安全仪表系统简介.ppt

2004-04-28 U.Schuenemann,Commissioning test of E&I SIS,1,Introduction to E&I Safety Instrumented Systems (SIS) 电仪安全仪表系统(SIS) 介绍,2004-04-28 Ulrich Schuenemann BYC Nanjing BYC 南京 尤瑞奇 舒曼 CTA Department E&I maintenance EOEG 电仪维修EOEG CTA部,2004-04-28 U.Schuenemann,Commissioning test of E&I SIS,2,Control loops 控制回路 DCS Monitoring functions 检测功能 DCS Interlocks needed for smooth operation DCS, (ESD) 顺利运行所需的连锁 Interlocks related to plant Safety ESD 与装置安全有关的连锁,There are different E&I functions 电仪功能各不相同,2004-04-28 U.Schuenemann,Commissioning test of E&I SIS,3,What are E&I S.I.S. 什么是电仪S.I.S?,E&I Safety Instrumented Systems (S.I.S.): 电仪安全仪表系统 S.I.S. prevent 安全仪表系统用于防止： personnel injury 人身伤害或 environmental damage 环境破坏 caused by a not tolerable fault state of the plant 由装置的不可接受的故障所造成 S.I.S. are defined in the Safety Review Step 2. 安全仪表系统是在安全风险评估的第二步中定义的,2004-04-28 U.Schuenemann,Commissioning test of E&I SIS,4,Classification of E&I functions 电仪功能的分类,2004-04-28 U.Schuenemann,Commissioning test of E&I SIS,5,Definition of SIS: Safety Review step 2 SIS的定义: 安全审查步骤2,SEVERITY 严重性 S1 Potential for one or more fatalities S2 Potential for one or more serious injuries (irreversible) S3 Potential for one or more lost time injuries S4 Potential for minor injuries, or irritation E&I SIS can be used for “risk class B and C”. 电仪SIS可用于 “B级和C级风险”,2004-04-28 U.Schuenemann,Commissioning test of E&I SIS,6,Example: E&I Safety Review 2 Checklist 实例: 电仪安全审查2检查清单,2004-04-28 U.Schuenemann,Commissioning test of E&I SIS,7,Failures of a S.I.S. S.I.S的故障,Active error triggers off the safety function for no reason plant is switched back to safe operation reduction of production availability 有源故障 -无缘无故触发安全功能 -装置切回到安全运行 -生产运行可用率降低,Passive error 无源故障 inhibits the required safety function plant continues operation although it should be switched off impacting the process safety,adversely affecting the safety function 对安全功能产生不利影响,no adverse effect on the safety function 对安全功能无不利影响,Failure 故障,Time-averaged probability for a passive fault : PFD “Probability of Failure on Demand” 无源故障的时间平均可能性: PFD”指令故障的可能性“,2004-04-28 U.Schuenemann,Commissioning test of E&I SIS,8,Components of a SIS SIS的组分,Shut-Down System 停车系统 Logic in Failsafe PLC or Hardwired system 在故障安全型可编程控制器或硬接线系统中的逻辑,Redundant sensors 冗余的传感器,Valve 阀门,Solenoid valve 电磁阀,Instrument air supply 仪表气源,Rack Room 机柜间,Field 现场,2004-04-28 U.Schuenemann,Commissioning test of E&I SIS,9,Passive Faults of sensors and actuators 传感器和致动器的无源故障,mass flow meter after pressure pulse 压力脉冲下游的 质量流量计,lost control valve plug,control valve plug, damaged by cavitation,restriction orifice, deformed by flow,限流孔板,限流孔,限流孔板, 流量造成的变形,调节阀阀塞,空穴造成的损坏,2004-04-28 U.Schuenemann,Commissioning test of E&I SIS,10,Some mathematics 一些算法,TI Test Interval between functional tests of SIS, time needed to discover dangerous faults SIS功能测试之间的时间间隔, 发现危险故障需要的时间 MTBF Mean Time Between Failure of an equipment 设备故障之间的平均时间 l = 1/ MTBF failure rate 故障率 Pf (t) Probability of failure (to function). For constant failure rates l : Pf (t) = (1 e-l t ) 故障概率(对功能而言).恒定故障率 l : Pf (t) = (1 e-l t ) PFD Probability of Failure on Demand = Pf (t) , time averaged over test interval TI 指令故障概率= Pf (t) , 时间间隔TI的平均时间 PFD = 1/TI 0TI Pf (t) dt,2004-04-28 U.Schuenemann,Commissioning test of E&I SIS,11,PFD Probability of Failure on Demand PFD指令故障概率,Probability Pf(t) for finding equipment in dangerous fault state after time t has passed since last functional test 自上次功能试验以来经过时间 t 后 ,发现设备处在危险故障状态的概率.,Pf (t) = (1 e-l t ),time average 时间平均值,PFD Probability of Failure on demand PFD指令故障概率,PFD depends on failure rate of equipment AND test interval. PFD取决于设备AND试验间隔的故障率,2004-04-28 U.Schuenemann,Commissioning test of E&I SIS,12,Calculation of PFD PFD的计算,PFD calculation of an individual equipment easy, if you have test interval failure rate (given by supplier) 如有试验间隔和故障率(供货方提供), 则某个设备的PFD计算就不难 PFD-calculation for more complex configurations (2oo3 etc. ) can be done using simple statistical models: Good for comparing different configurations. 用简单的统计模型可进行较复杂的配置(2003等)的PFD计算 For SIS: PFD of field domain and control domain must be added. 对于SIS: 必须加上磁场域和控制域的PFD PFDSIS = PFDsensor + PFDPLC + PFDactuator,2004-04-28 U.Schuenemann,Commissioning test of E&I SIS,13,Calculation of PFD the problems PFD的计算问题,PFD data for field instruments usually not very reliable (not experimentally verified for chemical environment). 用于现场仪表的PFD数据通常不是很可靠(对于化学环境未经试验验证). Contribution to Failure Probability (PFD):对故障概率的影响因素 calculated values for PFD: often not very accurate. PFD计算值: 经常不太准,Field Instruments 85 % 现场仪表,Logic Solver (failsafe PLC) 15 % 逻辑解答器 (故障保护PLC),2004-04-28 U.Schuenemann,Commissioning test of E&I SIS,14,“SIL” requirements for SIS SIS的“SIL”要求,For SIS: international and BASF standards request SIL 2 or SIL 3. 对于SIS: 国际标准和巴斯夫标准要求SIL2 或 SIL3.,2004-04-28 U.Schuenemann,Commissioning test of E&I SIS,15,How to meet “SIL” requirements 如何满足“SIL”要求,Right Instruments: from BASF standard list (field proven) or certified 仪表正确 : 来自巴斯夫标准清单或核准者 (SIL 2, TUV certificate,) Devices without systematic design or manufacturing errors which can lead to common failure of redundant channels at the same time. 2. Right Design: Redundancy, Diversity. Use design typicals in BASF standard. 设计正确: 冗余, 多样性. 采用巴斯夫标准中的典型设计 Redundant (and diverse) channels of sensors and actuators make system tolerant against single passive and active faults. 3. Testing, Maintenance : perform commissioning test and periodic functional proof tests of SIS. 测试,维护: 进行SIS调试试验和定期的功能验证试验 In order to discover passive faults of SIS. Test interval depends on design.,2004-04-28 U.Schuenemann,Commissioning test of E&I SIS,16,BASF Global Standard Lists 巴斯夫全球标准清单,BASFs Standard Devices have passed extensive laboratory testing acc. to IEC770 at BASF, Ludwigshafen. are field-proven in non-safety related applications. have shown no passive fault during field testing (at least 10 devices monitored for 1 year). 巴斯夫的标准装置 已通过广泛的实验室试验,符合路德维希港巴斯夫IEC770标准. 在相关危险应用中经过现场验证. 在现场测试中未出现无源故障 (至少10台装置被检测了一年).,2004-04-28 U.Schuenemann,Commissioning test of E&I SIS,17,Design: Typicals for SIL2 and SIL3 设计: SIL2 和 SIL3的典型之处,SIL2: single channel design 1oo1 can be used 12 month test interval 可使用单信道设计1oo1 12个月的试验间隔,SIL3: single channel design not allowed at least: 2 sensors (1oo2) and 2 actuators. 12 month test interval. 不允许单信道设计 至少2个传感器(1oo2)和2个致动器 12个月的试验间隔,2004-04-28 U.Schuenemann,Commissioning test of E&I SIS,18,PFD of different Architectures 不同结构的PFD,Whats the best configuration: 1oo1, 1oo2, 2oo2, 2oo3, 2oo4, ? 最佳组态是什么? Consider: “failure on demand”-rate (affects plant safety) “false trip”-rate (affects plant availability) 须考虑: “指令故障”率 (影响装置安全) “误跳闸”率 (影响装置可用率),plant safety 装置安全率,plant availability 装置可用率,Higher高,Lower低,2oo2,2oo2 / 2oo4,1oo1,2oo3,1oo3,1oo2 / 2oo4,2oo3,1oo3,1oo2,1oo1,2004-04-28 U.Schuenemann,Commissioning test of E&I SIS,19,Commissioning & Proof Testing of E&I S.I.S. 安全仪表系统的调试及试验,All International and BASF standards for SIS require a documented tests 所有有关的国际标准或BASF标准均要求对安全仪表系统进行有文档记录的测试 periodic proof tests 周期性的试验 commissioning test before startup 开车前的调试,Objective for Commissioning Test: 调试的目的是为了检查： design according to Safety Review 2 设计遵照安全风险评估第二步所要求 installation ok 安装正确 parameter settings ok 参数设置无误 function of instruments (sensors and actuators) ok 仪表功能（传感器,执行器）均正确无误 logic action correct 逻辑动作正确,Commissioning test of S.I.S. will be main task for CTA PM during commissioning of plants. 在装置调试期间，安全仪表系统的调试是电仪经理的主要任务,2004-04-28 U.Schuenemann,Commissioning test of E&I SIS,20,Responsibilities for Commissioning Test