Allen Bradley PLC-2 Software

December 8th, 2009

The PLC2 is an older processor no longer supported by Allen Bradley, however we recognize that there are still a few of these processors being used today. Engineers are trying to migrate from their existing PLC-2 to newer models but face serious problems if they have no way to read and modify the program in their existing PLC-2. This is why we are offering a complete programming software for the PLC-2 to professionals, electricians, installers, engineers and hobbyists.

A group of freelance programmers have developed this superior programming software for the Allen Bradley PLC-2 processor.

http://www.tek-supply.com/software_plc2.html

LM Delivers First Production F-35 Electro-Optical Targeting System

December 8th, 2009

LM Delivers First Production F-35 Electro-Optical Targeting System

Source / copyright : Lockheed Martin Corporation
by Staff Writers

Orlando FL (SPX) Dec 07, 2009
Lockheed Martin has marked successful entry into low rate initial production on the F-35 Lightning II Electro-Optical Targeting System (EOTS). The first production units have been delivered to Lockheed Martin Aeronautics in Fort Worth, TX, for integration onto the aircraft.
Embedded into the F-35’s fuselage with an innovative faceted sapphire window, the low-drag, stealthy EOTS is the world’s first and only sensor combining forward-looking infrared and infrared search and track functionality. The F-35 EOTS will provide Lightning II pilots with significant air-to-air and air-to-ground situational awareness in a single compact and completely passive sensor.

“Our team looks forward to meeting its commitment to provide a superior targeting system to F-35 pilots around the world as we gear up to produce more than 3,000 units,” said Rich Hinkle, program director of F-35 Lightning II EOTS at Lockheed Martin Missiles and Fire Control.

“This delivery marks a pivotal achievement for the EOTS as we transition from a system design and development program to a production program.”

The F-35 EOTS production is ramping up to produce up to 200 units a year. “The outlook for the F-35 program is very strong,” Hinkle said.

“Our success in supporting the program is vital to the F-35’s mission to provide dominant airpower across the full air-to-air, air-to-ground mission spectrum.”

The latest generation infrared sensor technology, the F-35 EOTS builds upon the success of Lockheed Martin’s Sniper(r) Advanced Targeting Pod to provide high-resolution imagery, automatic target tracking, infrared-search-and-track, laser designation and range finding, as well as laser spot tracking-all at greatly increased standoff ranges. Modular components allow the F-35 EOTS to be maintained on the flight line for true two-level maintenance.

Automation industry battles through global economy issues.

October 7th, 2009

By Gregory Hale
With the ebb and flow of the world’s volatile economic environment, it comes as no surprise the economy was on people’s minds at ISA EXPO on Tuesday.

While no one has a crystal ball, it is clear the real winners are those companies and people that saw the economic disaster coming and made plans early so they did not have to react in a hasty manner.

Guillaume Coffinier from Dallas, Tex.-based Texas Instruments has felt the aftermath of the downturn.

“It has affected my company, but not my job. There were some layoffs that were big for some plants, but I don’t think it will affect me. It’s over—hopefully. I’m doing business development for semiconductors, selling to the automation market.”

It is easy to dwell on the negatives these days, but how about looking at the silver lining.

“With the economy slowing down, one of the good things is we are spending time teaching (users) how to use their technology,” said Rich Chmielewski, marketing manager Chemical and Biofuels Process Automation at Siemens.

“Before they would get it and put it in and operate right away. Now they have time.”

Even in a tight market, there are some companies that said they are doing well.

“We are up 10% for the year, but we are a small company around $20 million over last year,” said Kevin Finnan, vice president of marketing at Semaphore.

One of the advantages Finnan said his company enjoys is they are diversified. “No one vertical market is 25% of our company. We are working on emerging markets like solar, and it seems to be sticking.”

Finnan sees anything related to energy as a growth market for the future.

“People are wasting so much energy. It is all about getting organized. In the past year, people are seeing a pay back. People can save up to 25% with the right energy management plan. Green energy initiatives are not going away.”

But it all comes down to whether it is a profit or a loss. “Nobody is going to do much unless it affects the bottom line,” Finnan said.

“We haven’t seen the impact other companies have seen,” said Chris Martin, senior director of product management at security provider Industrial Defender. “At the end of the day, if companies have an incident that affects them, it is not an option.”

Martin said he has found if you can show you can generate a real return on investment that will always go in your favor. “Seven years ago when we started this, it was all evangelizing, but now it is a lot better as people have a lot more information available,” he said.

Even those companies that started the year off slow are starting to see some type of rebound.

“Up until the last three weeks, business has been down on a par with the other companies out there,” said Arun Sinha, director of business development at Opto 22, a networking and I/O provider. “In the last three weeks, though, business has been up to normal levels.” Sinha said earlier in the year business was down between 20% and 30%.

The same is true with Ron Seredian, vice president of marketing at Falcon Electric, a UPS provider.

“It has really slowed down, but we are just now starting to see more business pick up. We are actually starting to see business come in from university labs.”

Automation runs on energy, not on politics

October 7th, 2009

By Ellen Fussell Policastro

John Hofmeister came to ISA EXPO to present a problem he does not believe anyone can solve with all the intelligence and know-how that we as individuals and companies have with respect to automation.

But it is a problem we can solve as U.S. citizens and voters. “Imagine the future 10-12 years from now without sustainable supplies of electrons. Imagine what will happen in the factories, labs, and processing that needs to be done automatically if the supply of electrons is short, unstable, and insufficient,” he said during his keynote address Tuesday morning at the Reliant Center.

The basic problem, as Hofmeister sees it, is by 2018-2020 the U.S. will enter a period of energy instability of liquid fuels. “The problem we all face in this country is 300 million people will be short on electricity and liquid fuel at the rate we’re going. It will take another decade to work our way out of what we’ve spent a decade working toward,” he said. And that is energy independence.

Hofmeister’s solution is a Federal energy reserve board, “which will only happen by a grassroots movement of Americans saying, ‘We’ve had enough,’ ” he said. Hofmeister is the founder and chief executive of Citizens for Affordable Energy and former president of Shell Oil Co.

He formed Citizens for Affordable Energy not to lobby, but to put the facts out there—to help people better understand what is at stake, what is required, what is possible, and how we have a 21st Century of national security to protect affordability and to save our lifestyle.

He wants to create a new independent regulatory agency called a federal energy resources board to take energy policy away from Congress, which has had 46 years, “and we’re worse off than we’ve ever been because every politically correct endeavor came for naught,” he said. “Our economy is suffering; our lifestyles are hurting; we need an independent regulatory agency.”

Energy problem

Hofmeister reminded ISA EXPO attendees that automation devices do not run on political aspirations, they run on electrons. “You need coal, uranium, gas molecules; you have to have reliable electrons. It affects you directly—your company and your personal well-being. We can’t let political talk determine what the future looks like,” he said.

In the last five years, this country has shelved or delayed or stopped the plans for 100 electricity pulverized coal generating facilities—to begin to replace an aging generation of 600 coal plants where the age is 35 years, Hofmeister said.

Seeing as how 93% of today’s energy comes from hydrocarbon and nuclear (50% from coal, 20% from nuclear, 17% from natural gas, and the rest from oil), it is amazing “we’re not investing in any one of those areas except natural gas,” Hofmeister said. He wondered why we cannot understand this 93% is so critical to our national security, lifestyles, and economy.

Partisan paralysis

The problem lies in the dichotomy between creating energy policy in political time. “We need to create energy policy in energy time,” he said. “Political time is defined as every two years because of who’s in office and who’s not. People are getting ready for an election—to be reinstated by voters. That’s what they focus on. Along comes an energy crisis or high-price crisis … then suddenly we have to do something about that.”

Problems can only be solved by citizens at the voting booth, Hofmeister said. To do that, we need to elect a government that looks at energy security in a pragmatic, coherent, short-, medium-, and long-term manner. “Companies are successful because they have a strategy and a plan to implement it. That plan positions resources, people, and technology to accomplish what this company is setting out to do. You set milestones and measure and fund progress. And you reap the results. What we do with our political system is, every two years, we throw it up in the air and say, ‘Try again.’ ”

In political time, we have evolved into a system of partisan paralysis endlessly going from one extreme to the other—right to left, “which produces a policy that doubles the amount of imports we require while we’re fighting for energy independence,” he said.

Hofmeister’s goal is to build a social network. “We’re not trying to promote individuals to take action themselves, but a network makes an impact,” he said. “We can control our future energy resources, infrastructure, what will be built, and when. I don’t expect the political system to activate. We need citizen involvement. We have the web site set up to build that social network (www.citizensforaffordableenergy.org). In the mean time, we’ll be educating and informing.”

Virtual reality becoming real at Invensys

September 24th, 2009

Who says the gaming and automation industries do not have anything in common?

If you talk to the Invensys folks, they feel they have a hit with their virtual reality training software called EYESim.

Taking the gaming skill sets popular today, EYESim combines virtual reality technologies with high-fidelity process and control simulation, computer-based maintenance and documentation management, and other applications.

The end result is a realistic representation of a plant that can provide a safe training environment for workers to increase operating efficiency and skills.

During a demonstration of the product at the Invensys North America Client Conference in Houston, the company showed how it could be a useful tool to help train workers today. But down the road, Dr. Tobias Scheele, vice president of advanced applications at Invensys, said this could be the future of control rooms.

“With experienced workers with their institutional knowledge (leaving the industry), we need to bring the problem to the experts, not the expert to the problem,” he said.

“This is just the starting point,” Scheele said. “The control room of the future should not be flat. Why not use virtual reality to aggregate information to virtualize the information.”

In short, to get a working profile of a plant, Invensys goes and takes a boat load of digital photos and then meshes them together to form the virtual plant.

The company then takes the DYNSIM high-fidelity process simulator, FSIM Plus software, I/A Series control system emulation, and some other programs and creates a computer-generated representation of a plant.

With a headset, workers then enter a completely immersive environment in which they can move throughout the plant. They can control valves, check gauge readings and even work through an emergency situation.

With the use of avatars, it is possible to investigate the maintainability of process machinery at the plant, said Invensys’ Director of Global Consulting Maurizio Rovaglio.

“Virtual reality helps with the training in the field. It is possible to train on different types of accidents,” he said.

—Gregory Hale

Anti-tie Down Logic

September 18th, 2009
 Anti-tie down logic is normally a good design practice to include in your PLC logic when you have an operator standing in front of a semi-automatic machine. Operators have a lot of things on their minds when they are working on your machine. Using anti-tie down insures safety by making sure the operator’s hands are in a safe position during a potentially hazardous motion.

You should always evaluate your machine safety requirements and make sure you are allowed to use two-handed inputs directly before implementing PLC logic for two-hand controls. If your machine safety evaluation finds that you are not allowed or your conditions are too hazardous, you should always use a safety rated two-hand control module instead of PLC logic or use two-hand control PLC logic in conjunction with a light curtain to protect the front of the machine.

 

The idea behind anti-tie down is to make sure the operator places both hands on a set of input feedback such as a set of Opto Touch buttons. If your application will not allow for PLC logic as the anti-tie down method, then there are safety modules available such as a DUO-TOUCH module that will accomplish the same things as this PLC logic.

Anti-tie down logic requires the operator to place their hands on the input device at the same time and not release until the condition is safe to remove the hands. In the case of a rotary index table, the operator hands must remain on the Opto Touch buttons until the index table has cycled one complete index and stopped motion. If this operator releases their hands before the motion is complete, the index table should stop.

 

Operators’ placing their hands on the Opto Touch buttons at the same time is a safety issue. If a false input on one of the buttons were sensed, then it would only take the other input to start the machine cycle. Some past causes of a false input conditions could be a person laying a rag on top of one of the opto buttons. Granted, opto technology has become far more advanced and this situation is not likely. However these types of false input considerations must be taking into account so your logic can be written to prevent false cycle starts and possibility prevent bodily harm.

If you are in doubt about your machine’s safety requirements, chances are best if you choose to install a safety module instead of PLC logic or use a light curtain with your Opto Touch buttons.

Download the Anti-Tie Down RS LOGIX example, PDF included. Winzip Required.

 

 

 

Courtesy mrplc.com

 

 

 

 

 

GM funds advanced battery lab

September 18th, 2009

General Motors is banking a good chunk of its future on its electric car, the Volt. Along those lines, the ailing automaker inked a pact to accelerate the design and testing of advanced batteries for electric vehicles.

In a deal signed with the University of Michigan (U-M), the five-year, $5-million award establishes the GM/U-M Advanced Battery Coalition for Drivetrains (ABCD), headquartered at U-M.

 

ABCD will accelerate the development of advanced batteries by conducting cutting-edge experiments and simulations to better understand and resolve issues related battery life and performance.

“Our shared ambition is to see electrified drive trains in a large number of vehicle types and applications. That means we need to reduce the design cycle in both time and cost. Working with GM allows us to make an impact on large-scale production electric drive vehicles, and develop regularized, simulations- and knowledge-based methodologies for using batteries in drivetrains,” said Ann Marie Sastry, the Arthur F. Thurnau Professor of Mechanical, Biomedical and Materials Science and Engineering at U-M, and U-M’s co-director of the ABCD.

ABCD is the latest in a series of collaborative efforts between the university and GM. The auto manufacturer works closely with the College of Engineering in the Energy Systems Engineering Master’s degree program. This program creates the workforce necessary for a smooth transition to a time when automobiles and the electric grid interface on a regular basis.

“Advanced battery technologies have quickly become a competitive advantage in the auto industry,” said Bob Kruse, executive director global vehicle engineering hybrids, electric vehicles and batteries, and GM’s co-director of the ABCD. “We aim to speed insertion of new technology, accelerate product design, and contribute to the cohort of automotive engineers and battery researchers who will shape our industry.”

Batteries are the most important part of the electric drivetrain, Sastry said, but they have not undergone exhaustive research in the automotive world because of their limited role in gas-powered vehicles. This grant will allow Sastry and her colleagues to optimize batteries and predict how the batteries will behave over time.

As part of the Energy Systems Engineering program, students intern at GM. Last summer, several worked on Volt research. This semester, 50 GM engineers are a part of the program for a total of 75 students.

“We are deliberately creating linkages between educating knowledge workers and developing the underpinning science and technology,” Sastry said. “We want to build this infrastructure so that we can produce meaningful technical results that move quickly to application.”

The new Velcro: Metaklett

September 18th, 2009

The new Velcro: Metaklett
Over 60 years ago, when the Swiss engineer and inventor George de Mestral painstakingly removed burrs from his dog’s coat after a hunting excursion, he stumbled on an ingenious idea. Based on the model he observed in nature, he constructed a fastener from numerous small hooks and loops, which he subsequently named Velcro.

“The unbeatable advantage of a hook and loop fastener is that it is easy to close and open again,” said Josef Mair, a scientist from the Institute of Metal Forming and Casting (utg) at Technische Universitaet Muenchen. Because of this, the hook and loop principle is put to a very wide range of uses, e.g. as an alternative to shoe laces, to secure medical bandages and prostheses, and for the cable boots used in automotive and aviation electronics.

A steely hook and loop fastener can hold up to 35 metric tons per square meter.

Unfortunately, standard synthetic hook and loop fasteners are not very resistant to heat and aggressive chemicals.

“Things can get very hot, for example, in the automotive sector,” Mair said. “A car parked in direct sunlight can reach temperatures of 80°C, and temperatures of several hundred degrees centigrade can arise around the exhaust manifold. Aggressive disinfectants are used for cleaning purposes in hospitals, and traditional hook and loop fasteners are too weak for use in the construction of building façades.”

Under the leadership of Professor Hartmut Hoffmann and as part of a joint project launched in 2005 with the German Federal Ministry of Education and Research in close cooperation with partners from industry, the utg developed a solution: Metaklett, the hook and loop fastener made of steel.

Temperatures in excess of 800°C and aggressive chemical solutions do not pose any problem for Metaklett, which also offers adhesive strength of up to 35 metric tons per square meter when applying tensile force parallel to the fastener surface. When applied perpendicular to the fastener surface, Metaklett can still withstand a force of seven metric tons per square meter. Moreover, like a standard Velcro fastener on a child’s shoe, you can open it and close it again without the help of any tools.

Researchers used spring steel, which unites high ductility with high strength, as the material for their fastener. They created various 3-D models for the optimum interlocking of the fastener elements on the computer. They then built the most promising candidates as prototypes and subjected them to comprehensive tests. They tested on the computer 40 variations of the geometry referred to as “Flamingo.” Researchers studied its adhesive strength and reaction to extreme temperatures to establish the limits of its resilience.

Two of the tested models ultimately made the grade: a spring lock, the Flamingo, and a hook and loop system known as the “Entenknopf” (“duck’s head”). Both consist of 0.2-mm-thick hook tape and loop or perforated tape of the same thickness. The “duck’s head” model consists of the traditional synthetic hook and loop system. Numerous delicate steel hooks can attach at any angle to the loops in the perforated metal loop tape.

The second variant, the Flamingo, is even more stable. It consists of wider hook elements that snap into the openings in a perforated tape. They bend in such a way that they deform elastically under light pressure and glide into the holes like the synthetic buckles on backpack straps. Once inserted, they return immediately to their original form, and thanks to their sprung splaying arms, they resist back pull like an expanding rivet.

In order for the hooks to be able to snap into place, they must first, however, be at the correct angle, that is parallel or perpendicular to the perforated tape. Depending on the direction of the applied force, this fastener can withstand a load of 7 to 35 Newtons per square meter. Following an initial loss of around 20% during the first 10 tests, the adhesive strength remained constant in the numerous repetitions.

“The animal names arose as a way of differentiating between the multifaceted models. The hook forms of the two systems are vaguely reminiscent of a duck’s head and a flamingo standing on one leg,” Mair said. Scientists have also come up with a third alternative, the “hybrid” model, which combines a steel hook tape with a synthetic loop tape and is suitable for the secure and reversible fastening of textiles.

Metaklett is suitable for use in all areas that require easily opened but stable fasteners, for example air-conditioning and ventilation systems in building services engineering and automotive construction.

For related information, go to www.isa.org/manufacturing_automation.

How to turn control performance monitoring into performance improvement

September 11th, 2009

By George Buckbee and Lew Gordon
It is a question often not asked: What is the purpose of the control system in my plant, anyway?

At first glance, the answer seems so obvious it is hardly worth the effort to think about. Modern plants are simply too large, complicated, and dangerous to operate without process controls. Without process controls, no product would be going out the door, and no revenue will be coming in.

But this answer justifies control systems by what would happen in their absence, and sets too low a bar for judging their performance. It is more useful and constructive to justify controls by what they contribute to a plant’s operations.

Plant engineers answer this question in technical terms. Process control systems:

•Maintain stability at desired conditions
•Restore process conditions when they are upset by disturbances
•Move the process to new operating conditions by responding to set point changes
To measure this contribution, control engineers use control-related metrics, such as integrated error, load rejection, and control system robustness.

However, it is more useful and meaningful to answer this question in economic terms. The real purpose of a process control systems is to maximize plant profitability by helping to gain the most profit from a combination of process equipment, feed materials, and energy input. In this context, the control system is a tool to maximize production and yield, while minimizing energy consumption and maintenance costs per unit of product. Its performance can and should be measured by its contribution to increased production rates, higher yield, energy savings, maintenance cost savings, and longer equipment run times. A poorly performing control system that is not enabling operation at optimum conditions is simply not doing its job.

Path to profit

It is not enough to know the performance of your control system could be better. To focus improvement efforts effectively, you must identify, quantify, and prioritize problems. You should also then be able to track and confirm the benefits of any type of corrective action.

Tracking and confirmation provides the justification for moving on to other issues. More importantly, it provides the evidence necessary to maintain enthusiasm and management support, including budgetary support.

A flexible and capable control loop performance monitoring package is the best support for this process. This software resides on a server connected on the plant control system data network. It collects process and controller data in real time and generates a history of control performance metrics. A full-featured package can develop diagnostics and recommendations and provide integrated tools for loop tuning and valve analysis.

Start from beginning

The first requirement of a control system is to report for duty. The control loop service factor is the first performance metric that should undergo improvement. For a controller to be “in service”:

•The communications network between the process and the control function must be in good working order; the system must not mark the data received as “bad.”
•The PV value must be within its calibrated range.
•The controller output, either to an actuator or to another control function, must not be at its operating limit.
•The controller should be in a controlling, automatic state.
These basic issues should be the first ones addressed in a performance improvement effort.

•Network communication errors can point to failed and/or missing field devices.
•Off scale measurements can point to field devices in need of re-calibration.
•Outputs normally at, or near, output limits can point to improperly sized valves.
•Controllers end up in manual position for quite a few reasons, including damaged actuators, poorly tuned controllers, and inadequate control strategy designs. The important thing is to find out why the loop remains in manual.
All of these problems are actually opportunities in disguise: Stepping stones to better control system performance and higher plant profitability.

Instability is the enemy

Products must meet quality specifications and production rate targets. There must not be any violation of emissions limits. You also have to respect the equipment operating limits. Typically, the highest energy efficiency and yield occurs when a plant is simultaneously operating against more than one of these constraints. Any plant performance condition other than optimum is worse.

Variation is the mortal enemy of operating condition optimization. Whether variation appears as random noise, steady cycling, or poor load rejection, the consequence is the same: To avoid violating operating limits, set points must move a proportional distance to the safe side of optimum operation. This margin is costly. For the best economic performance, the move should be minimal.

The dotted line defines the maximum allowable moisture content. To avoid violating this limit, the set point must be lower so the typical variation in moisture content does not violate this limit. On average, the product is over-dried. Higher energy consumption and solids give-away are the price paid for poor control.

When control improves and variation reduces, the set point can move closer to the limit without violating the product specification. The energy savings alone can be impressive. In a drying process example, a steam reduction of only $120/hr adds up to a significant yearly savings.

$120/hr x 24 h/d x 350 d/y = $1,008,000 $/yr

This concept is no less applicable to batch processes, which are often moving from one operating condition to another. In this case, it is the performance across the batch that should be stable and optimized. Transitions should be as rapid as the product quality allows, for maximum production rate. Measured variables should repeatedly follow an optimum trajectory for maximum energy efficiency, yield, and equipment life.

Find the real problem

The list of meaningful indicators and symptoms of poor control performance is long and varied. Chief among them are measures of variability and error, such as standard deviations, variance, average error, absolute error, integrated error, set point crossings, and the like.

But a control loop performance monitoring package can also quantify the performance of a control system in more subtle ways. Some of these metrics include:

•Controller output changes in manual: Large values indicate a control system that a user cannot trust in automatic. The operator has to provide control.
•Mode changes: Similarly, large numbers of transfers indicate controllers that cannot handle upsets and/or set point changes. In both cases, tuning and/or strategy changes may be required.
•Measures of oscillation: Control loop performance monitoring can use Fourier analysis to spot sustained periodic components in a PV signal. By referencing other information, such as current tuning constants, the packages can diagnose the root cause of the cycle.
•Totalized valve reversals and valve travel: High and low values indicate which actuators need maintenance and which do not. This insight can shorten turnarounds and avoid unplanned shutdowns.
•Process model parameters: By observing the process response to normal operator actions, control loop performance monitoring can parameterize the process model in terms of dead time, capacity lag times, and steady state gains. This can demonstrate a need for re-tuning, adaptive tuning, and/or non-linear characterization.
All of this information can be of critical importance in diagnosing the root causes of poor controller performance. Confirmation can come from direct analysis of a loop’s data history.

The following are some common problems users can encounter:

Resolving oscillation issues: Sustained oscillation in automatic is the most dramatic example of poor control. When this occurs, there can be myriad reasons, including damaged actuators, improperly tuned controllers, variable loop gains, interacting loops, and inadequate control strategy designs.

Expanding oscillations are so unacceptable to normal operations that you should never tolerate controllers tuned with gains high enough to cause expanding oscillations. The user needs to immediately correct them (or placed in manual permanently). More often, the problem is variable oscillations, which are oscillations that appear and disappear with changes in feed rate and/or operating point.

This is always a strong clue that some other gain in the loop is variable. Two likely possibilities are:

•Variable valve gain. The relation between valve position and flow is often non-linear, so valve gain changes with operating point. A non-linear compensator is often the solution.
•Variable process gain. Process gains often vary with throughput and/or other operating conditions. Examples include pH loops, and level control in oddly-shaped tanks. Programmed or adaptive tuning is often the solution.
Resolving valve issues: Constant amplitude oscillations are often the consequence of the physical condition of the final actuator.

The chart above shows a trend of a loop in oscillation. The white trend is the PV. The green trend is the CO. This cycle is neither expanding nor decaying. Therefore, tuning is not the issue, and attempts to kill the oscillation by de-tuning the controller will fail. The clue is the distorted shape of the PV trend, in comparison to the sinusoidal CO trend. The flat sections at the top and bottoms of the cycles indicate periods when the PV is not changing even though the signal to the valve is changing. This is a classic indication of hysteresis and/or stiction in the valve mechanism. A PV vs. CO plot of these data points can confirm this diagnosis.

After finding the trends and doing a PV vs. CO plot to confirm, where an open pattern of the PV/CO data pairs would show the hysteresis in the actuator. Physical maintenance of the actuator is often the solution. Sometimes, adding a slight amount of derivative action to a flow controller can overcome stiction.

Dealing with constraints: Controllers often run into constrained conditions. If the condition is temporary, or cyclical, a loop will often cycle against this constraint, adding to process instability. If the condition persists, then there is a permanent constraint on the process, and a loss of control for this variable.

Proper valve sizing, or controller configuration with signals for initialization and tracking is often the solution. This may involve integration with other control functions using selector and/or logic schemes for programmed auto/manual transfer.

Untangling process interactions: A typical process unit has quite a few control loops. It is a rare loop whose PV does not also feel the affect of influences besides its own output. Similarly, a controller output typically affects multiple measurements.

In this environment, oscillations in one loop often also appear in other loops as well, through one-way or reciprocal interactions. Similarly, when there are disturbances in uncontrolled variables, they also appear as variations in whatever PVs they affect. These are the sources of many unexplained oscillations.

Control loop performance monitoring software can help by identifying which loops are oscillating at similar frequencies. This can identify the loop that may be the source of the problem.

Another control loop performance monitoring tool for solving interaction problems is the process interaction map. This tool illustrates the degree of interaction, and the relative time-shift of the interaction. You can pinpoint the root cause as a strong influence (strong color) on the leading side of the diagram.

When you uncover these interactions, modifications to the control system, such as feed-forward or decoupling controls, are often the solution.

No matter what the issue, the most fundamental problem, however, is often not in the technology of the control systems. The biggest obstacle to control system performance improvement is human nature. Performance problems can exist for years without anyone addressing them. Users end up labeling these problems as normal, and it is only human nature to accept them as they are rather than risk the uncertain consequences of change.

However, with sufficient will and perseverance, the payoff can be significant. Profitable opportunities to improve control system performance are at almost every turn in a production plant. Typically, there is no shortage of “low hanging fruit” that will yield large economic benefits for relatively small investments of time and effort.

ABOUT THE AUTHORS
George Buckbee, P.E. is vice president of product development at ExperTune Inc. His e-mail is george.buckbee@expertune.com. Lew Gordon is principle application engineer at Invensys. His e-mail is lew.gordon@ips.invensys.com.

Operators on alert

September 11th, 2009

Operators on alert
Operator response, alarm standards, protection layers keys to safe plants
Fast Forward
•Help operators detect, diagnose, and respond on time.
•Use standards for good design, operation of process alarm systems.
•Implement multiple layers of protection to prevent incidents.

By David Hatch and Todd Stauffer
As plants run closer to their performance limits with fewer operators and support staff, alarm management is becoming paramount to maintaining plant safety. The key to maximizing the safety protection the operator provides is creating an environment where they are able to detect, diagnose, and respond to alarms properly and on time. One way to do this is adopt the requirements and recommendations of the standard on alarm management (ANSI\ISA-18.2 standard, Management of Alarm Systems for the Process Industries) and take a coordinated approach to alarm management and safety instrumented system (SIS) design. The ANSI\ISA-18.2 standard offers guidance on how alarm management can help a plant operate more safely. The standard can also bring together the disciplines of alarm management and safety-system design, which must work more closely to prevent future accidents.

First layer of protection

The operator’s response to alarms is crucial in preventing a process upset from escalating into a more serious event. Multiple layers of protection can prevent an incident from occurring and mitigate its impact if it does occur. Operator intervention is one of the first layers of protection. Next is the SIS, whose job is to drive the process to a safe state, as needed, to protect people, the environment, and equipment. When a safety system trips, it typically results in lost production, which can be very significant—for an oil refinery, it can easily exceed $1 million per hour.

Risk reduction

According to the IEC 61511/ISA 84 process safety standards, you must reduce process risk to a tolerable level as set by the process owner. To do this, use multiple layers of protection, including the basic process control system, alarms, operator intervention, mechanical relief systems, and if necessary a SIS. The more risk the alarm system and operator can reduce, the less risk reduction or safety integrity level (SIL) the SIS must provide. The higher the SIL level, the more complicated and expensive the SIS will be. Also, a higher SIL will require more frequent proof testing, which adds cost and can be burdensome in plants. Unfortunately, human performance factors provide constraints on the level of risk reduction an operator can actually provide. Getting the most from the operator reduces the demands on the SIS, which in turn reduces its chance of failure.

The reliability of the alarm system and operator are an important consideration when performing a layer of protection analysis (LOPA), which is one of several methods for calculating the required SIL target. In a LOPA, you can calculate the frequency of a potentially dangerous event by multiplying the probability of failure on demand (PFD) of each individual layer of protection times the frequency of the initiating event.

Reliable operator

The previous LOPA calculation assumes each protection layer, including the operator, is specific, auditable, independent, and dependable. The calculation uses a 20% chance the operator will fail to respond correctly and in time to prevent the outcome (PFD = 0.2). Assuming an 80% success rate might seem conservative, but studies have shown human error is one of the leading causes of industrial accidents.

On the other hand, an 80% success rate might be generous. Consider safety-critical alarms are most likely to occur during major plant upsets. Throw in operator fatigue, lack of proper training, increasing operator workload, physical condition (age, amount of rest), along with alarm overload, and you can see the challenge to improving the operator’s response.

Layers of protection and impact on process

Just a matter of time

So how can we improve the operator’s performance to keep our plants safer? One way is to think about what constitutes a successful operator response. As ANSI\ISA-18.2 describes, the operator must be able to detect, diagnose, and respond within the appropriate timeframe, sometimes called the process safety time, or else the upset could escalate to cause a trip or an accident.

Consider operator response time up-front during design. When you create a situation in which an operator has only a few minutes to detect, diagnose, and respond, you increase the probability for failure. This means the operator cannot be a significant safety layer. One company has set a threshold requirement of 10 minutes, meaning any alarm that has a process safety time of less than 10 minutes cannot be claimed as a layer of protection (PFD = 1.0).

Life cycle approach

The ANSI 61511/ISA-84 standard on process safety and the ISA-18.2 standard on alarm management advocate the use of a life cycle approach. Two life cycles are similar and can connect during several phases. Results from the safety hazard and risk assessment are an input to alarm management’s identification phase. You should assign alarms you are relying on as a safety protection layer as a high priority during rationalization.

A key deliverable is to create an alarm philosophy document that defines how a company or site will address alarm management throughout all phases of the life cycle. It should contain information such as the criteria for classifying and prioritizing alarms (safety-related alarms are classified as highly managed alarms), what colors to use to indicate an alarm in the HMI, and how to manage changes to the configuration. It should also establish key performance benchmarks (such as the acceptable alarm load for the operator).

Example layer of protection analysis (LOPA) calculation

Easy alarm detection

Design HMI to make the operator aware of a situation. The operator’s performance is directly linked to the proper use of color, text, and patterns within the HMI, which should be configured to uniquely indicate the state of the alarm (normal, unacknowledged, acknowledged, suppressed). Since 8-12% of the male population is color-blind, it is important to consider what colors to use. Ideally colors used for alarm indication should be reserved for alarming only and should be different depending on priority.

Minimize operator’s number of alarms. Alarm overload is a key reason operators miss alarms. An operator should be hit with no more than one to two alarms every 10 minutes during steady-state operation. In many control rooms, operators are hit with one alarm every minute, which is considered unmanageable.

Make sure operators can differentiate high priority alarms from other alarms. ANSI\ISA-18.2 recommends using three to four different priorities, where no more than 5% of alarms are configured as high priority. Set priority based on the potential consequences and on the time available to respond.

Eliminate nuisance alarms. The presence of standing alarms (lasting more than 24 hours) and chattering alarms (points that go needlessly in and out of alarm on a frequent basis) can obscure the operator’s view and make it more difficult for him to detect a new alarm. Poor configuration practices are one of the leading causes of nuisance alarms. The proper use of alarm deadbands and on/off delays can go a long way to eliminating them. An ASM study found the use of on/off delays in combination with other configuration changes was able to reduce the 10-minute alarm rate by 45-90%.

Correct diagnosis

Make information available on cause and corrective action. Ideally, you should make available the cause of the alarm, corrective action, consequence, time to respond, and safety in real time and in the proper context.

Suppress unimportant alarms during a flood. Plant upsets, which can generate tens to hundreds of alarms, are one of the most challenging times for the operator. Advanced alarming techniques, such as state-based alarming, can temporarily suppress alarms when they are not meaningful. When a distillation column crashes, it is best to present only those few alarms that affect the diagnosis and response, rather than all temperature and pressure alarms that occur.

Shelving helps the operator stay focused. Alarm shelving allows an operator to temporarily suppress an insignificant alarm, removing it from view. It is a great tool for improving response during a process upset. The alarm will come back later (after 30 minutes for instance), so it can be addressed when things have calmed down in the control room. It is important to provide controls on who can shelve an alarm and which alarms can be shelved.

Correct response

Practice makes perfect, so it is important to train operators to make sure they are comfortable with the system, and that they trust it to help them do their job. The last thing you want is the operator abandoning the control system during an upset. Training the operator as part of a process simulation can create a drilled response in which corrective action is so well reinforced it is automatic.

Provide alarm response procedures; specifically, written alarm response procedures should include potential causes and consequences of the alarm, recommended corrective action, alarm limit, and allowable response time (information fleshed out during rationalization and hazard and risk assessment).

Maintenance, change control

Review and learn which alarms are out of service. Alarms will periodically go out of service for maintenance, repair, replacement, or testing. It is important to document why an alarm was removed from service, the operation of interim alarms, special handling procedures, as well as testing required prior to returning to service. For safety reasons, the system should be able to produce a list of which alarms are currently out of service. This serves as a reminder of what alarms are suppressed. Then you can review the list before putting a piece of equipment back into operation to ensure all critical alarms are functional.

Manage and control configuration changes; even the most well-designed alarm system can run into problems if there is poor control over who can make changes. Implement a management-of-change procedure to ensure review and approval of modifications (such as changing an alarm limit, disabling an alarm, or adjusting its priority) prior to implementation. Do not make modifications without proper analysis and justification, particularly if the alarm is a safety layer of protection.

ABOUT THE AUTHORS
David Hatch (david.hatch@exida.com) is a certified functional safety engineer (CFSE) with exida, a certification and consulting firm specializing in safety critical/high-availability automation systems, control system security, and alarm management. Hatch is also a member of the ISA18 committee and EEMUA 191 working group. Todd Stauffer (tstauffer@exida.com) is director of alarm management services for exida, and a member of ISA18.