Discussion and exchange on ESD

This post was last edited by nihaocarter on 2011-9-12 at 12:49. Problems with the DCS system can have an impact on the ESD system. If the main control card of the DCS stops working properly, then the input values of the ESD system will inevitably be affected, which can lead to a chain reaction that results in a shutdown – this is from a process perspective. The SLI3 level of ESD systems provides fault tolerance. To give a random example – it may not be entirely appropriate – but it can help in understanding these concepts. p Siemens’ PCS7 system. It includes S7-400H hardware, WinCC monitoring software, and Simaticnet communication software. Step7 programming software. Intelligent metering tools such as PDM. ) k1 l0 Q6 ^& v7 f( N, i8 uPCS7 is a combination of software and hardware; it represents a conceptual system. The principle is basically the same for SIS as well. Essentially, the hardware system of SIS includes not only the SIS controller and IOs (such as Triconex, HIMA, Siemens 400FH). 2 S1 p! n" j. E2 V2 S should also include all other input components that interface with the controller, such as sensors, transmitters, and detection devices that have obtained TUV SIL certification ； 0 G* P2 j4 U. R! h% d; ^4 v should also include all output components, such as actuators that have obtained TUV SIL certification (hydraulic safety actuators, pneumatic safety actuators, electric safety actuators); P should also comprise certified field devices. – In demanding installation sites, the valve body itself must also have a TUV certificate. For example, the safety valves in nuclear power plants must not only meet the quality standards for boilers and pressure vessels, but also come with nuclear inspection certificates as well as TUV safety certification, clearly indicating the SIL level. 5 W; } So, let’s understand these concepts again: a safety controller (this is the most accurate term currently in use) is merely one component of the hardware in an SIS system. $ |! L0 }, M1 T9 z9 y* W; Manufacturers of safety controllers include Triconex, HIMA, Siemens, Moore, ICS, ABB, Emerson, etc. These safety controllers are used in emergency shutdown situations, and are then referred to as ESD. : s L7 K, O# g& x$ e' Z is used for flame detection and gas alarm in oil and gas fields, and is referred to as F&GS.1 p7 J& ?% M- P/ y" x4 E is used for combustion control in hazardous environments, and is called BMS. RESD, F&GS, BMS do not refer to Triconex, nor to HIMA, and certainly not to the controllers produced by these manufacturers. Rather, the safety controllers made by these manufacturers are used in various different scenarios and serve different purposes, which is why they have different names. Next time someone asks you why Triconex is sometimes called ESD, sometimes PSD, sometimes F&GS, and sometimes BMS. It is also called SIS. . . You should understand its meaning. ) For example, B- z* R2 S% r G2 k- U P- z – these are all safety controllers, or safety control systems; in IEC standards they were once referred to as safety systems (PES), that is, safety-related electronic devices. - B+ b5 _5 o3 b5 m2 S is used in contexts referred to as ESD; it represents ESD itself. In contexts called F&GS, it represents F&GS. Meanwhile, SIS is a complete, systematic concept. As can be seen from its name, it is a complete concept, a system that places more emphasis on integrity. ) u$ p t" |* z# MThe overall security is based on a comprehensive set of security mechanisms, which includes security controllers (such as ESD, F&GS, BMS, etc.), safety-rated instruments, safety-rated actuators, 2 y9 H( u- Q0 d9 g safety-oriented software (function block libraries, interlock specifications), and even \"secure communication functions\" (this term is rarely used these days). The concept of integrity for SIS should also include standards that apply throughout the entire lifecycle of the safety control system, such as during the initial design phase, the construction phase, and commissioning ； Final trial operation, evaluation, and verification. T: H1 R( ^+ I. }Subsequent maintenance. Dismantling before the end of the safety lifecycle. . . $ In short, the concept of SIS is very comprehensive and extensive. – The first to get confused is always the design institute, and then the design institute confuses the client as well. . . Then many people who work on SIS and adjust ESD, having done it for several years, are also a bit confused about the concepts. B Why, in these past few years, has the concept of SIS been mentioned more often during bidding processes? 4 k2 B3 ^% G2 K, N0 I+ z# a7 ^Theoretically, only ESD exists; it is not necessarily a complete SIS control system. ESD is merely one component of SIS, and it is located in the physical hardware; it is the most important component among them. $ h! u! E9 l& oTherefore, many people think that SIS is the same as ESD. . . ESD is SIS. With ESD, there are also many surrounding supporting devices. A SIS control system can then be formed. # F+ e5 R% }0 U{ To be honest, it’s basically the same as before; but at least it shows that our users have made progress in terms of their overall understanding of security concepts. ) Q' G: A4 A' c, m: G' H Whether it’s progress resulting from being misled or from genuine improvement, it’s still progress anyway. Similarly, (I once heard a well-known deputy manager of the sales department for DCS systems say in person that Siemens’ PCS7 DCS is actually the S7-400 PLC, and the S7-400 PLC is again the PCS7 DCS – haha); }- o# c, e) }; O- R0 s4 y: C- WMany things are not simply equivalent to each other! 5 ~' Y8 %> x5 X: e Additional concept, ITCC. Control of high-speed rotating equipment, such as steam turbine unit control, air compressor control, and blast furnace blower control. Even turbine engine control, gas turbine control. 8 L( _" G1 V: o is another concept. : For example, controllers from Triconex can perform ITCC functions in addition to ESD and F&GS functions. Systems such as ESD, F&GS, and other systems based on SIS concepts require certification; they must have a SIL rating certificate issued by TUV. ' f0 h$ p2 k* q. ~4 v3 i6 L; for those working in ITCC, TUV certification is not necessarily required. 9 k% q( d0 r* l% F7 r+ s7 ^The same thing from the same manufacturer can be used in different situations and serve different purposes; therefore it has different names. By the same logic, if you have a great deal of money at your disposal, you can use Triconex systems for PLCs or small DCS systems; in such cases, you can refer to Triconex systems as PLCs or DCSs – either term is acceptable. & p' CCC is involved in ITCC, not ESD ； Yokogawa and Emerson’s safety systems are basically designed for ESD and F&GS only, without ITCC functionality. / \; { R/ @: ?, E- \& h Triconex provides both ESD and ITCC protection.

The ESD emergency shutdown system, in accordance with the principle of safety and independence, is separate from the DCS distributed control system. How should this sentence be understood?

“The ESD emergency shutdown system, in accordance with the principle of safety and independence, is separate from the DCS distributed control system. ” Both signal acquisition and signal processing must be independent of the DCS. Because normal DCS systems have safety interlock functions built in. With the addition of an ESD system, its sampling and processing capabilities are higher than those of a DCS system. In my personal view, it’s like a second lock on an anti-theft door.

Difference between DCS and ESD: Dynamic control vs. static monitoring and protection; automatic display of faults; it is necessary to test for potential faults; repair time is not that critical; repair time is less important; it can switch automatically or manually; it must always be online, with no downtime allowed

They are independent of each other; one is static and the other is dynamic

Can’t anyone be more specific? It’s still confusing to read. Too professional……