Professional Documents
Culture Documents
White Paper: Toxic Gas Monitoring System Design
White Paper: Toxic Gas Monitoring System Design
White Paper: Toxic Gas Monitoring System Design
Jim Blais
Senior Safety Engineer
Thank you!
Jim Blais
Introduction
Please note that the following represents only a small tidbit of a few of the important things to
consider when designing a TGMS. We have a lot to share, (I’m one of those passionate “detail”
persons) but it is obviously impossible to ‘condense’ 20 years of knowledge into a small paper.
When considering the many, different requirements associated with designing a safe and prop-
erly configured Toxic Gas Monitoring System (TGMS) – one quickly discovers – there is a lot
to learn and confirm.
Fortunately; Hallam-ICS provides its employees with continuous opportunities to learn and to
stay current with the ever changing and improving technologies, codes and best practices.
Yet, the primary responsibility begins and ends with each individual. It’s the “confirming bit”…
the paying attention to the many, many “details” required, that provide a TGMS with the life
safety integrity required that really makes the difference. The overriding driver always being –
that a TGMS is a life safety system, and a complicated and very demanding life safety system.
A TGMS designer should also be motivated by the simple fact – that many of its “gas targets”
actually have no warning properties… yet they can quickly cause great harm and death. A
good example of this being – areas of oxygen deficiency.
The following is a brief summary of some key lessons learned along the way, followed with a
few more details, along with real experiences (true stories) shared – perhaps highlighting the
challenges and the need to pay attention to the… details.
I suggest using the framework and the methodical “step by step” approach developed and
outlined by the harmonized and accepted ANSI/ISA – IEC globally accepted standard to help
determine:
a. “Identity” of all possible gas related hazards;
b. “Severity” of each gas related hazard and the;
c. “Possibility” of an occurrence for each gas related hazard.
This standard includes a helpful flowchart developed to determine the overall “Safety Instru-
mented Design Lifecycle” from the ANSI/ISA standard.
d. Perform the assessment – with customer participation. The best (and only) way to pro-
ceed is to first gather and review “all” (toxic, pyrophoric, flammable, reactive and inert)
gas and vapor hazards “planned” (or used) for the facility.
e. Develop a Safety Requirement Specification (SRS) or functional “cause & effect” matrix.
This is the heart of the TGMS safety integrity. Its purpose is to absolutely identify and
then eliminate any potential gas related hazard. The purpose of the approved SRS (ap-
proved by the Owner, key stakeholders and the AHJ) is to provide people, equipment
and the facility with safety and freedom from unacceptable risks.
f. Development of an SRS requires participation of cross-functional disciplines (EH&S, Fa-
cilities and FAB Engineers and Management). The approved SRS becomes the basis of
design for the TGMS. Depending upon the acceptable risk, the required reliability of the
TGMS can be further ensured by understanding and providing effective measures of:
i. failure avoidance,
ii. failure detection, and
iii. failure tolerance
g. Therefore the SRS should identify…
• Each potential hazard and its consequences
• Definition of the process safe state
• Description of all safety functions
• Description of each alarm level trip point and associated measurement values
• Maximum response time requirements
• Manual safety activation of the safety functions
• afety function responses to diagnostic faults (shutdown/interlocks, alarm only, or
S
other)
• Local alarm / trouble – notifications (visual and audible)
• Local alarm / trouble – HMI visualization (access and content)
• emote “Emergency Responder” alarm / trouble – notifications (paging, texting,
R
email)
• emote “Emergency Control Station” alarm / trouble – HMI visualization (access
R
and content)
• Include maintenance override capability requirements
• Provide system alarming bypass capability requirements
• Requirements for reset or alarm recovery
• Ceiling
• Lethal Concentration 50 (LC50)
• Lower Explosion Limit (LEL) or Lower Flammability Limit (LFL)
• Gas sample detection method (diffusion or extractive):
• iffusion sensor mounting options – (filters, remote sensor, exhaust duct adapter
D
requirements)
• xtractive tubing mounting options – (filters, tubing types, maximum tubing lengths
E
by gas family, exhaust duct adapter requirements, gas sample transport time)
• Sensor / Detection type:
i. Chemcassette (paper tape)
ii. Electrochemical
iii. Catalytic bead
iv. IR
v. FTIR
vi. Others…
• Calibration and calibration frequency
• Cross sensitivities (multiple gas responses within gas families)
• Known Interferences (negative sensor response, sensor poisoning)
• Full measuring range
• Lower Detection Limit
• Lowest Alarm Level
• Sensor drift and span over a time period
• Sensor response time to T90
• Sensor / Transmitter / Instrument – Diagnostic features and capabilities
• Cost and frequency of consumable replacements (sensors, paper tape, etc.)
• Power / Utility – UPS Requirements
• Integration choices (Ethernet/IP, Analog, relays, etc.)
b. The safe state of a gas detection subsystem that becomes “unavailable” and cannot
provide gas leak protective measures must respond with safety actions equivalent to a
gas alarm (e.g., gas shutdown and trouble notifications).
c. Hallam-ICS recommends selection of a logic controller capable of being configured to a
Safety Integrity Level “2”. The SIL 2 controller is configured to utilize its many diagnostic
capabilities to ensure safety function availability – and alerts if any aspect becomes un-
available.
Here are some additional “details” that I’d like to share about designing a TGMS:
And then there is this from OSHA (Establishing Gas Alarm Levels):
https://www.osha.gov/dsg/annotated-pels/index.html
OSHA recognizes that many of its permissible exposure limits (PELs) are outdated and inade-
quate for ensuring protection of worker health. Most of OSHA’s PELs were issued shortly after
adoption of the Occupational Safety and Health (OSH) Act in 1970, and have not been updated
since that time. Section 6(a) of the OSH Act granted the Agency the authority to adopt existing
Federal standards or national consensus standards as enforceable OSHA standards. Most of
the PELs contained in the Z-Tables of 29 CFR 1910.1000 were adopted from the Walsh-Healy
Public Contracts Act as existing Federal standards for general industry. These in turn had
been adopted from the 1968 Threshold Limit Values (TLVs®) of the American Conference of
Governmental Industrial Hygienists (ACGIH®). Some consensus standards from the American
Standards Association were also adopted at that time, following the 6(a) procedures. Compara-
ble PELs were adopted for shipyards (29 CFR 1915.1000) and construction (29 CFR 1926.55).
Since 1970, OSHA promulgated complete 6(b) standards including new PELs for 16 agents,
and standards without PELs for 13 carcinogens.
Industrial experience, new developments in technology and scientific data clearly indicate that
in many instances these adopted limits are not sufficiently protective of worker health. This
has been demonstrated by the reduction in allowable exposure limits recommended by many
technical, professional, industrial, and government organizations, both inside and outside the
United States. Many large industrial organizations have felt obligated to supplement the exist-
ing OSHA PELs with their own internal corporate guidelines. OSHA’s Hazard Communication
standard (1910. 1200 Appendix D) requires that safety data sheets list not only the relevant
OSHA PEL but also the ACGIH® TLV® and any other exposure limit used or recommended by
20 Years of Lessons Learned and Shared 7
What’s Important To You
Becomes Everything To Us
the chemical manufacturer, importer, or employer preparing the safety data sheet.
To provide employers, workers, and other interested parties with a list of alternate occupational
exposure limits that may serve to better protect workers, OSHA has annotated the existing
Z-Tables with other selected occupational exposure limits.
OSHA has chosen to present a side-by-side table with the Cal/OSHA PELs, the NIOSH Rec-
ommended Exposure Limits (RELs) and the ACGIH® TLVs®s. The tables list air concentration
limits, but do not include notations for skin absorption or sensitization.
OSHA’s mandatory PELs in the Z-Tables remain in effect. However, OSHA recommends that
employers consider using the alternative occupational exposure limits because the Agency
believes that exposures above some of these alternative occupational exposure limits may
be hazardous to workers, even when the exposure levels are in compliance with the relevant
PELs.
Even though – The OSHA Z1, Z2 and Z3 Tables and their PELs remain in effect…
• Looking at only one of the highly toxics listed in the Z1 table; “arsine” (AsH3), it provides a
good example of why one might consider using the ACGIH TLV (“Threshold Limit Value” -
time-weighted average) as an alarm level for arsine instead of the OSHA PEL…
Add to this fact that – I recall attending a SESHA conference, and a presentation many years
ago – that announced that laboratory testing had shown that only 0.01 ppm (10 ppb) of arsine
was shown to kill red blood cells. This caused a lot of concern, given the very common use of
arsine in MOCVD reactors and other tools in the SEMI world (research and fabrication).
• This news was followed by the ACGIH initially lowering their AsH3 TWA-TLV to 3 ppb.
However, due to the technology challenges associated with trying to reliably detect this gas
target at such a very low level, they finally settled on the value of 5 ppb as being the new
TWA-TLV. Technology quickly adjusted – and today – sampling and alarming at 5 ppb can be
performed and has become more of the preferred standard by EH&S professionals.
Then to add to the concern related to those inclined to stay with the OSHA PEL of 0.05 ppm…
The ACGIH has verbiage in their 2017 handbook that also states:
“TLVs will not adequately protect all workers. Some individuals may experience discomfort or
even more serious adverse health effects when exposed to a chemical substance at the TLV
or even at concentrations below the TLV. There are numerous possible reasons for increased
susceptibility to a chemical substance, including age, gender, ethnicity, genetic factors (predis-
position), lifestyle choices (e.g., diet, smoking, abuse of alcohol, and other drugs), medications,
and pre-existing medical conditions (e.g., aggravation of asthma or cardiovascular disease)…”
Considering the recommended ACGIH TWA-TLV is 10 times lower than the OSHA PEL – and
then also factoring in both the OSHA and the ACGIH cautionary verbiage; reminding us that
the OSHA levels are outdated and the ACGIH reminding us that all people may not have the
same levels of health… we recommend setting the TLV alarm for arsine at 5 ppb.
True Story
The following is an actual occurrence, (experience) shared here – which is an example of how
some “best practices” may evolve from the Lab or FAB.
Not to pick on arsine, but the following occurred within an operational semiconductor fabrica-
tion facility, configured with cleanroom bays and adjoining service bays – which were filled with
process tool support equipment. As is typical, the service chase included diverse tool support
equipment, including vacuum pumps. In this case, the tool vacuum pump, did not have a con-
tainment housing or a monitored enclosure exhaust. In the event of a vacuum pump “seal fail-
ure,” hazardous gas escapes directly into the service chase ambient air. The hazardous gas
in this vacuum pump seal “incident” was arsine (AsH3), with a current TWA-TLV of only 5 ppb.
This was quite a while ago – so one assumes the alarms were set at 50 ppb, the OSHA PEL.
The relative vapor density of AsH3 is 2.7 (air = 1), with poor odor warning properties (but garlic
like), it immediately begins to collect near the floor (due to the service chase ventilation airflow
and equipment location arrangements).
The service chase was equipped with ambient hydride gas monitoring, targeting arsine and
other hydride gas family gases, but with the gas sensor extractive tubing inlet heights located
above at 7 to 8 feet above finished floor (so as not to interfere with periodic equipment mainte-
nance activities). Upon this actual leak, no detection or alarms were activated. How long this
occurred is unknown. It was only discovered when a maintenance tool technician entered the
service chase and walked through the vacuum pump leak area. This leg movement caused
the “pooled” arsine gas near the floor to rise up around his pathway and up to an extractive gas
sample tube – enabling detection, interlocks and alarming to finally occur.
Key points contributing to a lack of successful gas detection above include:
1. No containment of the tool vacuum pump via an exhausted enclosure and cabinet ex-
haust gas monitoring.
2. Service chase ventilation did not permit the capture of the heavier than air (ambient)
leaking arsine gas into a chase exhaust ventilation airflow stream for detection and re-
moval.
3. Gas monitoring sample locations focused only on “lighter than air” hydride gas targets.
True Story
A word (or two) of caution regarding “gas mixtures”…
I’ve found two extremes in the field of customer assumptions and of customer caution regard-
ing gas mixtures. It is indeed required that one evaluate if binary gas mixtures (where the
hazardous component is diluted with a non-hazardous component) remains either toxic or
flammable. Always best to check.
Toxic Mixtures –
“Lethal concentration fifty” (LC50): Is the concentration of a substance in air; exposure to
which, for a specified length of time, is expected to cause the death of 50% of the entire defined
experimental animal population.
Toxic and highly toxic gases include those gases that have a LC50 of 2,000 parts per million
(ppm) or less when rats are exposed for a period of 1 hour or less.
For binary mixtures where the hazardous component is diluted with a nontoxic gas such as an
inert gas, the LC50 of the mixture is estimated by use of the methodology contained in CGA
P-20. Using CGA P-20 “Standard for Classification of Toxic Gas Mixtures” for determining gas
mixture toxicity:
CGA P-20 includes a table listing of many LC50 concentrations for many common toxics.
Flammable Mixtures –
To evaluate the flammability of gas mixtures, CGA P23 “Standard for Categorizing Gas Mix-
tures Containing Flammable and Nonflammable Components” provides a table of the common
flammable component concentrations (%) in various nonflammable inert mixture types, along
with supporting methods, calculations and examples.
I have found that some customers do make assumptions regarding toxicity of flammability of
mixtures. Most commonly, the assumptions are that “forming gas,” a mixture of hydrogen with
an inert gas, is always nonflammable.
Guess what? – maybe it is flammable… maybe the definition of “forming gas” is confusing.
Interestingly, the flammability of Hydrogen changes depending upon the inert gas type. For
example:
• A mixture of 5.7% Hydrogen in Nitrogen is nonflammable.
• However, a mixture of only up to 2.9% Hydrogen in Argon/krypton/neon/xenon is nonflam-
mable.
• For Helium the nonflammable mixture in Hydrogen is 3.9% - yet for Carbon dioxide it is
8.3%.
The other extreme is regarding toxic mixtures – where EH&S managers err on the side of
safety, which is impossible for me to argue with.
Considering a scenario – where one doesn’t check the P20 calculations and assumes the toxic
mixture is nontoxic – (yet it is) – and they only target the flammable component (if applicable)
and set the alarm to a % of the LEL (thousands of ppm) – when the toxic TWA-TLV is mea-
sured in ppb units.
• Access to the latest editions (or locally specified) published by the National Fire Protection
Association (NFPA):
• NFPA 1 – Fire Code, NFPA 2 – Hydrogen Technologies Code, NFPA 30 – Flammable
and Combustible Liquids Code, NFPA 45 – Standard on Fire Protection for Labora-
tories Using Chemicals, NFPA 55 – Compressed Gases and Cryogenic Fluids Code,
NFPA 70 – National Electric Code, NFPA 72 – National Fire Alarm and Signaling Code,
NFPA 318 – Standard for the Protection of Semiconductor Fabrication Facilities, NFPA
496 – Standard for Purged and pressurized Enclosures for Electrical Equipment, NFPA
497 - Recommended Practice for the Classification of Flammable Liquids, Gases, or
Vapors and of Hazardous (Classified) Locations for Electrical Installations in Chemical
Process Areas
NIOSH
http://www.cdc.gov/niosh/npg/
The NIOSH Pocket Guide to Chemical Hazards is another source of general industrial
hygiene information on several hundred chemicals/classes for workers, employers, and
occupational health professionals.
The NIOSH Pocket Guide does not contain an analysis of all pertinent data, rather it
presents key information and data in abbreviated or tabular form for chemicals or sub-
stance groupings (e.g. cyanides, fluorides, manganese compounds) that are found in the
work environment. The information found in the NIOSH Pocket Guide should help users
recognize and control occupational chemical hazards.
“SESHA” the Environmental Safety & Health Association for High Technology
http://www.semiconductorsafety.org/
• SESHA is the premier Environmental, Safety & Health association serving the high tech-
nology and associated industries. We provide value to our members through education
and professional development.
SEMIViews
http://www.semi.org/en/Standards/SEMIViews
“SEMI” is the global industry association serving the manufacturing supply chain for the
micro- and nano-electronics industries.
“SEMIViews” is an annual subscription-based product for online access to SEMI Stan-
dards. This resource provides password-protected access to over 900 Standards. Stan-
dards are arranged in “volumes” including those best practices focused on: Facilities,
Gases, Process Chemicals and Safety Guidelines. New and revised Standards are au-
tomatically made available through the system ensuring access to the latest documents.
SEMI Guideline topic examples include:
SEMI F6 Guide for Secondary Containment of Hazardous Gas Piping Systems
• Containment application, piping annulus monitoring (pressure decay or
vacuum), etc.
SEMI S2 Environmental, Health and Safety Guideline for Semiconductor Manufactur-
ing Equipment
• Safety philosophy, Safety interlocks, Emergency shutdown, etc.
SEMI S6 EHS Guideline for Exhaust Ventilation of Semiconductor Manufacturing
Equipment
• Safety performance criteria for exhaust ventilation, validation methods, etc.
FM Global
https://www.fmglobal.com/research-and-resources/fm-global-data-sheets
FM Global provides free access to their “Property Loss Prevention Data Sheets”.
These data sheets provide another resource focused on helping to reduce the risk of
property loss due to fire, weather conditions, and failure of electrical or mechanical equip-
ment. They incorporate nearly 200 years of property loss experience, research and en-
gineering results, as well as input from consensus standards committees, equipment
manufacturers and others. Examples include:
7-7 Semiconductor Fabrication Facilities
7-45 Instrumentation and Control in Safety Applications
7-91 Hydrogen
UL SCCL Subscriber
https://www.ulstandards.com/unsecured/about.aspx
• Provides access to the UL Standards Certification Customer Library, providing peri-
odic revision updates to UL Standard requirements, to specific UL Standards, such
as:
UL 508A – The “Standard for Safety – Industrial Control Panels” and similar “NRTL
listings” are required by many (most if not all) “authorities having jurisdiction”.
UL 698A “Standard for Safety - Industrial Control Panels Relating to Hazardous
(Classified) Locations”
• NOTE – All “Industrial Control Panels” fabricated by Hallam-ICS are UL Listed.
.
True Story
The following is an actual occurrence, (experience) shared here from an EH&S manager at
a prominent laboratory. He related that he and another colleague entered a building, which
included a closed off service room. The service room had sources of nitrogen (N2) inside but
without O2 monitoring.
So – they have a buddy system established with in this case; his colleague is entering the room
first. His colleague took about two steps into the room and then collapsed. Based upon his
training, the EH&S manager stopped, grabbed his colleague by the ankles and pulled him out
of the room – saving his life.
Had he entered the room with him quickly, they both could have died. They later determined the
cause of the leak and calculated that the room had very little oxygen – in the % single digits of
O2. NIOSH and the ACGIH define oxygen depletion as being <19.5% O2.
• Great reading on this topic is found within ACGIH 2017, TLV Handbook, Appendix F: Min-
imal Oxygen Content... on why you should always consider monitoring for oxygen and
alarming in rooms containing inert gas sources.
So - Please also include a complete review of inert gases planned for the facility.
Inert gas sources typically have “zero” warning properties – creating an unknown and immediate life
threatening hazard to anyone entering a room or an area equipped without proper oxygen depletion
monitoring and alarms (visual and audible).
So – we need to begin with recognizing that not only can highly toxic, toxic, corrosive, pyrophoric, flam-
mable and reactive gases and vapors are dangerous – but even inert sources can be extremely harmful
– with their primary target being limited to… human life.
• Note: We should also recognize – that too much of a good thing… “oxygen” can also increase
the potential for hazards. An accidental oxygen release will create an oxygen enriched area. This
immediately increases the risk of ignition and fire. Materials including fireproofing materials that do
not burn in normal air, will burn in enriched areas. Sparks that are normally harmless can cause fire
and flames are propagated much faster. Therefore – in locations where warranted, it is a proper to
monitor both “O2 depletion and O2 enrichment”. Many facilities shutdown all dedicated O2 sources
with an active area Fire Alarm.
Jim Blais
Senior Safety Engineer
Hallam-ICS
jblais@Hallam-ICS.com
802-658-4891