High-integrity pressure protection system

Last updated

A high-integrity pressure protection system (HIPPS) is a type of safety instrumented system (SIS) designed to prevent over-pressurization of a plant, such as a chemical plant or oil refinery. The HIPPS will shut off the source of the high pressure before the design pressure of the system is exceeded, thus preventing loss of containment through rupture (explosion) of a line or vessel. Therefore, a HIPPS is considered as a barrier between a high-pressure and a low-pressure section of an installation. [1]

Contents

Traditional systems

In traditional systems over-pressure is dealt with through relief systems. A relief system will open an alternative outlet for the fluids in the system once a set pressure is exceeded, to avoid further build-up of pressure in the protected system. This alternative outlet generally leads to a flare or venting system to safely dispose the excess fluids. A relief system aims at removing any excess inflow of fluids for safe disposal, where a HIPPS aims at stopping the inflow of excess fluids and containing them in the system.

Conventional relief systems have disadvantages such as release of (flammable and toxic) process fluids or their combustion products in the environment and often a large footprint of the installation. With increasing environmental awareness, relief systems are not always an acceptable solution. However, because of their simplicity, relatively low cost and wide availability, conventional relief systems are still often applied.

Advantages of HIPPS

HIPPS provides a solution to protect equipment in cases where:

HIPPS is an instrumented safety system that is designed and built in accordance with the IEC 61508 and IEC 61511 standards.

The international standards IEC 61508 and 61511 refer to safety functions and Safety Instrumented Systems (SIS) when discussing a device to protect equipment, personnel and environment. Older standards use terms like safety shutdown systems, emergency shutdown systems or last layers of defence.

Components of HIPPS

A system that closes the source of over-pressure within a specified time with at least the same reliability as a safety relief valve is usually called a HIPPS. Such a HIPPS is a complete functional loop consisting of:

Diagram

Example of a HIPPS system HIPPS.png
Example of a HIPPS system

The scheme above presents three pressure transmitters (PT) connected to a logic solver. The solver will decide based on 2-out-of-3 (2oo3) voting whether or not to activate the final element. the 1oo2 solenoid panel decides which valve to be closed. The final elements consist here of two block valves that stop flow to the downstream facilities (right) to prevent them from exceeding a maximum pressure. The operator of the plant is warned through a pressure alarm (PA) that the HIPPS was activated. This system has a high degree of redundancy:

One must not confine self to the above design as the only means of materializing the HIPPS definition. One must always think of the HIPPS generically, as a means of isolating a source of a high pressure when down stream flow have been blocked, isolating the upstream equipment (source of the high pressure) in a highly reliable manner. Be this source of the high pressure a pump (in case of liquid) or a gas compressor (in case of gas), the aim of the HIPPS in these cases is to reliably shut down the pump or the gas compressor creating the high pressure condition in a reliable and safe manner.

Standards and design practices

The ever-increasing flow rates in combination with the environmental constraints initiated the widespread and rapid acceptance in the last decades of HIPPS as the ultimate protection system.

The International Electrotechnical Commission (IEC) has introduced the IEC 61508 and the IEC 61511 standards in 1998 and 2003. These are performance based, non-prescriptive, standards which provide a detailed framework and a life-cycle approach for the design, implementation and management of safety systems applicable to a variety of sectors with different levels of risk definition. These standards also apply to HIPPS.

The IEC 61508 mainly focuses on electrical/electronic/programmable safety-related systems. However it also provides a framework for safety-related systems based on other technologies including mechanical systems. The IEC 61511 is added by the IEC specifically for designers, integrators and users of safety instrumented systems and covers the other parts of the safety loop (sensors and final elements) in more detail.

The basis for the design of your safety instrumented system is the required Safety Integrity Level (SIL). The SIL is obtained during the risk analysis of a plant or process and represents the required risk reduction. The SIS shall meet the requirements of the applicable SIL which ranges from 1 to 4. The IEC standards define the requirements for each SIL for the lifecycle of the equipment, including design and maintenance. The SIL also defines a required probability of failure on demand (PFD) for the complete loop and architectural constraints for the loop and its different elements.

The requirements of the HIPPS should not be simplified to a PFD level only, the qualitative requirements and architectural constraints form an integral part of the requirements to an instrumented protection system such as HIPPS.

The European standard EN12186 (formerly the DIN G491) and more specific the EN14382 (formerly DIN 3381) has been used for the past decades in (mechanically) instrumented overpressure protection systems. These standards prescribe the requirements for the over-pressure protection systems, and their components, in gas plants. Not only the response time and accuracy of the loop but also safety factors for over-sizing of the actuator of the final element are dictated by these standards. Independent design verification and testing to prove compliance to the EN14382 standard is mandatory. Therefore the users often refer to this standard for HIPPS design.

Related Research Articles

<span class="mw-page-title-main">Safety engineering</span> Engineering discipline which assures that engineered systems provide acceptable levels of safety

Safety engineering is an engineering discipline which assures that engineered systems provide acceptable levels of safety. It is strongly related to industrial engineering/systems engineering, and the subset system safety engineering. Safety engineering assures that a life-critical system behaves as needed, even when components fail.

A piping and instrumentation diagram is a detailed diagram in the process industry which shows the piping and process equipment together with the instrumentation and control devices.

In functional safety, safety integrity level (SIL) is defined as the relative level of risk-reduction provided by a safety instrumented function (SIF), i.e. the measurement of the performance required of the SIF.

IEC 61508 is an international standard published by the International Electrotechnical Commission (IEC) consisting of methods on how to apply, design, deploy and maintain automatic protection systems called safety-related systems. It is titled Functional Safety of Electrical/Electronic/Programmable Electronic Safety-related Systems.

IEC standard 61511 is a technical standard which sets out practices in the engineering of systems that ensure the safety of an industrial process through the use of instrumentation. Such systems are referred to as Safety Instrumented Systems. The title of the standard is "Functional safety - Safety instrumented systems for the process industry sector".

In functional safety a safety instrumented system (SIS) is an engineered set of hardware and software controls which provides a protection layer that shuts down a chemical, nuclear, electrical, or mechanical system, or part of it, if a hazardous condition is detected.

Standardization in oil industry seeks to promote a better standardization within the oil and energy industry. It promotes this objective by highlighting areas where standardization has worked well, where it has not, and why. This provokes discussions for better standardization. The overall purpose of the document is to issue a guideline on the application of IEC 61508 and IEC 61511 in the Norwegian Petroleum Industry, and thereby simplify the use of the standards.

A shutdown valve is an actuated valve designed to stop the flow of a hazardous fluid upon the detection of a dangerous event. This provides protection against possible harm to people, equipment or the environment. Shutdown valves form part of a safety instrumented system. The process of providing automated safety protection upon the detection of a hazardous event is called functional safety.

Spurious trip level (STL) is defined as a discrete level for specifying the spurious trip requirements of safety functions to be allocated to safety systems. An STL of 1 means that this safety function has the highest level of spurious trips. The higher the STL level the lower the number of spurious trips caused by the safety system. There is no limit to the number of spurious trip levels.

Functional safety is the part of the overall safety of a system or piece of equipment that depends on automatic protection operating correctly in response to its inputs or failure in a predictable manner (fail-safe). The automatic protection system should be designed to properly handle likely human errors, systematic errors, hardware failures and operational/environmental stress.

<span class="mw-page-title-main">Process plant shutdown systems</span>

A process plant shutdown system is a functional safety countermeasure crucial in any hazardous process plant such as oil and gas production plants and oil refineries. The concept also applies to non-process facilities such as nuclear plants. These systems are used to protect people, assets, and the environment when process conditions get out of the safe design envelope the equipment was designed for.

<span class="mw-page-title-main">Instrumentation in petrochemical industries</span>

Instrumentation is used to monitor and control the process plant in the oil, gas and petrochemical industries. Instrumentation ensures that the plant operates within defined parameters to produce materials of consistent quality and within the required specifications. It also ensures that the plant is operated safely and acts to correct out of tolerance operation and to automatically shut down the plant to prevent hazardous conditions from occurring. Instrumentation comprises sensor elements, signal transmitters, controllers, indicators and alarms, actuated valves, logic circuits and operator interfaces.

ISO 26262, titled "Road vehicles – Functional safety", is an international standard for functional safety of electrical and/or electronic systems that are installed in serial production road vehicles, defined by the International Organization for Standardization (ISO) in 2011, and revised in 2018.

Partial stroke testing is a technique used in a control system to allow the user to test a percentage of the possible failure modes of a shut down valve without the need to physically close the valve. PST is used to assist in determining that the safety function will operate on demand. PST is most often used on high integrity emergency shutdown valves (ESDVs) in applications where closing the valve will have a high cost burden yet proving the integrity of the valve is essential to maintaining a safe facility. In addition to ESDVs PST is also used on high integrity pressure protection systems or HIPPS. Partial stroke testing is not a replacement for the need to fully stroke valves as proof testing is still a mandatory requirement.

IEC/EN 62061, ”Safety of machinery: Functional safety of electrical, electronic and programmable electronic control systems”, is the machinery specific implementation of IEC/EN 61508. It provides requirements that are applicable to the system level design of all types of machinery safety-related electrical control systems and also for the design of non-complex subsystems or devices.

Automotive Safety Integrity Level (ASIL) is a risk classification scheme defined by the ISO 26262 - Functional Safety for Road Vehicles standard. This is an adaptation of the Safety Integrity Level (SIL) used in IEC 61508 for the automotive industry. This classification helps defining the safety requirements necessary to be in line with the ISO 26262 standard. The ASIL is established by performing a risk analysis of a potential hazard by looking at the Severity, Exposure and Controllability of the vehicle operating scenario. The safety goal for that hazard in turn carries the ASIL requirements.

Hercules is a line of ARM architecture-based microcontrollers from Texas Instruments built around one or more ARM Cortex cores. This "Hercules safety microcontroller platform" includes a series of microcontrollers specifically targeted for Functional Safety applications, through such hardware-base fault correction/detection features as dual cores that can run in lock-step, full path ECC, automated self testing of memory and logic, peripheral redundancy, and monitor/checker cores.

IEC 84.00.07 is a technical report developed by the ISA 84 standards panel. It defines the lifecycle and technical requirements for ensuring effective design of fire and gas detection systems for use in the process industries. The technical report provides a lifecycle for performance based design of fire and gas detection systems, listing out the steps involved in a performance based design and establishing requirements to be implemented for each step. The technical report also defines performance metrics for application to fire and gas detection systems. The performance metrics established in this report for fire and gas system effectiveness include coverage and safety availability.

Lean air is a gas mixture with an oxygen content lower than 20.95%. Lean air is made from a gas mixture of air with nitrogen or of pure oxygen with nitrogen and is used in several production processes where a product covering with pure nitrogen can be dangerous, undesirable or more expensive. In some production processes the oxygen content is necessary for the reaction process or during storage.

References

  1. "High-Integrity Pressure Protection System (HIPPS)". SLB. Archived from the original on 21 January 2022. Retrieved 11 February 2024.