Professional Documents
Culture Documents
IntJHydrogenEnergy v41 P13308to13314
IntJHydrogenEnergy v41 P13308to13314
IntJHydrogenEnergy v41 P13308to13314
ScienceDirect
Article history: A risk assessment for an electrolytic hydrogen generation system was carried out. The
Received 30 January 2016 potential accident scenarios for the system were evaluated with a hazard and operability
Received in revised form study (HAZOP) and failure mode effect analysis (FMEA). Brainstorming sessions were
23 May 2016 conducted to evaluate the possibility of each potential accident scenario. In the severity
Accepted 26 May 2016 analysis for each potential accident scenario, the jet flame length was estimated based on
Available online 30 June 2016 an empirical formula using reference data. The blast pressure was mainly estimated by
using the results of the reference. The risks of all potential hazards with and without the
Keywords: implementation of various safety measures were analyzed using risk matrices. It is clear
Electrolytic hydrogen generation that with the safety measures in place, the risk levels of all system hazards are acceptable.
system © 2016 Hydrogen Energy Publications LLC. Published by Elsevier Ltd. All rights reserved.
Risk assessment
Hazard and operability study
Failure mode effect analysis
* Corresponding author. Tel.: þ81 45 339 3979; fax: þ81 45 339 4011.
E-mail address: n-kasai@ynu.ac.jp (N. Kasai).
1
Tel.: þ81 3 5425 2255; fax: þ81 3 5425 2256.
2
Tel.: þ81 28 677 3311.
http://dx.doi.org/10.1016/j.ijhydene.2016.05.231
0360-3199/© 2016 Hydrogen Energy Publications LLC. Published by Elsevier Ltd. All rights reserved.
i n t e r n a t i o n a l j o u r n a l o f h y d r o g e n e n e r g y 4 1 ( 2 0 1 6 ) 1 3 3 0 8 e1 3 3 1 4 13309
Pure
water
III
a I
3
Hydrogen gas- Condenser Adsorption Accumulator
Oxygen gas- Electrolytic liquid separator column
liquid separator hydrogen
b device
A
1
2 II
Air Exhaust Pressure
c d Exhaust
oxygen gas reducing
with air valve Water seal – water
Pressure type safety ii
i device Exhaust
reducing
valve hydrogen
gas
Fig. 1 e Configuration of the high pressure hydrogen gas generation system with electrolyzer. In Fig. 1, solid lines and
Roman numerals are used for the H2 piping, and thick dotted lines and small letters are used for the water piping. Thin
dotted lines and Arabic numerals are used for the piping carrying O2 or air. Bold lines and capital letters indicate piping in
which the pressure is 82 MPa.
study was considered. To contribute to develop a regulation of impurities. The biggest advantage of this system is that, in
electrolytic hydrogen generation systems, authors carefully contrast to conventional systems, the H2 pressure can be
built the system for the analysis based on the prototype sys- increased to 82 MPa without the use of a compressor, while
tem so that it can represent various electrolytic hydrogen the O2 is maintained at atmospheric pressure.
generation systems. The H2 inventory of the system for the Table 1 shows the specifications of the various types of
analysis was intentionally made larger than that which would piping employed in the system. As shown in Fig. 1 and Table 1,
be used in the prototype system. A hazard and operability the O2 gaseliquid separator supplies pure water to an elec-
study (HAZOP) and failure mode effect analysis (FMEA) were trolytic H2 generation device and exhausts the O2 returned
carried out on an electrolytic hydrogen generation system from the device. A H2 gaseliquid separator, a condenser, and
arranged for the study. Potential accident scenarios were then an absorption column enhance the purity of hydrogen by
analyzed. The risk level of each scenario with and without the removing moisture from the H2 gas. Then, H2 gas flows to the
implementation of various safety measures was evaluated. accumulator at a pressure of 82 MPa. A water seal-type safety
device is used to safely exhaust H2 gas. The total H2 inventory
in piping I and II is 40 Nm3 and that of piping III, including the
Method and material devices, is 700 Nm3. Under normal conditions, piping i and ii
do not contain H2. When an accident occurs, the 82 MPa H2 gas
Electrolytic hydrogen generation system is vented through the piping in the direction II / i / ii.
Similarly, water with 82 MPa is vented through the piping in
The configuration of the electrolytic H2 generation system the direction A / c / d. Each piping line that handles high-
considered in this study is shown in Fig. 1. Each piping line pressure fluids is equipped with safety measures such as a
generally has a pressure indicator and a filter to remove safety valve and a pressure indicator. The entire system
Table 1 e Specifications of piping used in the system. Roman numerals, small letters, Arabic numerals and capital letters
indicate the piping of Fig. 1, respectively.
Piping Contents of Pressure Hydrogen inventory Configuration
system piping [MPa] [Nm3]
1 Air 0.1 e Check valve included
2 Oxygen gas e Vent line
3 Oxygen gas e Safety valve and shut-off valve included
a Water e Check valve included
b Water e Check valve and shut-off valve included
c Water 0.9 e Safety valve included
d Water 0.1 e Shut-off valve included
i Hydrogen gas 0.5 Small amount Shut-off valve included
ii Hydrogen gas 0.1 Small amount Vent line
I Hydrogen gas 82 40 Check valve and safety valve included
II Hydrogen gas Vent line
III Hydrogen gas 700 Back pressure valve, check valve, and safety valve included
A Water Back pressure valve included
13310 i n t e r n a t i o n a l j o u r n a l o f h y d r o g e n e n e r g y 4 1 ( 2 0 1 6 ) 1 3 3 0 8 e1 3 3 1 4
Severity
Severity
III III
Estimation of blast pressure II 21 3
II 2 4 18
and flame length
I 3 2 23 I 19 6 3
Rank of severity and possibility (a) Without safety measures (b) With safety measures
Table 3 e Criteria for severity ranking. Roman numerals mean the severity of an accident.
Severity rank Blast pressure (kPa) Jet flame length (m)
V Severe Severe damage to building and >34 >6
facilities outside the site
Fatalities outside the site >100 >6
IV Significant Significant damage to building and 6.9e34 e
facilities outside the site
Fatalities inside the site >100 2e6
III Moderate Moderate damage to building and facilities outside the site 3.4e6.9 e
Injuries outside/inside the site 16e100 1e2
II Minor Minor damage to building and facilities outside the site 1e3.4 e
Minor injuries outside/inside the site 2e16 0.3e1
I Negligible Negligible damage to building and facilities outside the site <1 <6
Negligible injuries outside/inside the site <2 <0.3
including the device and line before the accumulator was Risk analysis
analyzed in this study.
HAZOP is a brainstorming method to identify hazards of the
Risk assessment system with guide words. The deviation of the parameters,
such as pressure increase in the operation are analyzed by
We employed the same risk assessment method as that used using the guide words, and then the accident scenarios are
in Refs. [1e3], including the definition of risk level and the analyzed. FMEA is also a brainstorming method to identify
i n t e r n a t i o n a l j o u r n a l o f h y d r o g e n e n e r g y 4 1 ( 2 0 1 6 ) 1 3 3 0 8 e1 3 3 1 4 13311
Fig. 4 e HAZOP results sheet. Upper case and lower case Roman numerals mean the severity and the possibility of an
accident. H and M mean the high and the medium risk levels.
hazards with the failure modes of elements of the system. The For both methods, the possibility of an accident was eval-
consequences and the possibilities of accidents are qualita- uated based on the material and the function of the accident
tively evaluated with both methods. region. When the severities of the accidents were evaluated,
In the study, HAZOP was used primarily to analyze hazards the diameters of the defects considered were 10 mm, 1 mm,
originating from the internal characteristics of the system, and 0.2 mm based on the analyzed potential accident sce-
such as pressure and temperature, while, FMEA was used pri- narios. Moreover, by considering the pressure and H2 in-
marily to analyze hazards based on the failure modes of each ventory in the accident region, the blast pressure and jet flame
element of the system. Therefore, all of the system hazards length produced by the accident were estimated to evaluate
were identified with the combination of HAZOP and FMEA. the severity of the accidents. The risk of each hazard was
HAZOP was carried out with temperature, pressure, evaluated based on the possibility and the severity of the
voltage, and the chemical composition of the gas as the de- accident.
viation parameters, and the guide words were more and less.
Based on the deviation, the causes of the deviation and trigger Estimation of jet flame length and blast pressure
phenomena of the accident, the potential accident scenarios, Because high-pressure H2 is used the system, when the gas is
and the safety measures were then analyzed. ignited, the H2 jet flame should be taken into account. The jet
The failure modes examined by FMEA are shown in Table 2. flame length was analyzed with the following empirical for-
The potential accident scenarios and safety measures were mula [30], which applies when the jet pressure is greater than
then analyzed with the failure modes. 0.3 MPa:
13312 i n t e r n a t i o n a l j o u r n a l o f h y d r o g e n e n e r g y 4 1 ( 2 0 1 6 ) 1 3 3 0 8 e1 3 3 1 4
Leakage mode Small leakage at the joint of the piping due to internal high pressure
Fig. 5 e FMEA results sheet. Upper case and lower case Roman numerals mean the severity and the possibility of an
accident. H and M mean the high and the medium risk levels.
respectively. The trigger phenomenon was a fire in the measures. With the exception of these two cases, it is clear
hydrogen station and the potential accident scenario was the that the risk associated with all of the investigated hazards
heating of the device including piping due to the fire. As a decreased with the implementation of safety measures, and
result, the pressure of the device increased and the strength of the risks of the system are acceptable because the risk levels
the material of the device decreased, leading to a large are Category M or L.
hydrogen leak following destruction of the device. The
hydrogen gas then ignited resulting in an explosion and/or
fire. In the section where the accident occurs, the pressure of Conclusions
the system was 82 MPa and the inventory of the system was
700 Nm3. In this scenario, the diameter of the hole in the H2 In this study, risk assessment for an electrolytic hydrogen
gas piping was 10 mm. The blast pressure was determined generation system was carried out with HAZOP and FMEA. We
according to the maximum damage based on a similar hazard analyzed 133 potential accident scenarios. The effectiveness
condition previously evaluated [1]. The jet flame length of safety measures was evaluated by performing the analysis
caused by the leaking H2 gas was estimated to be 36 m using with and without safety measures. The risks for all hazards
Eq. (1). From Table 3, the severity of accident was classified as with and without the safety measures were then evaluated
Category V. The possibility of accident was Category ii. The using risk matrices. The results show that the potential risks
level of risk without the implementation of safety measures associated with the system are acceptable if the suggested
was Category H. After evaluating the effect of safety measures safety measures are employed.
by analyzing the process of the scenario and safety measures,
the possibility and severity of accident are Category i and IV,
respectively, and the risk level was Category M.
Acknowledgments
We analyzed 117 potential accident scenarios with FMEA,
one of which is shown in Fig. 5. The trigger phenomenon was a
The research was carried out under consignment by the New
malfunction of the check valve in the piping I line (see Fig. 1).
Energy and Industrial Technology Development Organization.
The potential accident scenario of Fig. 5 was as follows: The
The authors would like to thank Mr. Ogawa for useful dis-
check valve could not be opened during startup of the elec-
cussion and his comments.
trolyzer, so that this section of the system remained sealed
under operation. This led to increased pressure in the piping,
causing small H2 gas leaks at the joints of the piping. The H2 references
gas then ignited, resulting in fire and/or explosion. In the
section involved in the accident, the pressure of the system
was 82 MPa, and the H2 inventory was 40 Nm3. The diameter of [1] Kikukawa S. Risk assessment for hydrogen fueling stations.
the leakage point was 1 mm. Using Eq. (1), the resulting jet Doctor thesis. Yokohama National University; 2009.
flame length was estimated to be 3.6 m. Because there was no [2] Kikukawa S, Mitsuhashi H, Miyake A. Risk assessment for
suitable data to evaluate the blast pressure, the maximum liquid hydrogen fueling stations. Int J Hydrogen Energy
2009;34:1135e41.
severity case was adopted. The severity of this particular ac-
[3] Kikukawa S, Yamaga F, Mitsuhashi H. Risk assessment of
cident was Category V (Table 3), the possibility was Category
Hydrogen fueling stations for 70 MPa FCVs. Int J Hydrogen
iv, and the risk level without safety measures was Category H. Energy 2008;33:7129e36.
Based on an evaluation of the effect of safety measures by [4] LaChance J, Tchouvelev A, Ohi J. Risk-informed process and
analyzing the process of the scenario and safety measures, the tools for permitting hydrogen fueling stations. Int J Hydrogen
possibility and severity of accident were Category i and IV, Energy 2009;34:5855e61.
respectively, and the risk level was Category M. [5] Kikukawa S. Consequence analysis and safety verification of
hydrogen fueling stations using CFD simulation. Int J
Finally, the authors analyzed 133 potential accident sce-
Hydrogen Energy 2008;33:1425e34.
narios, and ranked all hazards of the system in Fig. 3. A total of
[6] Sakamoto J, Nakayama J, Nakarai T, Kasai N, Shibutani T,
99 potential accident scenarios were in the high risk category Miyake A. Effect of gasoline pool fire on liquid hydrogen
when safety measures were not implemented, and 19 safety storage tank in hybrid hydrogenegasoline fueling station. Int
measures against the potential accident scenarios were sug- J Hydrogen Energy 2016;41:2096e104.
gested. Because several of the safety measures, such as the [7] Al-shanini A, Ahmad A, Khan F. Accident modelling and
use of titanium in the electrolyzer stack to prevent corrosion, safety measure design of a hydrogen station. Int J Hydrogen
Energy 2014;39:20362e70.
casing of the electrolyzer system, the use of an anchor bolt for
[8] Casamirra M, Castiglia F, Giardina M, Lombardo C. Safety
the electrolyzer stack, and the adoption of stainless steel studies of a hydrogen refuelling station: determination of the
piping and pipe racks, were estimated to be intrinsic safety occurrence frequency of the accidental scenarios. Int J
measures, 35 scenarios with the above safety measures Hydrogen Energy 2009;34:5846e54.
implemented did not appear in the risk matrix displayed on [9] Castiglia F, Giardina M. Analysis of operator human errors in
the right-hand side of Fig. 3. hydrogen refuelling stations: comparison between human
rate assessment techniques. Int J Hydrogen Energy
Some of the safety measures are shown in Figs. 4 and 5.
2013;38:1166e76.
After taking these safety measures into account, two hazards
[10] Ham K, Marangon A, Middha P, Versloot N, Rosmuller N,
still remained in the high-risk category: the crashing of an Carcassi M, et al. Benchmark exercise on risk assessment
aircraft/helicopter or collapse of a crane into the facility, both methods applied to a virtual hydrogen refuelling station. Int J
of which are unpreventable using any practical safety Hydrogen Energy 2011;36:2666e77.
13314 i n t e r n a t i o n a l j o u r n a l o f h y d r o g e n e n e r g y 4 1 ( 2 0 1 6 ) 1 3 3 0 8 e1 3 3 1 4
[11] Haugom GP, Friis-Hansen P. Risk modelling of a hydrogen [21] Zhiyong LI, Xiangmin PAN, Jianxin MA. Quantitative risk
refuelling station using Bayesian network. Int J Hydrogen assessment on 2010 Expo hydrogen station. Int J Hydrogen
Energy 2011;36:2389e97. Energy 2011;36:4079e86.
[12] Kim E, Lee K, Kim J, Lee Y, Park J, Moon I. Development of [22] Schefer RW, Houf WG, Williams TC. Investigation of small-
Korean hydrogen fueling station codes through risk analysis. scale unintended releases of hydrogen: Buoyancy effects. Int
Int J Hydrogen Energy 2011;36:13122e31. J Hydrogen Energy 2008;33:4702e12.
[13] Kim J, Lee Y, Moon I. An index-based risk assessment model [23] Schefer RW, Houf WG, Williams TC. Investigation of small-
for hydrogen infrastructure. Int J Hydrogen Energy scale unintended releases of hydrogen: momentum-
2011;36:6387e98. dominated regime. Int J Hydrogen Energy 2008;33:6373e84.
[14] Landucci G, Tugnoli A, Cozzani V. Safety assessment of [24] Houf W, Schefer R. Analytical and experimental
envisaged systems for automotive hydrogen supply and investigation of small-scale unintended releases of
utilization. Int J Hydrogen Energy 2010;35:1493e505. hydrogen. Int J Hydrogen Energy 2008;33:1435e44.
[15] Lowesmith BJ, Hankinson G, Chynoweth S. Safety issues of [25] Schefer RW, Houf WG, Williams TC, Bourne B, Colton J.
the liquefaction, storage and transportation of liquid Characterization of high-pressure, underexpanded
hydrogen: an analysis of incidents and HAZIDS. Int J hydrogen-jet flames. Int J Hydrogen Energy 2007;32:2081e93.
Hydrogen Energy 2014;39:20516e21. [26] Houf WG, Evans GH, Schefer RW. Analysis of jet flames and
[16] Nakayama J, Sakamoto J, Kasai N, Shibutani T, Miyake A. unignited jets from unintended releases of hydrogen. Int J
Preliminary hazard identification for qualitative risk Hydrogen Energy 2009;34:5961e9.
assessment on a hybrid gasoline-hydrogen fueling station [27] El-Amin MF, Inoue M, Kanayama H. Boundary layer theory
with an on-site hydrogen production system using organic approach to the concentration layer adjacent to a ceiling wall
chemical hydride. Int J Hydrogen Energy 2016;41:7518e25. of a hydrogen leakage: far region. Int J Hydrogen Energy
[17] Pasman HJ. Challenges to improve confidence level of risk 2008;33:7642e7.
assessment of hydrogen technologies. Int J Hydrogen Energy [28] El-Amin MF, Kanayama H. Boundary layer theory approach
2011;36:2407e13. to the concentration layer adjacent to a ceiling wall at
[18] Pasman HJ, Rogers WJ. Risk assessment by means of impinging region of a hydrogen leakage. Int J Hydrogen
Bayesian networks: a comparative study of compressed and Energy 2008;33:6393e400.
liquefied H2 transportation and tank station risks. Int J [29] El-Amin MF, Kanayama H. Boundary layer theory approach
Hydrogen Energy 2012;37:17415e25. to the concentration layer adjacent to the ceiling wall of a
[19] Sun K, Pan X, Li Z, Ma J. Risk analysis on mobile hydrogen hydrogen leakage: axisymmetric impinging and far regions.
refueling stations in Shanghai. Int J Hydrogen Energy Int J Hydrogen Energy 2009;34:1620e6.
2014;39:20411e9. [30] Takeno K, Hashiguchi K, Okabayashi K, Chitose K,
[20] Zhiyong L, Xiangmin P, Jianxin M. Quantitative risk Kushiyama M, Noguchi F. Experimental study on open jet
assessment on a gaseous hydrogen refueling station in diffusion flame and unconfined explosion for leaked high-
Shanghai. Int J Hydrogen Energy 2010;35:6822e9. pressurized hydrogen. J Japan Soc Saf Eng 2005;44:398.