REQUIREMENTS ON OVERALL DCS CONSOLES, SEE PTS
30.00.60.15. ................................................................................................................. 30
9.1 OPERATOR INTERFACE ..................................................................................................... 30
9.2 CONSOLE DIMENSIONS AND SHAPE ............................................................................... 32
9.3 CONTROL ROOM LIGHTING CONSIDERATIONS ............................................................. 32
9.4 VDUs AND ASSOCIATED CRITERIA .................................................................................. 32
10. HMI MAINTENANCE ................................................................................................... 33
10.1 INTEGRITY ........................................................................................................................... 33
10.2 SOFTWARE CHANGE PROCEDURE.................................................................................. 33
10.3 SYSTEM SECURITY AND ACCESS .................................................................................... 33
10.4 HARDWARE MAINTENANCE .............................................................................................. 34
11. HMI IMPLEMENTATION WITHIN A PROJECT ........................................................... 35
12. REFERENCES ............................................................................................................ 37
 APPENDICES

APPENDIX 1 TYPICAL PLANT OVERVIEW DISPLAY (SCHEMATIC REPRESENTATION) ......... 38

APPENDIX 2 TYPICAL PLANT OVERVIEW DISPLAY (GRAPHS, DIAGRAMS)............................ 39
APPENDIX 3 TYPICAL FGS AREA OVERVIEW DISPLAY ............................................................. 40
APPENDIX 4 TYPICAL FGS UNIT DETAILED DISPLAY ................................................................ 41
APPENDIX 5 TYPICAL UNIT DISPLAY ........................................................................................... 42
APPENDIX 6 TYPICAL SUB UNIT DISPLAY ................................................................................... 43
APPENDIX 7 TYPICAL DETAILED PROCESS DISPLAY ............................................................... 44
APPENDIX 8 TYPICAL MULTI-VARIABLE CONTROL LOOPS DISPLAY ...................................... 45
APPENDIX 9 TYPICAL SEQUENCE DISPLAY................................................................................ 46
APPENDIX 10 TYPICAL IPF STATUS LOGIC DISPLAY ................................................................... 47
APPENDIX 11 TYPICAL SYMBOLS GRAPHIC DISPLAY ................................................................. 48
 PTS 32.00.00.11
February 2011
Page 1
1. INTRODUCTION

1.1 SCOPE

This is a new PTS which specifies requirements and gives recommendations for the proper
design of the Human-Machine Interface (HMI) of the plant monitoring and control systems to
reduce human errors in the operation of the plant. It may be used for new projects or to
improve the design of an existing HMI.

The PTS contains a starter set of graphic configurations.

1.2 DISTRIBUTION, INTENDED USE AND REGULATORY CONSIDERATIONS

Unless otherwise authorised by PETRONAS, the distribution of this specification is confined

to companies forming part PETRONAS or managed by a Group company, and to
Contractors nominated by them.

This PTS is intended for use in oil refineries, chemical plants, gas plants, oil and gas
production facilities and supply/marketing installations.

If national and/or local regulations exist in which some of the requirements may be more
stringent than in this PTS, the Contractor shall determine by careful scrutiny which of the
requirements are the more stringent and which combination of requirements will be
acceptable as regards safety, environmental, economic and legal aspects. In all cases the
Contractor shall inform the Principal of any deviation from the requirements of this PTS
which is considered to be necessary in order to comply with national and/or local regulations.
The Principal may then negotiate with the Authorities concerned with the object of obtaining
agreement to follow this PTS as closely as possible.

1.3 DEFINITIONS AND ABBREVIATIONS

1.3.1 General definitions

The Contractor is the party which carries out all or part of the design, engineering,
procurement, construction, commissioning or management of a project or operation of a
facility. The Principal may undertake all or part of the duties of the Contractor.

The Manufacturer/Supplier is the party that manufactures or supplies equipment and

services to perform the duties specified by the Contractor.

The Principal is the party that initiates the project work and ultimately pays for its design
and construction. The Principal will generally specify the technical requirements. The
Principal may also include an agent or consultant, authorised to act for, and on behalf of, the
Principal.

The word shall indicate a requirement.

The word should indicate a recommendation.

1.3.2 Specific definitions

Anthropometry Deals with the measurement of the dimensions and certain

other physical characteristics of the human body which provide
information for the design of things people use.
Configuration The selection process using predefined software of the DCS
Control room The section of a control centre containing the essential
equipment required to operate the plant optimally and safely.
 PTS 32.00.00.11
February 2011
Page 2
Display What is seen on a visual display unit, shall be LCD or latest
proven industry technology
Distributed Control
A configurable microprocessor-based control system.
System (DCS)
Ergonomics The application of human physical and cognitive sciences in
(human factors) conjunction with the engineering sciences to achieve the
optimum human performance and interaction between a human
user and a machine.
Ergonomic design User-entered, task-based design which focuses on developing
system requirements based on the capabilities and limitations of
humans while executing system tasks.
Human-Machine All the areas where people interact with the system. In this PTS
Interface (HMI) it mostly refers to the DCS operator workstation but it may also
be the engineering workstation.
Faceplate A display pre-configured in the DCS that resembles the display
and controls of the equivalent conventional panel instrument. It
could be a controller faceplate (allowing SP output and
controller mode changes), an indicator faceplate, a switch
faceplate (status and output changes), etc.
Instrumented A function comprising the Initiator function, Logic Solver function
Protective Function and Final Element function for the purpose of preventing or
(IPF) mitigating Hazardous Situations.
Instrumented The electromechanical, electronic and/or programmable
Protective System electronic Logic Solver component of the Instrumented
(IPS) Protective Function, complete with input and output equipment.
Link analysis A technique to define relationships between people and
components of the system. It is also used as a tool which is
used to identify the movement of people within a system.
Operator console A group of equipment comprising VDU screens, keyboards,
pointing devices and switches which are allocated to a defined
part of the plant (e.g. "console for hydrogen units").
Parameters The variables associated with a tag or point. For example,
AUTO, MAN, CASCADE are parameters of controller points.
Points and tags The instrument, numeric, timer, flag, Boolean, logical entities
within the DCS. Both words are used interchangeably, with
"points" often being used when calculated or inner variables of
the DCS are being referred to. "Tags" generally refer to data
coming from wired or data inputs to the DCS.

Subsystem A microprocessor-based system configured for specific control

and monitoring applications, which can operate in isolation or
communicate with a DCS.
System security Safeguards within the monitoring and control systems to prevent
occurrence of conditions which might compromise the integrity
of the system and the plant which is being operated.
System access The way into the various parts of the system. This might involve
the temporary bypassing of some of the security parameters.
Task A set pattern of operations with the intent of achieving a goal.
Task analysis A method for describing what an operator is required to do, in
terms of actions or cognitive processes, to achieve a system
goal.