Analysis of a Complex Protection Scheme with Component Sharing Between Protection Layers

摘要

After many years of implementation of a LOPA/SIS [1] work process, many scenarios and protection schemes were found to be difficult to properly evaluate with simple analysis tools. These complex systems have been proven designs but had not been evaluated with a LOPA/SIS work process, or a similar work process. The challenge of shared components, longer test intervals and complex protection layer design led to using better modeling techniques and tools to close risk gaps and also often reduce overall protection scheme cost. This work process can be used for any scenarios that are difficult to close and/or for alternative risk assessment for LOPA and for HIPS(S) or QRA scenarios. This paper uses an example of a batch reactor system and a continuous reactor system with BPCS and SIS and component data to discuss the issues with shared instrumentation, complex protection scheme design and test interval optimization for meeting required safety criteria with low on-going maintenance costs. Starting with a LOPA that identifies shared components, a logic model is developed including shared components and common cause failures. This scenario and protection scheme is evaluated using fault tree software with the capability to correctly model shared components, beta factors, IEC 61508 averaging and functional and proof testing of the components. Isograph’s Reliability Workbench (RWB) 13.0.2 software is used to evaluate the meta-function (BPCS loop and SIS loop that have some shared components). The impacts of functional testing for the final elements and voting logic on the inputs, and beta factors for common cause are evaluated and discussed. The PFD of the SIS and meta-function are calculated as are the false trip rate for the SIS Loop, BPCS loop, and meta-function. The beta factors are calculated per IEC [2] guidelines with the M out of N beta factor corrections. An illustration of the RWB IEC 61508 FT model, and use of the IEC 61508 EXT averaging is shown. Results show the options available for test intervals to meet the PFD targets and false trip targets.