Professional Documents
Culture Documents
DCS ESD Part1 Maher
DCS ESD Part1 Maher
ﻣﺤﻤﺪرﺿﺎ ﻣﺎﻫﺮ
3- ESD Siemens
Boom?
Mechanical safety level
Safety
Alarm Condition
Operator takes action High alarm level
APACS Moore
PCS7
Automation AS
technology
• Measurement
• Closed‐Loop Con.
• Open‐Loop Con.
etc.
HMI
•Displaying
•Operating OS
•Logging
+ etc.
Communication
technology Bus
11/07/1394 DCS ESD Seminar – Part1 ‐ Maher 11
PCS7 ﻣﻌﻤﺎري ﺳﻴﺴﺘﻢ
@ SAP R/3
@
ERP / MES
Office Ethern Office Ethern
LAN et LAN et
Plant Plant
Internet/Intran InformatioMaintenanc
Engineerin SIMATIC @PCS 7 et / n e
OS Clients
g BATCH OPC-
OS Single Station ES Clients Server
Station
(Multi-VGA)
Servic
OS OS‐LAN Ethern
et
e Terminal Bus
ES
OS‐Server Batch‐Server
(redundant) (redundant) Workstations
DP/AS‐
AS 414 ET
200M
AS 417
F/FH ET ET Controllers
I O 200M 200M
Ex‐I/O
PROFIBUS‐DP
PROFIBUS‐DP
Fail‐
PROFIBUS‐DP
HART P DP/PA‐Link
ET
Safe
PROFIBUS‐
200M PROFIBUS‐PA
DP/EI PA
B DP/PA‐
Link
DP/PA‐Link Y‐Link Fieldbus
PROFIBUS‐ PROFIBUS‐PA
ET ET DP ET
200 200 200iS COx,
Zone 1
X S NOx,
Zone 2
...
11/07/1394 DCS ESD Seminar – Part1 ‐ Maher 12
Basic Architecture
Operating System Client
PCS7 Operator System
(OS) & Batch Clients
PCS 7
Operation level
Control level
Field level
PCS7 Box
Standard : AS400
Redundant : AS400H
Fail Safe : AS400FH
32
CPU 417-4H
CPU 416-5H
30
New
16 CPU 414-5H
4
CPU 414-4H
PROFINET
ET 200M
Y-Link
ET 200S
Sync wiring
Data synchronization
availability
Redundant
Profibus
Scalable
11/07/1394 DCS ESD Seminar – Part1 ‐ Maher 28
OS OS ES
OS Client• AS •
OS Server• OS Single •
OS Server •
Industrial Industrial
Ethernet ISO-on-TCP Ethernet ISO-on-TCP
Industrial Industrial
Ethernet ISO-on-TCP Ethernet ISO-on-TCP
Control I/O
Monitoring Availability Availability
Availability
Industrial
Ethernet
SINAMI
CS
SINAMICS
S7-300 w ith SIMATIC S7-
CP 343-1 Lean 1200 ET20
ET 200S w ith CM 1242- 0S
5
ارﺗﻘﺎ اﻣﻨﻴﺖ ﺷﺒﻜﻪ
اﺳﺘﻔﺎده از وﻳﻨﺪوز ﻣﻨﺎﺳﺐ •
ﻋﺪم اﺗﺼﺎل ﻣﺴﺘﻘﻴﻢ ﺑﻪ ﺷﺒﻜﻪ ﻫﺎ ﻳﺎ ﺳﻴﺴﺘﻢ ﻫﺎي ﺑﻴﺮوﻧﻲ •
اﺳﺘﻔﺎده از ﻓﺎﻳﺮوال ﺳﺨﺖ اﻓﺰاري و ﻧﺮم اﻓﺰاري •
CP443 Adv.
CP 1628
Scalance S V3
CP443 Adv
Field communication
• Profibus‐ DP
• Profinet
• Profibus – PA
• Foundation Fieldbus
• Modbus
• AS‐I
• others
Profibus ‐ DP
ﻣﺮﺳﻮم ﺗﺮﻳﻦ ﺷﺒﻜﻪ ﻓﻴﻠﺪ ﺑﺎس در اﻳﺮان •
+ Tree
ET 200S ET 200S
PROFIBUS
ET 200M
ET 200iSP ET 200iSP
PROFIBUS
PROFIBUS
ET 200M ET 200M
PROFIBUS PA
ET 200pro ET 200pro
Single‐sided connection
Sync wiring
ET 200M PROFINET
ET 200pro
PROFINET
PROFINET
اﻧﻮاع :
• : Modbus RTUﻛﻨﺪ ،ﺑﺎ ﺑﺴﺘﺮ RS485 , RS422 , RS232
• : Modbus TCPﺳﺮﻳﻊ ﺑﺎ ﺑﺴﺘﺮ اﺗﺮﻧﺖ
ﺳﻴﺴﺘﻢ ﻫﺎي اﭘﺮاﺗﻮري
Operator Stations
Operator Stations
ﺳﻴﺴﺘﻢ ﻫﺎي اﭘﺮاﺗﻮري
Single Stations
ﺳﻴﺴﺘﻢ ﻫﺎي اﭘﺮاﺗﻮري ﻛﻪ ﻣﺴﺘﻘﻴﻤﺎٌ ﺑﻪ ﺷﺒﻜﻪ ﻛﻨﺘﺮﻟﺮﻫﺎ ﻣﺘﺼﻞ
ﻫﺴﺘﻨﺪ
Multiple Station
ﺳﻴﺴﺘﻢ ﻫﺎي اﭘﺮاﺗﻮري ﻛﻪ ﺑﺼﻮرت Clinet / Server
ﻣﺘﺼﻞ ﻫﺴﺘﻨﺪ
OS quantity framework
Max. number of OS servers / pairs of servers 12
Max. number of AS per OS server / pair of servers 64
Max. number of OS clients (per multi‐user system) 32
Max. number of process objects:
• Per OS single station 5000 Pos
• Per OS server 8500 POs
Journal List
Alarm View
Alarm statistics and analysis
آرﺷﻴﻮ ﻫﺎي ﻛﻮﺗﺎه ﻣﺪت روي OS Singleﻳﺎ OS Server • Short Term .١در ﺣﺪ ﭼﻨﺪ ﻫﻔﺘﻪ
آرﺷﻴﻮ ﻫﺎي دراز ﻣﺪت روي CAS • Long Term .٢در ﺣﺪ ﭼﻨﺪﻳﻦ ﻣﺎه
Data input for process value archiving by all servers Approx. 10 000/s
ﺳﻴﺴﺘﻢ ﺗﻌﻤﻴﺮاﺗﻲ
Maintenance Station
Maintenance Station
ﺳﻴﺴﺘﻢ ﺗﻌﻤﻴﺮاﺗﻲ
Asset Management:
• Corrective Maintenance
• Preventive Maintenance
• Predictive Maintenance
SIMATIC S7‐400 a nd
PROFIBUS Network
SCL STL
PCS 7
SFC FBD
CFC
CFC
Continuos Function Chart
SFC
Sequential Function Chart
Comprehensive Library
ﻛﺘﺎﺑﺨﺎﻧﻪ ﺟﺎﻣﻊ ﻧﺮم اﻓﺰار
CFC Library•
PCS7 Library•
PCS7 Advanced Library•
.... • ﻭ
Embedded
in PCS 7
MPC
lean large
Smith Fuzzy
Predictor Control
Lead‐Lag
Feed‐Forward Control Operator
Control Performance Training
Monitoring Simulator
Override
Control PID
Tuning
Gain
Scheduling Integrated / interfaced
3rd party tools
low APC Complexity high
APC Tools embedded in PCS 7
OS Clients
Graphic Design •
Alarm Management •
Archive Design •
Scripts •
Ethernet
PROFIBUS PA
PROFIBUS PA
RS232/
RS485
SIMIT
Transmitter +
4 ‐ 20 mA
‐
Normally energised
input loop
Normally de‐energised
I output loop
Logic
Solver
I
Gas
+
‐
Normally
de‐energised
input loop I
Logic
Solver
I
Risk reduction
SIS Other External
Process
Risk
Pfd loop = Pfd sensors + Pfd logic solver + Pfd final elements
Trip
amplifiers
Vent
TR
Fail safe Air
output
TR Safety Interlocks
Safety valve
TR
(TÜV) IEC
AK Class SIL level
AK 1 SIL 0
AK 2 & 3 SIL 1
AK 4 SIL 2
AK 5/6 SIL 3
AK 7 & 8 SIL 4
1oo2
2oo2
2oo3/2oo4
Final Element
ﮔﺮﻣﺎ •
رﻃﻮﺑﺖ •
ﺧﻮردﮔﻲ ﺷﻴﻤﻴﺎﻳﻲ •
Design for ﻟﺮزش •
!NO FAILURES ﺷﻮك ﻫﺎي اﻟﻜﺘﺮﻳﻜﻲ •
ﻧﻮﻳﺰ •
Safety Matrix
(1999)
QUADLOG
(1995)
SIMATIC S5-
95F
SIMATIC S5- (1994)
110F
(1980) SIMATIC S5-
115F
(1988)
S7-417-4H *)
Redundant systems 30MB
S7-414-4H *) 3000 F-I/Os
2.8MB
600 F-I/Os
S7-412-3H *)
768kB
100 F-I/Os
S7-319F-2DP
1.4MB
1000 F-I/Os
S7-317F-2DP
1MB
500 F-I/Os
S7-315F-2DP
192kB
300 F-I/Os Certified up to SIL 3
SIL2
if the PLC fails, then the process will
be guaranteed to shutdown ‐ just like
it would with "normal" safety relays. SIL3
F ‐ Panel
F System ‐ Architecture
1 Standard-CPU 417-4H
RUN- P
RUN
STO P
CM RES
F-SMs in ET 200M
11/07/1394 Standard-ProfibusDP
DCS ESD Seminar – Part1 ‐ Maher PROFISafe-Safety profil117
FH System ‐ Architecture
PC
RUN- P
R-UP
RUN
S7-400FH
N
STO
CM RES
CM R
PES
redondant
Profibus DP
Communication Standard- et PROFISafe- via Profibus DP
11/07/1394 DCS ESD Seminar – Part1 ‐ Maher 118
Fail Safe and High Availability
AS 414 F AS 414 F
AS 417 F AS 417 F
PROFIBUS-DP
PROFIBUS-DP
F-I/O Modules
2x Safety redundant
IM 153-2 Module
Standard
I/O Modules
DO
DO
AI
DI
Flexible Modular Redundancy ™
DO
AI
DI
DO
DO
AI
DI
DI
Flexible Modular Redundancy ™
Dual
DO
DO
AI
DI
DI
AI
Simplex
AI
Triple
Flexible Modular Redundancy ™
Dual
8 8 8
DO
DO
AI
DI
DI
AI
Triple
Flexible Set‐up‘s
8
u Fieldbus architecture allows system to tolerate multiple
faults without interruption
u I/O redundancy independent of CPU redundancy
n All components rated for SIL3
u No degraded mode
DO
DO
AI
AI
DI
88 8
DO
DO
DI
AI
AI
2oo3
8
AI
program Failsafe
(OB35)
Program Standard
OB1
Bus interface
Dual‐
Microcontroller port Microcontroller
RAM
Output
Second
driver
disconnection facility
enabling
failsafe fieldbus
applications ....
11/07/1394 DCS ESD Seminar – Part1 ‐ Maher 130
Profisafe on ISO – OSI Layers
„Black/Gray Channel": ASICs, Links, Cables, etc. are not safety relevant
"ProfiSafe": Parts of the safety critical communications systems: Adressing, Watch Dog Timers,
Sequenzing, Signatur, etc.
Safety relevant, but not part of the ProfiSafe-Profils: Safety I/O and the Safety Control Systems
Standard-Message
S S S S S S
33 TBit 68H ... ... 68H ... .... ... 1... 244 Bytes ... 16H
1 Cell = 11 Bit
LE
SB ZB ZB ZB ZB ZB ZB ZB ZB PB EB
0 1 2 3 4 5 6 7
Data Unit = Failsafe-Data
max. 244 Bytes
TBit = Clock-Bit = 1 / Baudrate FCS = Frame Checking Sequence
SD = Start Delimiter (here SD2, var. Data Length) (across data w ithin LE)
LE = Length of Data ED = End Delimiter
LEr = Repeated LoD, not in FCS SB = Start-Bit
DA = Destination Address ZB0...7 = Character-Bit
SA = Source Address PB = (even) Parity Bit
FC = Function Code (Type of Message) EB = Stop-Bit
S S S S S S
Sender across
based F-Data
Counter and
F-Parameter
*) 2 Byte for a max. of
12 Byte F I/O data
4 Byte for a max. of Max. 12 / 122 Bytes 1 Byte 1 Byte 2/4 Bytes *) (240/238 - F-Data)
122 Byte F I/O data
F‐User Program
Standard‐ F‐User Blocks F‐Control
User Blocks
Program F‐Standard‐ F‐System‐
blocks blocks
Program Program
execution execution
F‐Library
Certified (TÜV)
function blocks
• Hazard identified
– Column C‐51 Overpressure, with
Possible Overloading of Flare
System
• Safety Instrumented Function
– High Pressure on Column C‐51
Causes Steam Supply to Reboiler E‐
52 to Close
Logic
2oo3
PT‐52 1oo2
Solver
PT‐53 S S
XV-51 XV-52
Note: Target SIL and input / output voting are for illustrative examples only and are not to be taken as typical, suggested or recommended.