Magnet Safety Systems – Magnet Common Project E. Sbrissa, G. Olesen – CERN/EP

10th of April 2003 ATLAS “MSS Specification”

Magnet Safety Systems – Magnet Common ProjectMagnet Safety Systems – Magnet Common ProjectE. Sbrissa, G. Olesen – CERN/EPE. Sbrissa, G. Olesen – CERN/EP

2.3 Magnet Safety 2.3 Magnet Safety System descriptionSystem description

The role of the MSS is to protect The role of the MSS is to protect the magnet and the the magnet and the personnel. To be able to do personnel. To be able to do this, it has to exchange this, it has to exchange information with a number of information with a number of sub-systems around the sub-systems around the magnet, as shown on the magnet, as shown on the MSS-MCS architecture.MSS-MCS architecture.

Magnets System

Service cavern

Experimentalcavern

SolenoidProcess

Control Units

ExternalCryogenics

Process Control

Surface

MCS

HardwiredLogic

1

HardwiredLogic

2

APC1 APC2

ACS1 ACS2

FACQMSSToroid

Detector SafetySystem

DSS

Sa

fety

co

ntr

ols

Pro

tect

ion

sig

na

ls

Sa

fety

co

ntr

ols

Pro

tect

ion

sig

na

ls

Se

nso

rs/A

ctu

ato

rs Slow DumpRequests

ExternalCryogenicsSupervisor

Detector ControlSystem

DCS

CERN wide area

WEBMonitoring

ExternalCryogenicsSupervisor

MagnetSupervisor

MagnetSupervisor

Central control room

ToroidProcess Control

Units

VacuumProcess

Control Units

Se

nso

rs/A

ctu

ato

rs

Se

nso

rs/A

ctu

ato

rs

ANS

Hardwir.Logic 1

Hardwir.Logic 2

APC1 APC2

ACS1 ACS2

FACQMSS

Solenoid

Sa

fety

co

ntr

ols

Pro

tect

ion

sig

na

ls

Sa

fety

co

ntr

ols

Pro

tect

ion

sig

na

ls

Database

ProximityCryogenics

Process ControlS

en

sors

/Act

ua

tors

Detector control roomMagnet and

Cryogenics controlroom

Data Server

LocalMagnet

SupervisorMagnet

control roomin USA 15



MSS information exchangeMSS information exchange

QuenchHeaters

Vacuum

MSSACS/LCS/API/APC

PowerConverter

MSSPower Supply/

Batteries

DSS Cryogenics

MSSMonitoring

MSSAnnunciator

MagnetEmergency

Stops

MCS

CircuitBreaker

CERNPower3 sources

Inhibit

Fault

Trigger

Status

Status

Isolate

Status

Start-up test,operator SD, etc...

Open

Status

Chassis status,cable trace, etc...

Remote resetStatus

Redundantpower

E-stops

Events, values...

MSSequipment

MSSSensors

Sensorvalues

Status

SD,inhibit...

Current status,dump status...



MSS basic components:MSS basic components: An analogue part grouped aroundAn analogue part grouped around

a chassis system called ACSa chassis system called ACS

A digital part grouped aroundA digital part grouped around

a chassis system called LCSa chassis system called LCS

A control and interconnectionA control and interconnection

system called APC/APIsystem called APC/API

Analog sensor inputs.Unique sensors - Directly cabled

16 channels/chassis

Redundant power inputChassis monitoring/reset


Warnings/Alarmsfrom signal conditioningmodules

HLM

outp

ut si

gnals

Dum

p c

om

mand s

ignals

LCS input signals.64 inputs1 DCS section

Analog copies ofsensor values.To MCS-Annunciator

Digitalcopies of warnings/alarms.To MCS-Annunciator

ACS - Analog Chassis System8 Dual Channel Cards + Analog Outputs

LCS - Logic Chassis System2 Sections: 4x16 Input Cards/1 Hard-wired Logic Card per section.

Total: 128 Inputs

API/APC - Application Interface and ControlInterface between MSS and application.

Max. 3 DCS

External applicationsignals.Dry-contact inputs

Actuator signals forPower Supply-CircuitBreakers, etc.Safety relay output

MSS output signals.Opto-coupled/relayoutputs

Emergency StopsSafetyrelais



2.3.1 Analogue part:2.3.1 Analogue part:The analogue chassis receives the sensor values directly from the magnet. After level conditioning The analogue chassis receives the sensor values directly from the magnet. After level conditioning

and level/time discrimination the result of the treatment is send to the logic chassis, in the form and level/time discrimination the result of the treatment is send to the logic chassis, in the form of opto-coupled alarm signals.of opto-coupled alarm signals.

A series of signal conditioners have been developed particularly for this type of application. These A series of signal conditioners have been developed particularly for this type of application. These analogue modules can be adapted to a variety of different sensors and situations, and exists in analogue modules can be adapted to a variety of different sensors and situations, and exists in three versions:three versions:

A resistive measurement module for temperature and superconducting quench measurements.A resistive measurement module for temperature and superconducting quench measurements. A voltage measurement module for low/high level voltages and for differential measurements.A voltage measurement module for low/high level voltages and for differential measurements. A bridge quench detection module for measuring unbalance between coil sections.A bridge quench detection module for measuring unbalance between coil sections.

The modules all share a common platform, with only the front-end part being different from module to The modules all share a common platform, with only the front-end part being different from module to module. They contain filters, and voltage and time discriminators, in order to issue stable and module. They contain filters, and voltage and time discriminators, in order to issue stable and consistent alarm signals with no spurious effects. They also contain local latched/non-latched consistent alarm signals with no spurious effects. They also contain local latched/non-latched monitoring, voltage outputs, test connectors, etc.monitoring, voltage outputs, test connectors, etc.



The analogue signal treatment is contained in the “Analogue Chassis System”. The ACS contains the The analogue signal treatment is contained in the “Analogue Chassis System”. The ACS contains the following parts in a chassis enclosure with corresponding back-planes:following parts in a chassis enclosure with corresponding back-planes:

8 analogue modules of 2 channels each8 analogue modules of 2 channels each 2 output modules for analogue signals2 output modules for analogue signals 2 redundant power supply modules2 redundant power supply modules 1 monitoring module1 monitoring module

The output modules are not in the safety chains, but used for monitoring MSS analogue signals by the MCS The output modules are not in the safety chains, but used for monitoring MSS analogue signals by the MCS and annunciator systems. The output modules receive the result of the signal conditioning from the and annunciator systems. The output modules receive the result of the signal conditioning from the analogue modules via the internal back plane. This signal is then duplicated and either buffered and analogue modules via the internal back plane. This signal is then duplicated and either buffered and sends as a voltage signal or transformed to a standard current loop signal. The channels are mounted sends as a voltage signal or transformed to a standard current loop signal. The channels are mounted only according to the “Safety Parameters” list, since not all signals are monitored.only according to the “Safety Parameters” list, since not all signals are monitored.

The redundant power supplies converts the battery supported input voltages of 48 VDC to all internal The redundant power supplies converts the battery supported input voltages of 48 VDC to all internal voltages.voltages.

These modules and all associated voltages are surveyed by the monitoring module, which in addition These modules and all associated voltages are surveyed by the monitoring module, which in addition monitors module faults and cable traces. It has a World-FIP connection to the overall PLC based MSS monitors module faults and cable traces. It has a World-FIP connection to the overall PLC based MSS monitor, which is also associated with the MCS.monitor, which is also associated with the MCS.










16 channels/chassis




HLM

outp

ut si

gnals

Dum

p c

om

mand s

ignals






Total: 128 Inputs


Max. 3 DCS







2.3.2 Digital part:2.3.2 Digital part:To receive and process the logical signals formed by the analogue modules or from the magnet To receive and process the logical signals formed by the analogue modules or from the magnet

surroundings two digital modules have been developed:surroundings two digital modules have been developed: A digital input module for receiving and filtering the logical level signals from analogue A digital input module for receiving and filtering the logical level signals from analogue

modules or from the magnet subsystems.modules or from the magnet subsystems. A hard-wired logic module that contains the main decision equations for the magnet safety and A hard-wired logic module that contains the main decision equations for the magnet safety and

outputs for controlling the application.outputs for controlling the application.

The digital input modules have galvanically isolated constant current inputs with subsequent on-delay The digital input modules have galvanically isolated constant current inputs with subsequent on-delay filters to eliminate spurious or mains noise. The input signals are also duplicated and available filters to eliminate spurious or mains noise. The input signals are also duplicated and available as isolated opto-coupled outputs for monitoring by the MCS and annunciator systems.as isolated opto-coupled outputs for monitoring by the MCS and annunciator systems.

The logic decision module receives all logic signals from the input modules. The program stored in the The logic decision module receives all logic signals from the input modules. The program stored in the modules memory then treats these signals and sets the decision modules outputs set modules memory then treats these signals and sets the decision modules outputs set accordingly. The module displays information on the front-panel in two ways:accordingly. The module displays information on the front-panel in two ways:

On a LED display symbolizing all inputs associated with the module. The information displayed On a LED display symbolizing all inputs associated with the module. The information displayed depends on the mode, such as indicating active inputs, the first event that arrived, inputs depends on the mode, such as indicating active inputs, the first event that arrived, inputs associated with FD/SD, and so forth.associated with FD/SD, and so forth.

On an alphanumeric display where information can be displayed on demand, such as the mode On an alphanumeric display where information can be displayed on demand, such as the mode of the LED display, the stored logic program number and its checksum.of the LED display, the stored logic program number and its checksum.



The digital signal treatment is contained in the “Logic Chassis System”. The LCS contains the The digital signal treatment is contained in the “Logic Chassis System”. The LCS contains the following parts in a chassis enclosure with corresponding back-planes:following parts in a chassis enclosure with corresponding back-planes:

8 digital input modules of 16 channels each8 digital input modules of 16 channels each 2 logic decision modules2 logic decision modules 2 redundant power supply modules2 redundant power supply modules 1 monitoring module1 monitoring module

The modules are arranged in two sections, with 4 input modules feeding 1 decision module and the 2 The modules are arranged in two sections, with 4 input modules feeding 1 decision module and the 2 decision modules communicating via back plane connections.decision modules communicating via back plane connections.



MCS

Annunciator

16 InputsCoded cable trace

DIM1

16

16

16

16

From DIM2

From DIM3

From DIM4

16

16

16

16

From DIM8

From DIM9

From DIM10

Series connectionof opto-couplers

16

Hard-wired logicmodulescommunication

16

16

20

DIM7

MCS

Annunciator

16 inputsCoded cable trace

HLM5

ALTERA

Programmable LogicArray.

Hard-wired logic burnedin PROM.

Clockcircuit

Monitoring

Power

Status

Indication

Dumpacknowledge.

Only HLMwith DCCT!

Connectorcoding

Monitoring

HLM6

ALTERA

Programmable LogicArray.

Hard-wired logic burnedin PROM.

Clockcircuit

Monitoring

Power

Status

Indication

Dumpacknowledge.

Only HLMwith DCCT!

Connectorcoding

Monitoring

Hard-wired logicmodule 5 outputs

Hard-wired logicmodule 6 outputs

Hard-wired logicmodules 5-6combined outputs

To API.Hard-wired logicoutput signals.

To API.Alarm/stateoutput signals.

To API.Alarm/stateoutput signals.










16 channels/chassis




HLM

outp

ut si

gnals

Dum

p c

om

mand s

ignals






Total: 128 Inputs


Max. 3 DCS







2.3.3 API/APC2.3.3 API/APCThe logic decision module controls the surrounding sub-systems via the MSS application control, the The logic decision module controls the surrounding sub-systems via the MSS application control, the

APC. This component contains a series of safety relays where the contacts are send to the APC. This component contains a series of safety relays where the contacts are send to the equipment to be controlled.equipment to be controlled.

As seen in figure 2.3.3 the magnet emergency stops intervene directly in the interface box APC, As seen in figure 2.3.3 the magnet emergency stops intervene directly in the interface box APC, bypassing the logic part.bypassing the logic part.

The application interface, API, is the component through which all other signals in and out of MSS are The application interface, API, is the component through which all other signals in and out of MSS are routed. It is basically a passive part where all wiring between input/outputs connectors of the routed. It is basically a passive part where all wiring between input/outputs connectors of the MSS and the external connections is contained. This part will be specifically manufactured for MSS and the external connections is contained. This part will be specifically manufactured for the individual parts of the ATLAS MSS systems.the individual parts of the ATLAS MSS systems.

Documents

Magnet Safety Systems – Magnet Common Project E. Sbrissa, G. Olesen – CERN/EP