Professional Documents
Culture Documents
Aw2014 Continuous v4 Opt
Aw2014 Continuous v4 Opt
The bottom line on core automation issues for the Oil & Gas, water/waste water and chemical industries
Control System Security and Access Ethernet, Wireless and the Mobile Workforce PLC vs DCS Smart Devices and Asset Management Energy & Emissions Management Safety: Lifecycle and Procedural Automation Approaches Start-Ups, Upgrades & Migrations
2 / 135
CONTENTS
Sponsored by:
4 Contributors
12 SECTION ONE: AUTOMATION STANDARDS & TRENDS
11 Introduction
13 Procedural Automation for Greater Safety and Productivity 16 Four IT Standards You Should Understand
19 29 32
Heard the News about Procedure Automation? ISA-106 Releases First Procedure Automation Technical Report
31 SECTION TWO: BEST PRACTICES FOR CONTROL SYSTEMS Eight Ideas for Successful DCS Implementation
35 Teamwork Is Critical in DCS Projects 36 Best Practices for DCS Infrastructure 38 PLC vs. DCS: Which is Right for Your Operation? 41 PLC Lifecycle Management
3 / 135
CONTENTS
44 13 Suggestions for Control System Migrations
48
49 Four Considerations for Upgrades and Migrations 52 Control System Security Tips 55 How to Avoid Mistakes with Control System Remote Access
59 60
SECTION THREE: SMART DEVICES & ASSET MANAGEMENT The Smartest Instruments Still Need Smart Humans
66 Managing for Reliability Key to Asset Performance 68 Asset Reliability as a Performance Indicator 71 Measure First to Improve Control System Performance 75 10 Steps to Creating the Perfect HMI
78
4 / 135
CONTENTS
86 Many Factors Determine Choices in Intrinsic Safety Devices 88 12 Practical Tips for Implementing Intrinsic Safety 92 Safety: The Lifecycle Approach
97 98 101 103
SECTION FIVE: COMMUNICATION TRENDS Wireless Trends Wireless Sensor Applications Wireless Protocols for the Process Industries
106 Nine Strategic Considerations for Using Wireless Technology 108 Five Practical Tips for Implementing Wireless 110 Wireless Is Evolving 111 Standards Help Ethernet Networks Stay in Sync 114 SECTION SIX: ENERGY & THE ENVIRONMENT 1 15
How to Conduct an Energy Audit
5 / 135
CONTENTS
120 125 126 129
Energy Management Best Practices Five Ways to Manage Energy Costs Managing Emissions with Automation VENDOR SELECTION RESOURCE GUIDE
6 / 135
CONTRIBUTORS
Brooke Robertson
Project Manager Regional Control Specialist, EPCD Momentive Specialty Chemicals Inc.
Michael Thibodeaux
Industrial Automated Systems Security Engineer BASF
Joe Staples
Head of Manufacturing Systems North America Bayer CropScience
Dennis Brandl
President BR&L Consulting
Chris Wells
Senior Staff Instrumentation Engineer ExxonMobil Chemical Company
Steven Toteda
Chairman of WINA (Wireless Industrial Networking Alliance)
Dave Woll
Vice President ARC Advisory Group Inc.
Bob Rochelle
Food and Packaging Industry Specialist Staubli Corporation
7 / 135
CONTRIBUTORS
Cyle Nelson
Senior Software Architect Adept Technology
Steven Baird
Moxa
House Fang
Rockwell Automation
Sergio Canales
Robert L. Fischer
Fischer Technical Services
Herman Storey
Co-Vice Chair ISA-108 Standards Committee
Richard Caro
CMC Associates
David R. Gulick
Hexagon Lincoln
Dani Alkalay
MTL Instruments
Rama Chandran
Jacobs Engineering Group Inc.
Kevin Davenport
Cisco Manufacturing
Ken Austin
Phoenix Contact
Ted Dimm
Honeywell Process Solutions
Augie DiGiovanni
Emerson Process Management
8 / 135
CONTRIBUTORS
Randy Durick
Turck
Vignesh Kumar
ISA-106 Editor Yokogawa
Avihu Hiram
Hiram Process Control Engineering
Pierre Lampron
KSH Solutions Inc.
Steve Robben
City of Greeley
Allen Hough
Itw Drawform
Greg Livelli
ABB
Sam Roosth
Dave Huffman
ABB
Francisco Mejia
Manufacturing IT Consultant
Bryan Jones
Emerson
Erik Mathiason
Member, ISA-108 Standards Committee
Paul Schneling
Emerson Process Management
R.V. Kaushik
Matt Newton
Opto 22
Robert Schosker
Pepperl+Fuchs
Krishnakumar
Haya Water, Muscat
Anup Pandit
Bryan Sellner
9 / 135
CONTRIBUTORS
Robin Slater
Valin Corporation
Maurice Wilkins
Managing Director ISA-106 Standards Committee Yokogawa
Jeff Smith
American Axle & Manufacturing
James Wilkinson
MTL Instruments
Kevin Starr
ABB Process Automation Service
Bill Wray, PE
Co-Chair, ISA-106 Standards Committee
Roberto Zucchi
ABB
Sarah Wang
Fluor
10 / 135
CONTRIBUTORS
Control System Integrators Association (CSIA)
Automation World worked with CSIA to gain access to the expertise of its system integrator members to bring you much of the content in this playbook. To become a member of CSIA, a control system integration firm must demonstrate experience and commitment to the field. Members who earn CSIA Certification have passed an independent audit of 80 criteria covering all aspects of business performance, including general management, financial management, project management, quality management, supporting systems, human resources and more. To maintain their certification, CSIA Certified members must be re-audited every three years. For more information about CSIA and its system integrator members, visit http://www.controlsys.org
Chetan Chothani
President Adaptive Resources
Antonio Manalo
Automation Systems Integrator Avid Solutions
Alex Palmer
Team Lead Aseco Integrated Systems
Dario Rossi
Chief Engineer Aseco Integrated Systems
Robert Snow
Senior Process Control Engineer Optimation
Russel Treat
President-CEO EnerSys Corp.
11 / 135
INTRODUCTION
By Jeanne Schweder
Contributing Editor Automation World
Everywhere you look, new technologies, new standards and a new generation of engineers are transforming the control of industrial processes. Automation and information technologies are increasing our knowledge, and changing expectations and best practices as well. These powerful tools range from intelligent instruments to wireless communicationsand everything in between. This 2014 edition of Automation Worlds Continuous Process Playbook continues our goal of providing hands-on information, automation implementation tips and best practices specifically for the continuous process industries. It also explores some of the many trends affecting how work gets done, from procedure automation to reliability management. Among the many topics addressed in this playbook are implementing and migrating control systems, intrinsic safety, asset and energy management, Ethernet and wireless communications, automation project management and more. As always, we thank the many industry experts and process engineers who have contributed their experiences and expertise to this playbook. This peer-to-peer knowledge sharing is a hallmark of what makes Automation Worlds playbooks unique. We hope youll find this Continuous Process Playbook to be a useful source of information now and in the years ahead as you plan for new projects or upgrade existing production functions.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
12 / 136
SECTION ONE
Automation Standards & Trends
13 / 135
Continuous process environments tend to be stable until theyre not. When that happens, the consequences can be catastrophic. Think Deepwater Horizon. The very stability of a continuous production process often induces a false sense of security in operators. Lack of experience with system failure or unexpected alarms can lead operators to freeze when systems suddenly cascade out of control. Procedural automation standards originally developed for batch processes and discrete manufacturing hold promise for helping continuous process operators deal more effectively with sudden emergencies, as well as the more routine changes in state that can occur.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
14 / 135
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
15 / 135
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
16 / 135
Imagine a world without electrical standards, such as 110 V at 60 Hz, or 220 V at 50 Hz, or a world where every phone had a different type of connection and required a different type of switchboard. Just as these standards are critical to the basic functioning of electrical equipment, there are also IT standards used daily to ensure optimal functioning of production systems in the process industries. There are four production-related IT standards of special interest to the processing industries:
The ANSI/ISA 88 standard for batch control; The ANSI/ISA 95 standard for MES and ERP-to-MES communication; The ANSI/ISA 99 technical reports on industrial cyber security; and The new ANSI/ISA 106 technical report on procedure automation.
These standards and technical reports define the best practices for implementing automated and manual control on the systems that reside above the PLC (programmable logic controller) and DCS (distributed control system) level, and which perform the basic control that keep production running. These four standards all share a common view of a production facility,
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
17 / 135
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
18 / 135
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
19 / 135
Bayer MaterialScience and Dow Chemical are on the leading edge of pending industry standards that promise to widen the appeal of procedure automationa system design and programming approach known to streamline control, tighten repeatability and improve the safety of continuous processes. For Bill Wray, PE, spreading the good news about procedure automation is about more than simply generating hundreds of hours of productivity at Bayer MaterialScience in Channelview, Texas. Its also how the Bayer engineering consultant is giving back to his profession. He found that the benefits of borrowing from batch control to improve continuous processes were just too great for him to keep the news to himself. Id like to see more people adopt this method because it can offer real benefits in many places where people rarely think about batch programming, he explains. So, he joined a small band of evangelists on the ISA-106 standards committee on Procedure Automation for Continuous Process Operations, formed in 2010 by the International Society of Automation (ISA, www.isa.org) in Research Triangle Park, N.C. Since joining, he has become one of the committees co-chairs.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
20 / 135
The mission of this committee was to formalize a set of closely related methods that Bayer and other operators had developed over a few decades to accommodate change. Going by such names as procedural control and state-based control, these methods break continuous processes into operating states and automate the procedures for moving from one state to another. The committee intends to develop cross-industry standards for this form of automation, replicating the success that ISA has enjoyed in the batch industry with the ISA-88 and ISA-95 standards.
Streamlining change
Even without the standards in place yet, procedure automation is already streamlining operational changes in continuous processes, such as the responses that a refinery might make to accommodate a shipload of a different grade of crude. Another example is the adjustments to a reactor to allow it to produce a different grade of polymer. Anything in a plant that requires you to change the steady state and go from Point A to Point B can be done more effectively, more efficiently, and safer with well written code, notes Wray. About 13 years ago at Bayers Channelview facility, Wray and his colleagues developed a form of procedure automation to make two polyols, a triol based on glycerin and a diol based on propylene glycol. A breakthrough in catalyst technology had permitted them to convert a batch reactor to produce the two polyols in a continuous mode. Because the two
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
21 / 135
products are in different families, they are incompatible enough that operations must deinventory the system and restart to switch from one product to the other twice a month. Engineers wrote procedural scripts for such transitional phases of the reactor as cold starts, restarts after a trip, shutdowns, de-inventory procedures, and rate changes. We even have one that runs an optimizer [on the multi-constraint controller to optimize feed rates] on the reactor, says Wray. At the time, though, nobody was calling it procedural automation, but thats what it turned out to be.
A smooth transition
As is often the case for users who already have experience with automating batch procedures, developing and automating the procedures on the continuous reactor was a natural next step for Bayers engineering and operations team in Channelview. With a dozen or so years of experience, we had developed some well-tested approaches to automating batches, says Wray. We had a good, strong talent pool of people who knew how to do automation in the style that we like to do it. It made doing the procedural control a piece of cake. Even so, the team found that finishing the programming took longer than it had in the past when the process was batch. Because the reactor had been running anywhere from one to four batches a day, depending upon the product that it was making, the batch process had given the team more opportunities to identify and debug programs. With the continuous operation, we get about two startups and two shutdowns a month, says Wray. Because the continuous process does not exercise the code as much, it took a little longer to work out the bugs.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
22 / 135
Despite the longer debugging period, startup was short because the team could draw upon its experience with automating the batch process and could deploy proven techniques. For example, the programmers wrote a script that permitted aborting a procedure if the operator encountered a problem. After being reloaded, the script would return to the place in the sequence where it left off. We also modularized the programs as much as we could to allow us to plug in changes easily, says Wray. When we would run into coding errors and other problems, we tried to fix them right away. If you write them down with the intent to fix them later, sure enough, youll forget about them. Since going continuous about 13 years ago, the reactor has never made off-spec product and has been more productive. Although it was the catalyst technology that had made converting from batch to continuous processing possible, the procedure automation has allowed Bayer to take full advantage of it. The automation, for example, expedites changeovers. By automating the de-inventory procedure, we cut about 12 hours off our downtime, reports Wray. And 12 hours of production is quite a bit when you change over 24 times a year. Another benefit has been better coordination between the distributed control system (DCS) and the safety instrumented system (SIS). The automation communicates with the SIS, telling it what recipe were making and confirming that all the values and trip settings are correct, says Wray. So, it enhances safety as well.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
23 / 135
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
24 / 135
Another advantage to the industry-standard structures is that programmers can develop their code in layers and therefore separate operating procedures from the control loops that run pumps and other basic equipment. By not having to worry about the details for running each device, the operator can focus on just the procedure for a particular layer. At startup, for example, the operator can concentrate on starting the reboiler, filling a column to the right level, and bringing the system to temperature, while the software takes care of the valves, pumps, and other devices behind the scenes.
Layered structure
The layered structure also allows nesting so that programmers can automate procedures at the various levels within the production hierarchy, such as coordinating the various pieces of equipment within a particular unit. Take, for example, the task of heating a reboiler to 180 degrees C. Lower-level procedures take care of opening the required steam valves and setting the control loops necessary to do that. Then a unit procedure for the distillation column can be built on those lower-level procedures. A plant startup procedure can also be built on top of that unit level.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
25 / 135
The keys to identifying which tasks to automate and which to keep in the capable hands of operators are risk and bang for the buck. If you have an exothermic process that requires keeping a close eye on some variables, managing that risk might be a good place to spend your money on automation. Other candidates are repetitive, low-level tasks, such as daily filter flushes, that occupy an operators time.
State-based control
Continuous processes really operate in a series of definable states, rather than truly being continuous. Process engineers and senior operators should discuss in the initial stages how the process may be partitioned into states to establish state-based control. Perhaps the most fundamental of these states are startup, shutdown and normal running. The term shutdown usually describes at least two distinct states. The first is a fullmaintenance, multi-week shutdown where everything really is shut down. The other is better described as a process interruption or a state of waiting. In this case, some parts of the process may still be running, such as the systems for maintaining measurements, alarms or other forms of monitoring.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
26 / 135
Even normal running is rarely one process state. For example, a power-generation boiler usually operates at three basic conditions: full, three-quarters and half. Different products, minor product additives and changes in equipment, such as the switching of cracking furnaces in an ethylene process, also cause changes in state. Because of variations like these, process engineers and senior operators should include throughput conditions in their discussions about state. As you identify each state, create a functional specification that completely describes the state, including alarming and visualization requirements. Once you define your states, you are in a position to begin looking at the interactions between units.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
27 / 135
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
28 / 135
Process state a definable operating condition of process equipment as it progresses from shutdown to operating and back to shutdown. Each process state represents a unique operating regime that supports the process equipments objectives of processing an input into a desired output. State-based control a plant automation control design based upon the principle that all process facilities operate in recognized, definable process states that represent a variety of normal and abnormal conditions of the process.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
29 / 135
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
30 / 135
Seeking feedback
The first ISA technical report clearly establishes the value of automating procedures for continuous processes and provides the foundation for the reports and standards to follow. With strong end user representation, especially from energy and chemical companies, coupled with representation from consultants; engineering, procurement and construction companies; and system suppliers we had a great source of knowledge and experience to draw upon to create this technical report, says Dave Emerson, director of the U.S. Development Center for Yokogawa and ISA-106 Editor. This first technical report should generate feedback for the committee that will be used in creating a standard. The committee is now working on its second technical report that addresses work processes for automating procedures in continuous process operations. In parallel with this second technical report, the ISA-106 committee has started work on the standard itself. The work involved in creating this standard involves digging into sequencing concepts that have been around a long time, but applying them to a new context. The next step for the committee is getting feedback from industry to help guide it moving forward and encouraging more participation to ensure the standard created is reasonable to adopt.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
31 / 136
SECTION TWO
Best Practices for Control Systems
32 / 135
Implementing a new distributed control system is one of the biggest and most complicated projects in a process control engineers career. Doing one successfully requires everything from a well-defined project document to good grounding practices. Here are recommendations for best practices and some pitfalls to avoid.
1. Standardize. Use of standard wiring throughout the system will make it for easier
for others to understand and troubleshoot. Use standard, off-the-shelf components for ease of stocking and reordering. If possible, have two sources for the products being used or purchase interchangeable brands.
2. Remember the basics. Its the little things that can trip you up. Make sure you use
proper grounding, proper grouping of signals and proper termination of electrical signals. Make sure you understand the suppliers grounding requirements for your DCS system. Grounding principles need to be clearly understood by all automation engineers, not just the electrical staff. International standards can be misinterpreted. Instruments and the control system need to be grounded separately. Double check the grounding before powering up any DCS system to avoid any short circuits, particularly during factory acceptance or site acceptance testing (FAT/SAT).
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
33 / 135
4. Structuring I/O. Since todays electronics are available with high-temperature specs
and may be G3 compliant (conforming coating), the I/O structures should be moved to the field, reducing the rack room footprint and cabling cost. Communication links should be used over fiber optic, in a ring configuration to provide some level of redundancy, to interconnect the field I/O structures. Extended I/O terminal blocks (three to four terminals per channel) should also be used to allow field wiring to be connected directly, avoiding marshaling terminal strips with the related space, additional cost, installation cost and the possibility of poor connections.
5. Dual purpose. The purpose of DCS is twofold. Centralized human control and interface
to the plant as well as a centralized location for MIS info to the management network. DCS control should not include auto tuning of control loops other than simple on/off or start/stop functions. These should be the function of a local dedicated controller. Use the DCS to update the tuning parameters.
6. Good links. Distributed control systems are only as good as their communications links.
Choose a very solid and reliable link between processing units.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
34 / 135
7. FAT is where its at. Make sure you do a comprehensive and detailed factory
acceptance test (FAT) before cutover. FAT involves experienced operations people interacting with engineering to validate graphics and verify that instruments in the configuration exist and will remain in service.
8. Use single server. Base the selection of a DCS system on its redundant capability. A
single server system is preferred. Pay attention to the hardware license for client and server to avoid delays during a system or hard-disk crash. Care must also be taken in selecting appropriate layered switches for communication. Make sure you properly configure trends and history data for future analysis.
Define in Detail Successfully implementing a DCS project requires that all stakeholders (operations, maintenance, project team, vendor, management, etc.) have a clear definition of what they want from the system. In both upgrading and installing new DCS systems, the best tip is to keep the end in mind. Good up-front engineering pays dividends. Automation technology can only assist us if we know what the needs are. Maintenance must know what reports and information they really require to do their work. Operations must be completely sure how they operate and what is the best way to do it. Don't assume anything. Write everything down thats actually required and all the things the technology can do. Be very specific. In the end, the best DCS is the one that best satisfies all the important requirements in the plant. Writing and signing this definition document should be the first step in any project.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
35 / 135
No matter how well you have planned, always leave some slack in your schedule. You may get off to a great start, but problems invariably surface. The fastest way to confuse a project is to have too many disjointed teams. DCS projects are extremely complicated and all the groups have to interact. Even if you don't have anything new to share, schedule a weekly call so everyone knows what everyone else is doing. If youve found a solution to a problem, one of your other team members may run into the same issue. Instead of wasting precious time, they'll know to call you. Keep the calls short and sweet, but make sure everyone provides a good synopsis. If you are not a people person, make sure you get someone on your team who can talk to people. Otherwise, people will hide their issues. Most importantly, do not shoot the messenger. If someone comes to you with an issue, handle it, but do so in a way that they will bring you other issues. If everything is a disaster, no one is going to tell you anything until it is too late to handle calmly (and cheaply). As long as you have a competent team and are using a good product, you have the basis for a successful project. A successful, on-time and on-budget installation depends on whether or not the team works well together.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
36 / 135
Using separate DCS marshaling, server and operator rooms, but keeping the server and operator rooms close together, are some of best practices and human factors experience to keep in mind when implementing a DCS. Other recommendations:
Separate grounding for each room, instrument and signal and Need a good air filtering system for each room, depending on Make sure proper air conditioning is available all the time. Dont mix MCC and DCS marshaling panels. These panels or Have a dedicated UPS with the minimum required
battery backup provided separately for marshaling, server and instruments.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
37 / 135
hardware instead of an OPC server or system. If the OPC server hangs or stops, it makes a mess for controls.
Use one communication protocol standard for electrical equipment and instruments. Choose a reliable communication protocol for critical loops, such as conventional
each should be used. Most people dont understand why you need a warm start option for controllers with a DCS, for example.
Educate everyone on the operational differences between a DCS and PLCs and where Use one programming approach for the entire system.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
38 / 135
Over the past decade, the functionality of different control systems has been merging. Programmable logic controllers (PLCs) now have capabilities once found only in distributed control systems (DCSs), while a DCS can handle many functions previously thought more appropriate for PLCs. So whats the difference between the two control approaches, wheres the dividing line and are there still reasons to choose one over the other? PLCs grew up as replacements for multiple relays and are used primarily for controlling discrete manufacturing processes and standalone equipment. If integration with other equipment is required, the user or his system integrator typically has to do it, connecting human-machine interfaces (HMIs) and other control devices as needed. The DCS, on the other hand, was developed to replace PID controllers and is found most often in batch and continuous production processes, especially those that require advanced control measures. The vendor handles system integration, and HMIs are integral. As users demanded more production information, PLCs gained processing power and networking became common. PLC-based control systems began to function like a miniDCS. At the same time, the DCS hybridized to incorporate PLCs and PCs to control certain
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
39 / 135
functions and to provide reporting services. The DCS supervises the entire process, much like the conductor in an orchestra. Protocols, like OPC, have eased interactions between the two control systems. Since PLCs are less expensive and can now perform much like a DCS, wouldnt it make sense to convert everything to PLCs? The answer, like most things in the world of automation, is that it depends on the needs of your application. Here are six key factors to consider:
1. Response time
PLCs are fast, no doubt about it. Response times of one-tenth of a second make the PLC an ideal controller for near real-time actions such as a safety shutdown or firing control. A DCS takes much longer to process data, so its not the right solution when response times are critical. In fact, safety systems require a separate controller.
2. Scalability
A PLC can only handle a few thousand I/O points or less. Its just not as scalable as a DCS, which can handle many thousands of I/O points and more easily accommodate new equipment, process enhancements and data integration. If you require advanced process control, and have a large facility or a process thats spread out over a wide geographic area with thousands of I/O points, a DCS makes more sense.
3. Redundancy
Another problem with PLCs is redundancy. If you need power or fault tolerant I/O, dont try to force those requirements into a PLC-based control system. Youll just end up raising the costs to equal or exceed those of a DCS.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
40 / 135
4. Complexity
The complex nature of many continuous production processes, such as oil and gas, water treatment and chemical processing, continue to require the advanced process control capabilities of the DCS. Others, such as pulp and paper, are trending toward PLC-based control.
6. Vendor support
DCS vendors typically require users to employ them to provide integration services and implement process changes. System integrators perform similar functions for PLC-based systems. It has also become common for PLC vendors to offer support services through their network of system integrator partners. Process control has become increasing complex. Its difficult for any individual to know everything about these sophisticated systems, increasing the need for vendor support. Manufacturers also continue to reduce factory staff and a generation of experienced process control personnel has begun to retire. As a result, the quality of support has become a critical factor in vendor selection.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
41 / 135
By David Greenfield
Discussion of controllers in the continuous process industries typically centers on distributed control systems (DCSs). However, programmable logic controllers (PLCs) play as important a role in the process industries as they do in discrete manufacturing, particularly when it comes to operations reliability and protection of personnel. Some of the more significant applications for PLCs in the process industries include control of safety-instrumented systems and control of major machinery. Like many discrete manufacturing operations, most process operations use a variety of PLCs from different vendors. As a result, your ability to effectively operate and manage these disparate PLC versions has a direct impact on your plant reliability and safety. Following is a list of the top three PLC lifecycle management concerns for the process industries and how some of your peers are working with PLC suppliers to address those issues, compiled from presentations delivered at The Automation Conference 2012.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
42 / 135
Pilot Valves
Three aspects are critical to any plan involving the integration of PLCs with DCSs. 1) The integration process needs to be reliable and shareable with all other plants to standardize the process for ease of maintenance; 2) the integration plan should be flexible for adaptability to local requirements; and 3) it must address industrial control system security. (See Control System Security Tips in this playbook for more details on this topic.) To better manage your PLC lifecycle, following is a set of three requests that many top process industry operations
Control Cabinets
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
43 / 135
are asking of their PLC vendors to help them better manage their PLC assets over the long, continuous operation periods common to the process industries.
1. Life extension. Because of the long periods of time that typically pass between
maintenance shutdowns in process facilities, users need to be able to source and use components for longer-than-expected lives. Many facilities in the continuous process industries are still looking at 20 to 30 years as a life cycle for their equipment. Talk to your vendor about their ability to support backwards compatibility with new components as they become available over these long lifecycles. These new components should be able to be integrated into your system without requiring a shutdown for upgrading.
2. Online upgrades. More vendors are coming around to this request of process
industry end users, as it is often the easiest way to upgrade a PLCs logic without shutting it down or rewiring the I/O. One process industry end user told us: If you look at the total cost of an upgrade, the cost of the hardware is dwarfed by the cost of labor to re-do things like I/O rewiring and the cost of the unit shutdown. Therefore, online version upgrades that can be installed while the PLC is running and that work with the existing I/O is ideal.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
44 / 135
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
45 / 135
3. Take it one step at a time. Avoid changing the entire system or manufacturer if you
are upgrading. Upgrading to the newer modules or systems of the same vendor provides a bit more reliability, since the basic architecture remains the same.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
46 / 135
8. Start with data needs. First you need to understand what data the user will
require and how quickly the data is needed. That should be the starting point in developing your migration strategy. The second priority is to determine the impact on the safety and productivity of the plant.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
47 / 135
13. Aging equipment. Depending on the technology you have installed, when your
equipment is more than 10 years old you will need to implement a rip-and-replace. If you are just making some modifications you can upgrade or make an expansion only. Most of the problems that arise during a migration are with the field equipment you have installed and control room facilities.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
48 / 135
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
49 / 135
By David Greenfield
Regardless of whether you want to increase productivity or shorten time-to-market, attaining success in these areas depends on the application of suitable automation technologies in a continuous process operation. Following are the principal steps involved in assessing your plants technology to gauge whether a technology upgrade or migration is in order:
1. Consider the full range of aspects that relate to your existing systems, such as:
Risk of unplanned plant downtime and production stoppages; Ability to expand production or introduce new products; Ability to integrate with enterprise-level business software and at what cost; Ongoing maintenance costs; Need for continuing support of the legacy system; and Effect on the efficiency and productivity of plant personnel.
FORWARD PLAYBOOK ADD COMMENT RETURN TO CONTENTS
50 / 135
2. In each case of upgrade or migration, return on investment plays a crucial role. A huge investment in hardware and application software is associated with
the installed process control system, as well as the accumulated know-how of the operating, engineering, and maintenance personnel. For this reason, the prime objective of any migration strategy should be to modernize the installed base gradually without any system discontinuity and, if possible, without any plant downtimes or loss of production that would negatively affect the investment return.
3. Assess the long-term security of existing investments. This assessment is important in order to
maximize the return on assets (ROA). For this reason, every migration should include a robust lifecycle support strategy for the new system that considers not only the availability of the components, but also product warranties, on-site service, and ongoing technical support.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
51 / 135
typically released for this system and what is required for installation? For upgrades, its important to understand what the future outlook is for the system under consideration. With the significant maintenance and security issues tied to process control systems, you should always consider your risk of system obsolescence and the associated costs incurred with such a scenario versus the costs of moving to a better-supported system. The good news is that, in the process industries, most vendors are very aware of the long-term use of their systems by end users and thus tend to support their systems for multiple decades rather a single decade, as is more common with office IT systems. As newer automation technologies become core components of process control systems, be sure to talk with your supplier about their support plan for those newer technologies.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
52 / 135
David Greenfield
Recognizing that the biggest security risk to your control system assets are the operators who interface with the system on a daily basis is the most important step to successfully securing your systems. For a thorough analysis of your risks and setup of reliable control system security technologies and processes, consult an industrial control system security expert such as scadahacker.com, tofinosecurity.com, or industrialdefender.com. Following are the groundlevel security steps that a continuous process facility should implement at a bare minimum:
1. Assess your systems. Compile an accurate list of all the assets in your plant: make,
model, and serial number. Where are your computers? Where are your PLCs? Its difficult to secure something when you dont know it exists. This should be a high-level assessment in which you go through your plant and figure out what is high risk and what is low risk, which is determined by two key factors: how likely is a problem to occur? How serious is the problem? For example, if something happened to your chlorine tank, it would be really ugly. That chip pile, not so ugly. Get a feel for the significant risks. Where do you have to focus your effort? The answer is going to drive your decisions and your capital allocation.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
53 / 135
3. Start training. No one is going to follow policies unless they know about them and
understand why they are necessary. All levels of employees that interact with the control system need to understand what an attack looks like and how to respond to one. You should end up with a matrix of training for the various levels of users; it doesn't have to be onerous, but it has to be done.
4. Understand your traffic flows. You need a diagram that shows all the things that
require intercommunication. Smart companies will have a comprehensive diagram showing that the accounting department needs data out of this area, and maintenance needs data out of this area, and so on.
6. Leverage safety reports. Those responsible for safety, when they do reports and
analyses, have done a good deal of the work needed to understand the security risks.
7. Use separate networks. Though this step is becoming less and less practical, some
still advocate that the process control network be kept separate from business networks, and also isolated from the Internet. For this approach, which may not be viable in the longer term, utilize operating system (OS) implemented security, with active directory domain group security as the preferred approach.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
54 / 135
9. Use unique user accounts and passwords. All users should have unique user
accounts and passwords to minimize the risk of unauthorized access.
10. Provide port security. With this approach, the Ethernet MAC address connected
to the switch port allows only that MAC address to communicate on that port. If any other MAC address tries to communicate through the port, port security will disable it. Most of the time, network administrators configure the switch to send an SNMP trap to their network monitoring solution that the ports disabled for security reasons. When using port security, you can prevent unwanted devices from accessing the network.
12. Open and facilitate communications between IT and process control groups. Roles need to be defined and an understanding of what each group
needs must be accomplished so true collaboration can take place to begin and continue the process of enabling a fully functional control system with adequate security protection.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
55 / 135
By David Greenfield
As more operations aspects are tied to Ethernet networks and, therefore, are open to Internetbased access, the potential for greater collaborative operation and a freer work environment increases. But so do the potential for security problems. Following are some basic tips and considerations for achieving secure and reliable remote access:
1. Map out your project from the start. When companies fail to map out their
projects thoroughly from the start, they often find themselves saddled with applications and automation products that dont work cohesively as a single system. Once you start implementing various silosbe they applications or productsthings get more complex. This is typical of problems that occur when automation products are implemented hastily, without doing proper research, planning, or analyzing current and future goals, or without realizing that implementing remote access monitoring for a facility is just step one of many.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
56 / 135
3. Understand users and roles. Understanding users and their roles can have
a significant impact on how the remote access strategy evolves. In most control systems operations, the roles that may require remote access to control assets may include, but are not limited to:
System operators and engineers for local systems; System operators and engineers for remote systems; Vendors; System integrators; System support specialists and maintenance engineers; Field technicians; Business/supply chain partners; Reporting or regulatory entities; and Managed service providers.
The roles of users that would require remote access to mission-critical operations can be extensive and the assignment of specific access depending on those roles can be
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
57 / 135
complicated. Map out and document all acceptable access policies and procedures related to allowable network access and coordinate this with industrial control system security experts. Any user access that goes beyond simple viewing of data and permits changes to system parameters should be extremely limited.
4. Know your vulnerabilities. Beginning at the remote user and following the
connection to the data or service, remote access can be compromised at any of the following points:
he user or system can be impersonated to fool the target system. T he attacker can use captured or guessed credentials to impersonate the user. T he attacker can intimidate or coerce the user to provide valid credentials, or to T
perform activities at the attackers demand.
he users access device (laptop, PDA, etc.) can be attacked, compromised, and used to T
access the control system network.
he target system can be impersonated by an attacker to fool the user and thus gain T
credentials or other information from the user system.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
58 / 135
he communication can be interrupted or jammed. T ommunications can have data injected into them by an attacker. C ommunication can be hijacked after it has been initiated (does not rely on C
impersonation) or intercepted during initiation (impersonating both user and target, also known as a man-in-the-middle attack).
n attacker can impersonate a valid communications node and gain access to the A
underlying communications medium.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
59 / 136
SECTION THREE
Smart Devices & Asset Management
60 / 135
Automation suppliers having been building microprocessors and digital communications capabilities into process control instruments for more than 20 years. By 2010, process industries had installed an estimated 69.2 million field devices, according to a study by the ARC Advisory Group, more than 60 percent of them microprocessor-based. Despite that massive investment in intelligent instrumentation, the promised new world of lower maintenance costs and significantly lower risk of process failures has not yet arrived. Blame that, say the experts, on the difficulty of changing human behavior and longaccepted practices. Others point to a lack of sustained management support for following best practices. Though nearly all of the instruments shipped today have built-in intelligence, companies continue to follow the traditional inspect and test practices they used with analog devices. The lack of links from process instruments to digital communications networks also means workers can access little of the information available from smart field devices, and even less is actually used as intended to improve diagnostics and process control. The result is hundreds of thousands of man-hours wasted every year on routine and unnecessary maintenance, and processes that are no more efficient or safer than they ever were.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
61 / 135
In a perverse way, the cost cutting and workforce downsizing in the process industries is finally leading many companies to a tipping point for change. Lacking the number of workers required to control processes and inspect and test devices manually, theyre being forced to find ways to make better use of the information provided by their intelligent instruments.
Defining standards
An industry-wide effort has been underway for several years to define standards and best practices for smart field device management, make intelligent instruments easier to use, and train process engineers and maintenance workers on how to apply and benefit from them. To that end, the ISA-108 committee on intelligent device management (www.isa.org) was formed in 2012. Co-chaired by Herman Storey, a former Shell Oil employee, and Koji Demachi of Yokogawa, it is working to define standard templates of best practices and work processes for the design, development, installation and use of diagnostic and other information from intelligent field devices. The first draft of the committees initial report on models and terminology is scheduled for completion in the first quarter of 2014 and will then be presented as a proposed standard to an IEC technical committee. Part two, diagnostic work processes, is due in 2015, and part three, on configuration work processes and guideline templates, in 2016. These devices dont come from the factory pre-set with the specific configurations needed for an application, Storey explains. There are a huge amount of options; you have to tell an
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
62 / 135
instrument what you want it to do. Then you have to create a backup database to maintain configuration accuracy over the lifecycle of the device. Although traditional test and inspect practices work well for production assets like pressure vessels and piping, which typically fail slowly over decades, automation assets such as transmitters and valves are more vulnerable and can degrade quickly. Thats where selfdiagnostics are critical and where routine predictive and preventive maintenance practices are of less value. The goal is to refocus maintenance on early problem identification so that operational issues can be quickly resolved without all the expense and risk, Storey says. The diagnostic information in intelligent instruments lets you anticipate problems and be proactive. It doesnt reduce the failure rate, it just reduces the impact of failures. Storey says condition-based monitoring and maintenance practices are starting to take hold in a number of industry segments, such as machinery and offshore oil drilling. But for most process industries, making better use of diagnostics is not part of the culture. People are focused on keeping things working, not managing assets well over time. A lot of things get deferred. While a plant may run nicely for a while, its actually in decline. Industry has been doing inspect and test for years, he notes. Doing asset management in a different way requires a different culture, and the tools to do it well are poorly developed and integrated. Standards, he adds, will finally help establish accountability for following good practices. Its not an instrument, an IT or a vendor problem; its a management problem. Management engagement, accountability and metrics will drive behavior change.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
63 / 135
Wireless a catalyst
The adoption of wireless has been a spur to interest in intelligent instruments. Wireless technology has allowed intelligent devices to be more useful at a lower power budget. Once they get more digital information, users want more multi-variable data for troubleshooting and to gain insights into their process. On the flip side, users are often overwhelmed with all the information they can get from their instruments, says Erik Mathiason, a member of the ISA 108 committee and an employee of Emerson Process Management. They dont know what to do with it. Theyre asking suppliers for help in accessing, managing and assessing the data. They want to know, What does it all mean? Thats especially true with so much of the process industry workforce retiring. The younger people are more open to change and hungry for information because they believe it will help them solve problems. Younger people dont have the instincts honed by years of experience in a plant. Data is all they have.
Human-centered design
Instrument suppliers are working to make life easier for the process industry workforce. This includes making products that are easier to use and have device dashboards that make it easier to see data. Suppliers are spending a lot of time and money to learn how customers need to interact with data. Many include dashboards to display data with a similar look and feel across multiple devices, even though the devices might do different things.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
64 / 135
This human-centered design approach owes much to the model established by the consumer electronics industry. Its goal is to design human-technology interactions around how people learn, think and work. In the past, there were fewer device types and simpler devices, Mathiason says. That meant workers did the same things to the same device types many times, building expertise. Today there are more device types, and devices themselves are more complex. In addition, devices are more reliable, so worker-device interactions are less frequent but more varied. The result is unfamiliar human-device interactions and more human error. Studies show that up to 80 percent of abnormal situations are caused by human error. With process plants staffed with fewer and less experienced workers, the potential for both minor problems and major catastrophes rises exponentially. Consistent navigation and operation across multiple devices, the foundation for human-centered design, can improve the probability that the correct actions will be taken with fewer errors.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
65 / 135
Another trend is the development of instruments that can measure multiple variables. End users in the oil and gas industry, for example, want multi-variable instruments that will reduce the number of pipe penetrations the company is required to make, as well as wiring, which will save on both installation and maintenance costs.
Driving adoption
Intelligent transmitters are the most widely deployed intelligent instruments today, outnumbering analog transmitters by an estimated two to one in heavy process industries. Also popular are positioners for control valves and flow controllers, which are used in every industry where custody transfer is critical in controlling process input costs. Positioners provide maintenance technicians with critical information on a valves activity and can help proactively determine what a reasonable maintenance schedule should be in a process application. Industries that have been early to appreciate the value of intelligent field devices include oil and gas drilling, refining, chemical plants, food processing, and biotech and pharmaceutical companies.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
66 / 135
The powerful combination of smart devices and communication networks has great potential for helping industrial plants achieve significant gains in productivity and efficiency. But making that happen requires companies to use the information from their production equipment to change their asset management and maintenance practices. Take the example of two plants, owned by the same company but located on opposite sides of the globe. The two sites made the same products, using identical production equipment, quality specifications and automation systems. They both spent a similar amount of time on maintenance. Yet one plant was experiencing constant failures, shutdowns and quality issues, while the other was performing to goals. The question was, why?
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
67 / 135
In contrast, the plant meeting its goals spent only eight percent of maintenance time on unscheduled activities. More revealing, 34 percent of their maintenance time was spent on preventive maintenance, and another 12 percent on optimizing assets. Employees at the proactive plant also received more than three times the amount of training as those working at the reactive plant. Unfortunately, this lack of training is not uncommon at plants with a reactive approach to asset management. Reactive managers assume its less costly to fix something only when its broken and they know what to fix. They see training as wasted dollars. But industry experts will tell you this is a mistake and results in frustrated engineers who take longer to solve a problem and are unsure of the best practices to use to make sure the problem does not come back. Proactive-minded users, on the other hand, have seen the benefits of this service philosophy. They see training and certification as an investment to ensure not only that results dont erode, but that production and quality performance continue to improve.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
68 / 135
The methodologies for managing assets to ensure reliable performance first began to be developed by the airline and power industries and the U.S. military in the 1970s. Over the past 15 years, an understanding of the value of asset reliability as a plant performance issue has spread to all industries. Many universities began offering programs in reliability management over the past decade and graduates are now entering leadership positions in operations and maintenance at many companies. Theyre realizing that their plants are not executing the reliability methodologies they learned in school. When they experience too many failure events and issues, they recognize that this cant go on. Industries with an active interest in asset reliability include the oil and gas, chemical, refining, pulp and paper, power, metals and mining and food and beverage industries. Reliability is often one of their top three business objectives.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
69 / 135
Finally, decisions must be made about what technologies and what data to use to determine asset health. Some examples include when and how often to measure motor vibration or motor stops and starts, or whether to use wireless vibration sensors or wireless mesh networks, which make it easier for companies to get data from assets in places where its difficult or dangerous for humans to reach.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
70 / 135
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
71 / 135
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
72 / 135
Additional simple measures, such as the percentage of control valves at a limit, and overall variability, can give you a better idea of the opportunity for savings at your plant. Start by taking a random sample of 100 control loops. In one hour sitting with the operator, you can confirm whether your plant has a significant opportunity to improve. The next step is to measure and monitor control performance regularly. Software tools can monitor various measures, provide reporting and notification of problems. This step is critical to recognizing where problems exist in your plant on any given day. Automated monitoring also allows for more sophisticated measures and diagnostics. Modern software tools can find failed instruments, broken control valves, poorly tuned controllers and process problems. These analytics are needed for the next step: resolving the root cause of the problem. If 30 percent of controllers are operating in manual mode, the solution is not as simple as putting everything into automatic mode. Chances are, the operator put these controllers in manual for a reason. Any good control performance project can use data from your process historian to help pinpoint and resolve the true root cause of the issue.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
73 / 135
Some problems, such as valve stiction, have a unique signature pattern, as shown in Figure 1. The square wave pattern on the process measurement and sawtooth movement of the control output are a sure sign of valve stiction. The ladder pattern in the PV/CO plot shown in Figure 2 further confirms valve stiction. Other problems, such as oscillations and interactions between various parts of the process, need more sophisticated analysis. Tools such as Fourier Transforms and the resulting power spectrum chart, shown in Figure 3, can find the cause of oscillation problems. Process Interaction analysis, as shown in Figure 4, can also be used to pinpoint the cause of a problem that may be far upstream in the plant. With the problems identified and prioritized, your focus can now turn to managing the required repairs, tuning changes and process adjustments. This work should be managed and organized like any project: with specific plans, assignment of responsibilities and expected completion dates. Some repairs may need to wait until planned shutdowns, but others can be completed on the fly.
FIGURE 4 Process interaction map pinpoints the root cause of process problems.
Finally, it is important to track the effect of these improvements. A simple before/after trend can be very useful to show the results. Whenever possible, you should also identify the economic impact of your work, and share it with your management team.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
74 / 135
If you have enough staff at your plant, each of these steps can be accomplished in-house. Experienced software and service suppliers can also provide all or part of these activities as a service, starting with site evaluation and progressing all the way through capture of benefits and sustaining the results. What kind of results can you expect? That depends, of course, on your starting situation. But it is common to see reductions in variability that lead to energy savings, production increases and quality improvement. Because automation system improvements have a direct effect on process results, the return on investment is typically measured in months, not years.
This article was adapted from content provided by George Buckbee, P.E., ExperTune
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
75 / 135
When developing HMI screens, realize that you are attempting to capture the essence of the machine or process, not just posting key automation variables and control mechanisms. Operational feedback is vital for efficient HMI screen layouts. Think of yourself as an artist, commissioned by manufacturing operations to create the HMI screens.
1. Less is more. Its important to keep the HMI simple and with the operator in mind. Its
best when its self-explanatory and easily understood. Also, try to make the pages similar and follow the same page layout throughout. Avoid making the display too technical. Its normal for engineers to try to give the customer everything, but with HMI, less really is more.
2. Right-size displays. Dont try to save money by selecting an HMI display screen thats
too small. Its also important not to cram too much information onto a screen. Size the display according to the amount of information that is most important for the operator to see. Always discuss requirements with the equipments operators well ahead of time, not just with their managers. Operators usually have different needs and the success of your system depends on their usage.
3. Design tips. A good design requires careful use of layout, color and content. If you get
it wrong, your operator misses an indication, you lose money, or worse, someone is injured. The bad screen is less than satisfactory: The layout is poor, the plant representation isnt
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
76 / 135
logical and the screen layout makes it difficult to locate the data. Poor selection of colors, excessive use of capitals in a serif font and repetitive use of units with all data values makes this a really difficult screen to readespecially at a glance or from a distance. Avoid colors that could create problems for people with color blindness. Minimize the use of colors to allow actual device state and alarms to stand out. For alarming, choose colors that contrast with the normal process view so the operator will notice the change.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
77 / 135
7. Visualize the process. HMI graphics should illustrate the production process in the
plant to provide better visualization to the operators, giving them a sense of the action thats required. Use hardware that meets minimum requirements and keeps the number of failure points low and assures high availability of the system.
8. Only essential data. Make control and monitoring of the process simpler by
selecting only the most essential information from the process database for the historian. This will reduce the load on the system and keep it from stalling or failing. Dont forget the need for maintenance and make sure you schedule periodic backups.
9. Think about flow. It is essential to have a clear design approach to the HMI. Decide
how the display blocks naturally flow and how sections need to be grouped together for the operator. Do not blindly follow P&I diagrams. The S88 functional hierarchy is a good place to start. Make paper-based designs to get a feel for screens, navigation and other requirements, and review with clients prior to designing and making electronic screens.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
78 / 136
SECTION FOUR
Advances in Safety
79 / 135
Unlike explosion-proof schemes, which aim to contain explosions inside enclosures, intrinsic safety keeps them from ever happening at all. Consider whether it makes sense for your production environment. As you develop your safety plan for a hazardous production environment, you might want to move beyond the explosion-proof methods that have been popular for so many years in the U.S., and start thinking outside the box. Particularly for process industries, it could be time to take a closer look at intrinsic safety (IS). Process automation is the sweet spot for intrinsic safety. Thats where intrinsic safety shines, says James Wilkinson, senior applications specialist and technical support lead for MTL Instruments, describing analog signals from level measurement on a tank, for example, going back to a control panel. Process automation is intrinsic safetys world. Thats because intrinsic safety makes the most sense at low energy levels, where voltages are 24 V or less, and currents are 300 mA or less. That makes it a good fit for field instruments such as thermocouples, RTDs, pushbuttons, simple transmitters and low-power solenoids. For variable-frequency drives, switch gears, Coriolis metersanything high-voltage or highcurrentexplosion-proof makes more sense.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
80 / 135
If youre running a plant where 90 percent of it is low-voltage, low-power instrumentation, thats when you need to sit back and take a look at intrinsic safety. Intrinsic safety is suited to the most hazardous locationsClass I, Div. 1 for North American NEC standards; and Zones 1 and 0 for Europe/IEC. It is used in a variety of hazardous industriesin oil refineries, upstream oil and gas, petrochemicals, pharmaceuticals, even food and beverage. Intrinsic safety is the No. 1 safety movement in Europe, but has been slower to catch on in North America. There is a movement to intrinsic safety, albeit a slow movement. People here in North America do not understand it. Older engineers dont understand what it is and how it works; the cost savings and its overall ease of use.
Three basic safety methods protect hazardous environments: containment, segregation and prevention. Intrinsic safety prevents a spark from ever igniting. Source: ABB
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
81 / 135
In short, an intrinsically safe system is one whose energy levels are so low that they cannot generate an arc or spark and therefore cannot cause an explosion. This differs from an explosion-proof system in which the explosion is simply contained within an enclosure so that it doesnt reach the hazardous materials that might create a combustible mixture in the atmosphere. Such hazardous compounds as hydrogen, ethylene, propane or methane will ignite differently, but they still all follow a basic ignition triangle, which requires fuel, oxygen and an ignition source. All protection methods eliminate one or more of the triangle components. Intrinsic safety works by eliminating the ignition source. Being limited by an intrinsically safe barrier, that spark doesnt carry enough power to ignite. Engineers whove been around the business for a while often feel more comfortable with explosion-proofing. They may believe that if they have an enclosure, if an explosion occurs inside it will be contained. Intrinsic safety is more electrical. You design the circuit so even if there is gas in the air, even if there is a fault condition, it wont have enough energy to ignite. Engineers need to be more electrically oriented to feel comfortable with intrinsic safety.
No matter what method is used to reduce the risk of explosion, the idea is to eliminate one or more of the components of the ignition triangle. Source: Pepperl+Fuchs
But explosion-proof systems have their own hazards, particularly since they dont actually avoid creating an explosion. The housing is designed to contain the explosion. In a fault condition, it may create an explosion, but the container will contain the explosion. But with corrosion, nicks or cuts to the container, or if screws are not screwed in all the way, a much larger explosion can occur outside the container.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
82 / 135
IS barriers
Even though some engineers find it difficult to trust that a little zener diode barrier will stop an explosion, it will do just that. For intrinsic safety, the zener barrier provides a simple method for keeping energy levels in check. A key drawback, though, is that the barrier must be connected to a special IS ground. They require a very high-integrity earth ground, and are more error-prone since they can start building up impedance by becoming corrosive, for example. That can create potential for energy to not get shunted to ground appropriately. A newer alternative is an isolated barrier, which creates an optical isolation area between the safe area (the control room, for example) and the active area. It provides galvanic isolation and does not require dedicated grounding. While somewhat more expensive, they are much easier to install and maintain. They do, however, typically require a separate power supply. Galvanic isolators are also more application-specific because they must be configured for either digital or analog use; not both, as is possible with zener barriers.
Zener diode barriers or isolated barriers must be paired with intrinsically safe instruments to create the IS circuit. Source: Pepperl+Fuchs
Another benefit of an isolated barrier, however, is density packing. You can put two instruments per isolator, sometimes four. The zener barrier is one device per barrier. So instead of 100 zener barriers, you can buy 50 isolators, and save money and space.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
83 / 135
These, along with other system requirements, are aspects that scare some folks away, concerned that the system is too complicated or expensive. A mistake some people will make is to take an explosion-proof instrument, put a barrier in front of it, and call it an IS circuit. It doesnt work that way. You have to do some entity calculation, checking voltage, current, capacitance, inductance, power People can find that a little daunting. However, an IS system is not that complicated and there is plenty of help available in the industry for setup. Companies who specialize in commercial and industrial property insurance can often help U.S. organizations identify parameters for setting up IS circuits. There are essentially three devices that plants need to be concerned with for intrinsic safety: a power supply, IS barrier and measurement device. When you pick your devices, make sure they are compatible with each other based on entity parameters. Its as simple as that.
Cost savings
Intrinsic safety is worth any additional expense for certified barriers, particularly in upstream oil and gas applications, because it can improve safety over explosion-proof setups. But while the need for additional hardware such as a safety power supply source leads to perceptions that intrinsic safety is more expensive than explosion-proof schemes, thats actually not the case. The conduit for explosion-proof schemes is a considerable cost. Depending on the length of the conduit, this probably would be a decision point.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
84 / 135
In fact, you dont have to use any special field wiring. The biggest thing is the cost savings and ease of maintenance because you dont have special wire or conduits, so its just an overall easier system to work with. With intrinsic safety, since the energy is limited and not stored, those wires do not have to be protected in the same way. With IS, the wires, even if you cut them, couldnt cause a problem. Although more and more people are realizing the installation costs they can save from intrinsic safety, a lot of people still are not reaping the benefits of those savings. Theyre still using conduits instead of wire trays, and are continuing to use shielded wires unnecessarily. This means they dont take full advantage of all the benefits of intrinsic safety, and its generalpurpose wiring methods. If they did, they would really see the true benefits of it. Take the example of grain refineries, which required explosion-proof instrumentation, bending conduit, pouring seals, and everything else that was necessary. Compared to this, intrinsic safety makes a whole lot of sense. The other end of it is downtime, trying to eliminate downtime. With intrinsic safety, you dont have to shut down the whole process. You can pull out the electronics, slap in the new electronics, and the instruments up and running again.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
85 / 135
The point is that users need to be sure theyre using the devices according to specifications. Even painting a device to company colors can change its properties. A device could be painted with a specific oxy paint with a specific thickness in order to not have electrostatic charges on top of it, but then users will repaint to their own colors. It could lead to a generation of spark, and it could void the protection. Whether or not an IS system makes sense also depends on legacy systems. If users have an existing explosion-proof system, the cost and downtime to pull everything out and put intrinsic safety in will be prohibitive. Usually youll find intrinsic safety in a new application or new installation. Sometimes people will pull out explosion-proof if its come to the end of its lifecycle, but thats rare. The key to getting intrinsic safety more embedded in North America is making sure the younger engineers understand its benefits. When you look at hazardous location areas, intrinsic safety is the one methodology that can go in the worst of the worst, and globally.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
86 / 135
These days, its not that difficult to pick out integrated safety devices because most follow standards and generally the same specifications. There are different but similar IS standards around the world, so you should be aware of what youre looking for. Although you might check that your instruments have the proper ratings for your geographic location, theres a bit more to look for. You need to actually get in and look and verify that it has the ratings for the area that theyre going into, like Class I, Div. 1, or a zone environment. In North America, the categorization of hazardous areas is done in accordance with NEC article 500. Class tells you if its gas or dust; division tells you the probability of the hazard being present; and group tells you the type of hazard. Class I, Div. 1 areas contain dangerous concentrations of flammable gases, vapors or mist continuously or occasionally under normal operating conditions. If you want to run pressure measurement with an analog device at 4-20 mA, you could make it explosion-proof. But it opens up the opportunity for intrinsic safety instead. Europe operates more according to a three-zone model. Zones 0 and 1 line up most directly with Div. 1, but not exactly. Zone 0 is the most dangerous, and any instrument used there must be incapable of having enough energy to ignite a fuel mixture.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
87 / 135
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
88 / 135
1. Evaluate by zone. Removal of one of the three sides of the fire triangle is always a
good idea, but not necessarily cost-effective. Most process plants are not Zone 0 rated, which requires intrinsically safe-rated or inherently safe instruments such as pneumatic or wireless. Even wireless instruments, if they are not rated intrinsically safe, may not be suitable for maintenance in a Zone 0 plant area. For most chemical and oil and gas plants, operational areas are now classified Zone 1 and non-incendive instruments can be used. There is little to no difference in the cost of explosion-proof non-incendive and intrinsically safe instruments, but non-incendive devices do not require intrinsic safety barriers. Someday, perhaps, wireless will solve this dilemma.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
89 / 135
engineered, which could lead to other injuries. As long as the equipment is durable enough to withstand the application, intrinsically safe is recommended over explosion proof.
3. Do it right. Using the right barriers and the proper certified devices at both the field
and the systems end should solve the problem. The standards clarify the requirements and it is absolutely essential that the standards be followed with zero exceptions. It also makes sense to seal conduits to eliminate the migration of hazardous gases. With all systems, proper grounding is very important. No compromise should be tolerated when it comes to safety.
4. Test everything. The most important thing when implementing an intrinsic safety
system is to test it. Make sure that what has been done is correct so you can sleep well at night. Test the design and the system, make it pass all the assessments and put it as a requirement for the project. It will be first page news if something goes wrong, so make sure to supervise the installation very closely, and be sure that the design is not changed at the execution.
5. Limit risk. Don't operate equipment in hazardous areas needing intrinsic safety systems.
As for operator safety, keep control signal voltages below 24Vdc. No human-operated selector or push button should have voltages over 24Vdc. It simplifies servicing and monitoring.
6. Protect controllers. If you are installing intrinsically safe systems, its very important
to protect all automation controllers and module cards. Intrinsic barriers for fieldbus, Modbus and conventional I/O card loops is a best practice.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
90 / 135
8. Less maintenance. An intrinsically safe solution is recommended over explosionproof technology if only a limited number of instrument loops are involved. After implementation, this technology does not require any special maintenance attention compared to the traditional North American approach. There are even DCS I/O modules that are IS-certified and do not require a separate IS barrier. By refurbishing with low power equipment, you can reduce the surveillance rounds and maintenance checks.
9. Voltage drops. Do not neglect the voltage drop due to resistance of field wiring when
designing 4-20 mA loops. During commissioning, it is common to find loops that functioned properly at low currents but stopped operating entirely as the current approached 20 mA. This is because enough voltage dropped across the field wiring to reduce voltage across transmitters to less than the compliant voltages they needed to operate.
10. Hardware intensive. Security people may think all the areas need to be explosion
proof. It really depends on the experience with your equipment or plant. Look at incident statistics and the problems you see to determine where you need intrinsic safety and where not. Implementation of intrinsic safety is often very hardware intensive, so many plants try to avoid it. Many PLCs and hardware out there are Class-1 Division-2 compliant. A separate IS implementation may not be essential.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
91 / 135
12. Preliminary testing. Prior to designing a safety system, its essential to prepare the
safety system using a preliminary testing procedure that places the process equipment out of service. Whether a safety system is operating properly needs to be verified before starting up process equipment. It should also be tested independently, without using engineering station simulation tools. This is especially important for boiler BMS. Signals from safety instrumentation may be used for process control tasks, but signals from process control loops can never be used for safety tasks. Root valves for control and safety transmitter impulse lines need to be separate.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
92 / 135
Vice President ARC Advisory Group and Director of Content/Editor-in-Chief Automation World
Dave Woll
Production safety is generally thought of as a series of steps necessary to ensure safe interaction with industrial equipment. The process of identifying, agreeing upon and delineating those steps is where things tend to get complicated. Thats why international standards groups play such a significant role, as they set the guidelines for all of industry to follow. For the process industries, IEC 61511 is probably the most widely used safety standard, as it applies to those industries that base their safety systems upon instrumentation. The goal of safety-system design in IEC 61511 is for the process, whatever it may be, to go to a safe state whenever a process parameter exceeds preset limits.
David Greenfield
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
93 / 135
IEC 61508 can seem confusing at first, because its underlying philosophy is new for safety standards. Older, more conventional safety standards, stipulated specific rules and specifications for making processes safe. IEC 61508 and its derivative standards, such as IEC 61511, departed from this approach by being more functional, or performance-based. A principal aspect of this new approach to safety standards is that it leverages two fundamental principles: safety lifecycles and probabilistic failure analysis. Unlike previous standards that claimed to cover the entire lifecycle of a project, IEC 61508 and its offshoots actually dofrom project conception to maintenance to decommissioning. In essence, the standards specify safety lifecycle activities that need to be followed over the entire life of a production system. Safety lifecycle management provides a method or procedure that enables companies to specify, design, implement and maintain safety systems to achieve overall safety in a documented and verified manner.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
94 / 135
Perform hazard and risk analysis: Determine hazards and hazardous events, the Allocate safety functions to protection layers: Check the available layers of
protection. Allocate safety functions to protection layers and safety systems.
sequence of events leading to hazardous condition, the associated process risks, the requirements of risk reduction and the safety functions required.
Specify requirements for safety system: If tolerable risk is still out of limit, then
specify the requirements for each safety system and their safety integrity levels.
Design and engineer a safety system: Design system to meet the safety
requirements.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
95 / 135
Design and develop other means of risk reduction: Means of protection other than
programmable safety systems include mechanical systems, process control systems and manual systems.
Install, commission and validate the safety protections: Install and validate that the
safety system meets the all safety requirements to the required safety integrity levels.
Operate and maintain: Ensure that the safety system functions are maintained during
operation and maintenance.
Modify and update: Make corrections, enhancements and adaptations to the safety
system to ensure that the safety requirements are maintained.
decommissioning a safety system. Ensure that the required safety functions remain operational during decommissioning.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
96 / 135
Manage functional safety, safety assessment, and safety audit: Identify the
management activities that are required to ensure that the functional safety objectives are met.
Plan and structure safety lifecycle: Define safety lifecycle in terms of inputs, outputs
and verification activities.
Verify safety system: Demonstrate by review, analysis and/or testing that the required
outputs satisfy the defined requirements for each phase of the safety lifecycle. Activities for Phases I to III are typically carried out consecutively, while Phase IV runs concurrently with the other phases. However, like all models, the safety lifecycle is an approximation.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
97 / 136
SECTION FIVE
Communication Trends
98 / 135
By David Greenfield
The history of wireless networking in industry has largely been that of cable replacement. It was simply a tool to deliver communications in places where you simply couldnt run cable for a variety of reasons. Maybe it was too expensive. Or maybe the cable would be running in a hazardous zone. Through these types of applications, wireless secured a foothold in the process industries over the past two decades. Now we are beginning to see a shift in the types of wireless technologies used, as well as different types of applications. This shift is coming from a user-needs perspective, rather than from pure technological capabilities.
2015
19 18 14 22 64
According to the most recent survey from WINA (Wireless Industrial Networking Alliance), the biggest use of wireless technology today is for asset management and condition monitoring. Through the use of wireless sensors that can be positioned nearly anywhere on a piece of equipment, maintenance personnel can get a steady stream of data from that equipment about the state of its condition. The other use of wireless technology, coming in a close second, is incremental process measurements the classic measurements of level, temperature, pressure, and flow. Its not difficult to think of many different places in, say, a refinery or water treatment facility, where it makes sense to get incremental temperature readings from segments of the process where
2011
0%
Source: WINA
9 6 7
13
10%
20%
30%
40%
50%
60%
70%
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
99 / 135
you have not been able to collect that data before. Of course, this wouldnt make sense if you had to dig a 1,000-yard trench and stop part of the plant for a couple of weeks while you did Wireless Trends that. But if you could easily put a wireless sensor in that part of the plant and do that very cost effectively, thats effective incremental process measurement. Such small Top Industry Applications For Wireless steps can certainly help you improve your efficiency and, when examined from the aspect of a large process, like a refinery, there are huge overall Asset Management / Condition Monitoring 58% efficiency numbers involved in the end result.
Incremental Process Measurements Mobile Operator / HMI Voice, Video, Data Asset Tracking Control 13% 30% 26%
44%
Wireless sensors are, perhaps, the biggest area for substantial capital expenditure savings in the process industries, especially when you think about the potential benefit of establishing pervasive sensor networks. When you literally start to put hundreds and thousands of devices out in the facility or a refinery, that's when you begin to see real cap-ex savings versus hard wiring. And this has already been documented. For example, using temperature sensors positioned directly on the roller can produce a small percentage of improvement in the surface finish of sheet steel by precisely achieving the proper manifold temperature; this small improvement in quality translates into millions of dollars in savings over the course of the process run. The third most prevalent trend for wireless technology is supporting mobile operators. And its easy to see why: Removing the step of having to connect via an Ethernet jack as measurements are taken at each stop is a big improvement in process.
57%
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
100 / 135
Wireless Trends
Following mobile in the fourth and fifth spots are voice/video data communications and asset tracking. These types of wireless applications have been around for years and continue to be deployed due to their successful track record, so its not surprising to see them among the top trends. What is surprising is the application that came in at number six in the 2012 WINA survey control. This is surprising because wireless control had never even ranked in the survey prior to this year. Now, however, 13 percent of survey respondents considered control to be their top application of wireless. In industries like mining, wireless pump control has been around for years, because there is no other way to really do it. But this result indicates that people across industry are beginning to experiment with closed-loop control using wireless.
Pilot Valves
Process Valves
Control Cabinets
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
101 / 135
By David Greenfield
If youre working in a facility without a great dealor anywireless sensors in place, you may be suspicious about the viability of wireless sensor networks. To help illustrate how ubiquitous wireless sensors have become across industry, following are a few examples of wireless sensor deployments that have become so common that they could be considered textbook application examples. ireless limit switch networks are commonly used to prevent the W
overflow of liquid storage tanks. Their operation is simple: As the tank fills
up, the fluid level forces a change in the position of the limit switch. The wireless limit switch then sends a signal to the pump controller to start pumping out the tank to lower the level. When the fluid level drops to a safe level, the switch then sends a signal to the controller to turn off the pump. he safety and security of oil pipelines is largely handled by T
general manager of the wireless business unit at Cooper Industries and chairman of the Wireless Industrial Networking Alliance (WINA). We're doing a lot of work in Mexico now to monitor and maintain oil pipelines, he says. In these applications, there is a hierarchy of networking tools with sensor networks being used with instrumentation on the pipeline itself to capture data and transmit it back to the
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
102 / 135
control system via high-speed backhaul. This combination of technologieswired, wireless and cellularhas really brought wireless to the forefront because youre mixing multiple technologies to monitor pipelines in 20-30 kilometer segments. As you do this with several segments, youre effectively able to monitor hundreds of kilometers of pipelines. major pharmaceutical manufacturer recently decided to A
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
103 / 135
Two similar wireless protocolsWirelessHART, promulgated by the HART Communication Foundation (www.hartcomm.org) and ISA 100.11a, promulgated by the International Society of Automation (www.isa.org)are competing for dominance as the enabler of smart instrumentation in Europe and North America. Complicating the issue for end users is the fact that these two standards dont work together. In addition, a third standard, WIA-PA, exists in China and further complicates the task for those with Asian operations. Most process facilities use a mix of wired networks along with their diverse array of instrumentation, but the inability to integrate the two main wireless standards makes that difficult in the wireless realm. Unlike with wired instrumentation, if you want to mix brands of wireless field devices to get an optimum mix of measurements, you cant. You have to have two separate host systems to talk to two different types of field devices. And they have to come from different vendors. In many ways, WirelessHART and ISA 100.11a are alike. They are designed to serve the same market in the same way. At an application level, they perform the same function and have the same benefits. Both ISA 100.11a and WirelessHART implement IEEE 802.15.4 radio hardware. Both protocols use DDL and Device Description files. Both can eliminate a lot of PLC I/O hardware, wiring and associated schematics.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
104 / 135
The principal difference between the two protocols is in the specification of the protocols application layer. WirelessHART, for example, specifies HART as the application layer while ISA100.11a leaves that layer undefined. This means that data in the application layer of ISA100.11a can be transferred using Foundation Fieldbus, Profibus, Modbus, HART or other protocols. While this makes ISA100.11a highly flexible, the customer must decide which protocol to use. WirelessHARTs decision to specify only HART in the application layer was done to deliver simplicity via use of a single data communication specification through the network, meaning that data communication on the network is well-defined and understood. Considering the potential for integrated use of the two wireless protocols, the obstacles preventing a convergence seem to be more commercial than technical. Though the two protocols are similar, investments have been made, vendors and early adopters are lined up on either side, and product certification processes have been established. The two protocols have been developed into products for sale. Marketing programs designed to win over additional customers and vendor partners are in high gear. Both sides believe their approach is right and others should come over to their way of thinking.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
105 / 135
1. Consider reliability. Reliability is the single most important issue to consider when
installing wireless communications. Most devices on wireless use internal batteries. Even though the instruments themselves are quite evolved in terms of diagnostics, the power consumption and health monitoring of the batteries is still a concern.
2. Work around issues. If wireless doesn't function well in your plant, use fiber optics
to ensure communications. Currently, experts are divided other whether wireless is ready for critical control. Wireless communications can fail sometimes (more often than with a fiber optic connection). The best approach is to implement wireless to get your information in remote places, to operate your devices near the equipment in the plant and to get the information flowing throughout all the teams in the plant. It will give you freedom to work in the plant, but keep in mind what may be at risk if the wireless fails for a couple of seconds. If nothing critical is at risk in those seconds, then consider going wireless as your first option.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
106 / 135
3. Budget for wireless. Most project budgets still wont accommodate a wireless
communication system for instrumentation. It will take some time for end-users to realize the extra maintenance costs they are paying for a failure to implement a wireless system to more easily access information from equipment in remote or hazardous locations. Until then, a lot of manpower resources will continue to be used because of the large initial investment required to install wireless technology.
4. Pros and cons. Wireless has both positive and negative aspects in its implementation.
For example, wireless signals can be compromised by EMF interference, so it may not be useful for auto-tuning circuits. On the other hand, it can be cost effective in minimizing wiring and being able to monitor plant conditions remotely, especially in situations where long cabling distances would be required.
Linking Up in Cordoba The City of Cordoba (1.5 million inhabitants) uses a very wide area Wi-Fi network to link two fresh water processing stations and 12 pumping stations. The technology has proven to be safe, extremely cheap and reliable, and is even used to implement PID loops. The network was configured to allow access to every single facility from any point within the system. This approach allows extremely fast response to emergencies and enables accurate diagnostics without having to move personnel. Tip: Choosing a reliable and solid data link between stations is mandatory. Another consideration should be that only a very careful selection of IPs and subnets make the network dependable and fail-free.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
107 / 135
7. Prepare for obsolescence. This field is relatively new and moving fast.
Replacement parts may not be supported in as little as two years after purchase.
8. Look beyond the control room. Use a wireless sensor network as a second layer
of automation in applications beyond the P&ID for data that goes beyond the control room, such as essential asset monitoring, energy conservation measures and HS&E improvements.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
108 / 135
Wireless technologies have both advantages and disadvantages in industrial applications. Here are some practical tips and pitfalls to avoid when implementing wireless in your facility:
1. Radio proven. Radio has a proven track record. Make sure the PLC has open
communications and a rack for I/O. There also needs to be an alarm in place for a radio failure.
3. Where wireless pays. Having personnel who can move around the plant can often
improve the OEE of the critical equipment and increase plant reliability. However, if the area is unapproachable or hazardous to enter, capturing information through wireless technology makes sense, at least in the vicinity of the process.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
109 / 135
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
110 / 135
Wireless instrumentation is with us and there is no going back. It will continue to evolve and will eventually be good enough to integrate directly into control systems. The fact that there are two commercial standards is a stumbling block, but strides are being taken to integrate both wireless standards into control systems. The most obvious problem is that the wireless network supported by your favorite instrumentation supplier may not be integrated with the DCS that is your company's favorite. But there are applications for wireless that do not need to wait for DCS integration, such as steam trap, safety valve, eye wash and safety shower monitoring. Safety should also not be delayed. Neither of the current wireless solutions can be directly integrated into either a DCS or a Foundation Fieldbus control system, meaning that they cannot currently be used as a process variable or control element inside a control loop. That is expected to change in the next few years. Be ready when it happens.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
111 / 135
When networked equipment in complex systems needs to perform tasks in perfect harmony, Ethernet needs a little help. The transparent clock supported in IEEE 1588 Version 2 augments the boundary clock used in the first version and is better able to deal with a very large network topology. Its asynchronous characteristics make it difficult to ensure orderly delivery of packets in real time, so many users are adding IEEE 1588 and ODVAs CIP Sync to synchronize all operations. In high-performance fields like robotic control, test and measurement, and power plants, these specifications help users run many pieces of equipment at very high speeds. The two specifications share many traits. CIP Sync incorporates the IEEE 1588 services that measure network transmission latencies and corrects for infrastructure delays. The result is the ability to synchronize clocks in distributed devices and switches to within hundreds of
Source: Moxa
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
112 / 135
nanoseconds of accuracy. When all the devices in a control system share a synchronized, common understanding of system time, real-time control can be accomplished by including time as a part of the motion information. This ability to transmit signals with known delivery times is extremely important in a broad range of applications. With IEEE 1588 and CIP Sync, packet delivery times can go into the nanosecond range. It is essential that when a control signal is sent to a control device, such as an intelligent automation device, the system needs to know in real time when the device will actuate. IEEE 1588 gives Ethernet a more synchronous nature, and timing accuracies must be in the submicrosecond range. IEEE 1588 has seen growing usage in recent years. Thats partially because equipment speeds and end-user demands continue to rise. Usage has also soared since the completion of Precision Time Protocol (PTP) Version 2 in 2008. PTPv2 is a method that provides the high degree of accuracy for systems that require strict synchronization in their operations. It comes into play when extreme precision is a paramount requirement. Though many facets of Ethernet communications will remain the same when IEEE 1588 is used, some must be used carefully or ignored. For example, multicasting could create synchronization issues, particularly when signals travel long distances.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
113 / 135
Multicasting is great in information technology, but for controls, not so much, says Jeff Smith from American Axle & Manufacturing (AAM, www.aam.com). You dont want a signal from the grand master clock going to something thats a football field away. Expanding the distances for synchronized systems was one of the focal points during the development of IEEE 1588 Version 2. One of its mainstays is a transparent clock. It augments the boundary clock used in the initial version of the standard. A transparent clock does not have its own clock, but inserts its own delay so that the end slave devices downstream can take that into account in doing their calculations. This is necessary when dealing with a very large network topology. Several Ethernet alternatives provide real-time capabilities, but most require some special hardware or mandate that all real-time equipment use the same software. With standards, there are fewer limitations. The benefit of a standard is that disparate systems can now use the same protocol, opening opportunities for multi-vendor designs and solutions. For applications such as motion control where timing is key, 1588 allows nodes to be kept on the same time down to the submicrosecond range.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
114 / 136
SECTION SIX
Energy & the Environment
115 / 135
Whether your plant is processing food or chemicals, wastewater or steel, the process used to audit your energy usage and find ways to use or waste less of it is much the same. Before beginning your energy audit process, it is important to realize that, though there are many energy saving steps that result in short-term payback, the average payback time for investments to increase energy efficiency is five years. The older the facility and its equipment, the greater the probability that the energy savings potentialand your return on investment from corrective actionswill be significant.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
116 / 135
Look for steam or compressed air leaks. Are there improperly working natural gas regulators? Does the plant have programmable thermostats? How energy-efficient are the lighting fixtures? Do infrared scans detect any hot spots on the electrical equipment? Also consider the energy-efficiency value to be found in straightforward upgrades of existing equipment. For example, have variable frequency drives been installed on motors serving high-energy-consuming equipment, such as cooling towers? Older cooling towers, for example, tend to have motors that run either slow or fast, with none of the gradients that drives can provide to match energy consumption to different operating conditions. Go beyond direct asset-related energy use and ask questions like: Is there lighting thats on when no one is working in a room? Where are the large motor loads, and how and when are they being operated? Are start times being staggered to avoid electrical peak power demand surcharges? Is the plant subjected to extreme seasonal temperature fluctuations between summer and winter?
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
117 / 135
Steel plants, for example, are the largest consumers of electrical energy and also incur the most frequent energy spikes because of their use of arc furnaces. The chemical and refining industries, on the other hand, make greater use of compressed air and steam.
Draft a pre-plan
Once you have the initial findings from the walkthrough, draw up a pre-plan to address the obvious areas of waste and identify the processes that consume the most energy. Most older plants are poorly metered. If the only meter in the facility is the one measuring the main utility feed, then it will be impossible to determine which machines or processes are contributing the most to your utility bill. The pre-plan should identify where meters are to be located to divide and measure energy use among different processes. The information gathered from these sub-meters can then be used to justify capital expenditures and enable you to develop a longer-term plan based on where the best savings are for the least amount of investment. Most importantly, make sure this plan focuses on the processes used to create the products that contribute the most to the companys productivity and profitability. It should also define a program of preventive maintenance to maintain energy-efficient production processes and allow you to continue to innovate in the future.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
118 / 135
Corrective actions
Companies are taking many corrective steps to increase their energy efficiency. Among the most common:
Install variable speed drives to match power output with process requirements. Take advantage of the software controlling motors to regulate equipment startup
times and prevent unscheduled starts.
Install the most energy-efficient light bulbs and other lighting fixtures. Apply automatic lighting controls that turn off lights when rooms are unoccupied. Use programmable thermostats to match temperatures within the plant to
operating requirements.
Eliminate leaks in compressed air and steam systems. Update capacitor banks to maintain correct power factors when new equipment
is installed.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
119 / 135
Changing our attitudes about energy consumption can change our behaviors and lead
to energy savings. There are also more significant capital investments that can be made depending on conditions at your facility. With electricity rates high and natural gas rates currently low, it may make sense to invest in gas-powered turbines. Justifying that kind of investment, however, requires an analysis of the predictability of rates going forward. Further efficiency can be captured with a co-generation system to produce steam as well as electricity, or even tri-generation if your processes require hot water. Another possibility is heat recovery. Investment in piping and heat exchange equipment can allow energy to be passed from one process stream to another, reducing the load on utility sources such as steam and cooling water. How much you can expect to reduce your energy costs will vary from industry to industry and plant to plant. No matter the savings potential at your facility, an energy audit is the first step toward achieving your energy-efficiency goals.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
120 / 135
The path to achieving energy efficiency is shaped as much by attitudes and organizational skills as by the physical aspects of reducing energy demands. But its goals can never be achieved without the automation technologies that make it possible to mine information and control the operation of machines. A 2009 study by the Aberdeen Group, a research and consulting firm, found that industry leaders seeking to reduce energy consumption at their facilities viewed energy management as strategic to their business success. The primary tools they applied in their endeavors included advanced visualization, information collection and consumption monitoring. Among the best practices adopted by industry leaders in reducing energy consumption and costs, according to the study, are:
Making energy usage data available to decision-makers in real time. The faster changes
can be made to equipment operations, the greater the energy savings.
Taking energy costs into account when scheduling production. Peak demand charges
can account for as much as 60 percent of a companys energy bills.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
121 / 135
Tying operational metrics to financial metrics. Its essential to understand how the costs
of energy for production and facilities affect the companys bottom line.
Understand consumption
From a practical perspective, any energy management initiative must start by gaining an understanding of consumption patterns and cost sources from production processes and facilities. Heres a go-to short list to kick off your initiative:
Analyze energy utility contracts and penalties; Conduct an audit of all equipment and their energy sourceswater, air, gas, electricity
and steam (WAGES);
Acquire and analyze energy consumption and cost data; Establish a consumption baseline; and Identify potential savings.
FORWARD PLAYBOOK ADD COMMENT RETURN TO CONTENTS
122 / 135
Prioritize opportunities
By first attacking the low-hanging fruit, such as leaks in compressed air and steam systems, lack of energy-efficient lighting and utility penalties for peak demand and reactive power, youll gain some early wins at minimal cost. A next step can include installing sub-meters to identify which production activities contribute the most to your energy bills. Ultimately, prioritization means that you must first establish goals, and then phase in a planned program of corrective actions. Heres an outline to follow as you establish your priorities and ensuing goals:
Fix the basics; Focus on processes and assets that are high consumers of energy; Decide where and what to meter; and Develop a phased corrective plan.
Consider automated solutions
The bulleted list below highlights the predominant users of energy in an industrial facility for which automated solutions exist. otors. Whether they power production equipment, cooling towers or pumps and M
fans in HVAC systems, motors are the biggest sources of industrial energy usage, as well as waste. Adding variable speed drives will better match energy use to operational requirements.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
123 / 135
starts will help avoid peak demand penalties. Utility incentives for demand response programs can be substantial. Automated controls ensure essential loads keep working while minimizing costs.
lighting controls turn off lights when rooms or production areas are not in use. Match illumination levels to task needs. Install energy-efficient bulbs and lighting fixtures.
VAC systems. Drives, automated air dampers and programmable thermostats H can help limit energy usage correlated to operational needs. ower quality. If your plant is experiencing unexplained power outages and motor P failures, or paying penalties for reactive power, low power factor and harmonics may be the cause. Upgrade capacitor banks or electrical equipment where necessary and install corrective filters to extend equipment life.
nergy management. Using software to track power quality, meter energy use, E and control remote monitoring systems will help you access energy information in an organized fashion that speeds decision-making and lets you know where to take corrective action.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
124 / 135
Measure ROI
Energy management is not a one-time event. To achieve sustained savings requires a proactive program of measurement, monitoring and preventive maintenance to make sure that equipment and systems are working in optimal fashion. Periodically measuring the progress achieved in reducing energy consumption and associated costs savings will build support for continuing improvements. As you go about measuring your progress, keep the following in mind:
Always compare actual consumption to baseline; Measure and report all savings; Update plans and priorities based on what you learn from measurements; Incorporate preventive maintenance as part of the process to reduce downtime and
increase savings potential. The core takeaway of these tips is to realize that having a greater awareness of the cost of energy is the first step in changing attitudes about energy consumption and related behaviors in your facility. Following the best practices described above that have been developed and implemented by other processing companies can favorably impact your companys bottom line.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
125 / 135
Reducing energy costs from production processes requires managing the five most important factors that determine both utility charges and total energy consumption:
1. Energy event management. Detection and analysis of process changes that cause
consumption to exceed forecast.
4. Idle state management. Minimizing energy draw during idle process conditions. 5. Demand/response management. Offering energy capacity back to the grid on
request in exchange for incentives.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
126 / 135
Industries where emissions control is critical include electric utilities, oil and gas, chemical processing, iron and steel, paper, food, mining, metals and cement. But emission control concerns are not limited to these industries. Systems to control and reduce emissions are required for any industrial process that produces sulphur and nitrogen dioxides (popularly referred to as SOx and NOx), the major causes of acid rain, as well as airborne particulates and volatile organic compounds (VOCs). On the horizon are new regulations designed to limit mercury emissions in flue gas. These rules will also apply to industrial facilities, including trash burners and industrial boilers, even if they only generate process steam. More stringent controls on particulates will also require new investments in emissions technologies.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
127 / 135
The list that follows touches upon the primary emission reduction methods used in industry:
Optimized process control is central to reducing NOx emissions from coal-fired power
plants. Oxygen is injected into the boiler to improve combustion and prevent pockets of NOx from being created. A secondary technology, selective non-catalytic reduction, or SNCR, injects urea or ammonia into the boilers, further reducing NOx emissions by up to 20 percent. New low-NOx burners have also been introduced that allow a cooler, more complete burn.
catalytic reduction, or SCR. This capital-intensive technology, which is viable only for large coal-fired plants, involves very large reactors and again injects ammonia into the flow. Automated systems measure NOx levels before and after the reduction process, enabling operators to fine-tune the process.
boilers, injecting air and adjusting dampers to optimize combustion, measure emissions and control heat levels within the boiler to prevent the build-up of slag. By tightening process controls, operators can decrease the amount of raw materials and energy used while reducing waste.
Scrubbers, using either dry or wet processes, use automated systems that regulate
water flows, monitor pH levels and spray lime or apply a slurry of limestone to remove 95 percent or more of sulphur dioxide. A by-product of the scrubber process is calcium sulphate, which is then used to make wallboard.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
128 / 135
At the stack, the air from the process is passed over a rack of sensors that measure
oxygen, carbon dioxide and carbon monoxide levels, as well as sulphur dioxide, sulphur trioxide and nitrogen oxide content.
Most air pollution control devices (APCDs) come as pre-built OEM packages that
include PLC-based automation systems that tend to operate independently of the central DCS system. As new regulations drive greater investment in these APCDs, these systems will need to work together in a more holistic fashion. Achieving this goal will likely require additional automation integration.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
129 / 135
awgo.to/ecs4
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
130 / 135
KEY COMPANY CONTACT ECS Solutions, Inc. PHONE: (812) 479-5170 | Toll Free: (800) 471-ECSE LOCATION: Evansville, IN EMAIL: Info@ecssolutions.com
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
131 / 135
Festo
WEB RESOURCES
FESTO CORPORATE OVERVIEW
awgo.to/152
awgo.to/153
awgo.to/154
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
132 / 135
Festo
installed base of pneumatic valves with integrated I/O. The ability to ncorporate standard diagnostic features into solenoid valves and I/O systems helps accurately diagnose problems which reduce downtime and field service calls.
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
133 / 135
Winsted
Winsted
Winsted is a worldwide leader in control room console solutions. We create attractive, ergonomic consoles that work with your operators to improve comfort and optimize efficiency. We offer stock, customized and custom consoles suitable for any control room application. Whether you are building a stateof-the-art control room from the ground up, or simply need to upgrade your operations, Winsted can provide the ideal solution. Our experts combine the disciplines of industrial design, ergonomics and interior design to create solutions that are both efficient and eye-catching. We give special consideration to the ergonomic requirements of your operators to build consoles that reduce fatigue, improve productivity and
COMPANY: Winsted
inspire. Our commitment to customer service is second-to-none and your satisfaction is guaranteed. Since its inception in 1963, Winsted has consistently been a pioneer in product design and development. Product concepts and designs are driven by industry needs and demands, with many product ideas WEB RESOURCES suggested by customers and developed with their input. Our modular system WHITE PAPER: approach, developed for the early Human Factors: Planning & Designing a Control Room broadcast industry, has become the http://winsted.com/img/ industry standard for all markets, and resources_literature/human_ factors.pdf our experience developing specialized custom products enables us to offer ONLINE CATALOG: console and furniture solutions for any http://catalog2012.winsted.com/ t1.asp application. A dominant factor in U.S. markets YOUTUBE CHANNEL: for many years, Winsted expanded into http://www.youtube.com/user/ winstedcorp overseas markets in 1975, primarily
PRODUCTS:
http://winsted.com/products.htm
WEB: winsted.com
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
134 / 135
Winsted
2010 and solidifies our mission of providing the highest quality console and furniture solutions to mission critical facilities around the world. In 2011, Winsted further expanded its custom capabilities with the launch of a new division. Winsted Custom Wood will focus on manufacturing custom cabinetry and millwork for control room installations. The Custom Wood Division enables Winsted to further expand our custom control room capabilities and fully realize our value proposition of offering stock, customized and custom console solutions to our customers. With the expansion, Winsted has added many skilled craftsmen who bring years of custom woodworking experience, as well as a state-ofthe-art production facility. Our family of companies, broad range of capabilities and an ongoing commitment to Customers, Products and Service is why Winsted is Preferred by Professionals Worldwide.
WEB: winsted.com
FORWARD PLAYBOOK
ADD COMMENT
RETURN TO CONTENTS
135 / 135
Thank you for downloading Automation World's Continuous Process Playbook! Now that you've had a chance to review it, we'd love your feedback. Share your thoughts!