1

SIL verificatievoorbeeld:

Mokveld afsluiter / HIPPS

Herman JansenSafety Solutions Consultants

6 november 2008

Locatie HIPPS

Voor de kust van Australie

2

High Integrity Pressure Protection System

Doel Beschermen trunkline tegen overdrukDoel Beschermen trunkline tegen overdrukClient XXX.Leverancier Mokveld Valves in GoudaSIL eis SIL 3Dynamiek 18” afsluiters sluiten binnen 2 seconden

Loop sketch

Logic Solver Yokogawa

ProSafe-SLS

Hydraulic oil

Closure of P luto F lowline B valves

Transmitters Yokogawa EJX

Hydraulic oilsupply

S ol. valves Maxseal ICO4S

Hydraulic oil supply

P ilot valves LODC-XDN S UN

Astava Manifold

Dry ManifoldF low reg

18” Class 1500Mokveld R ZD-X-S AV

valves

P luto F lowline A

P luto F lowline B

Dry Manifold

P ipe spec break

F low reg. valve

3

Pressure impulse lines

Blockage or plug may lead to loss of function of the connected pressure measurementconnected pressure measurement.

Dangerous undetected failure rate: 2,5·10-7/hour (Exida scenario ‘plugging unlikely’).* 2 out of 3 architecture (2oo3).* Common Cause factor: 30 %* The assumed DC 90%* Yearly proof tests. Proof test coverage factor is 95 %.

The calculated PFD = 8.9·10-5

Pressure impulse lines

Info van Exida

4

ASTAVA interlocking manifold

Certified for SIL 4 SFF=100%PFDavg= 4.3·10-5

Yokogawa pressure transmitters, Type: EJX530ACertified by TÜViT and Exida Dangerous undetected failure rate: 3.4·10-8/hourDangerous undetected failure rate: 3.4 10 8/hour* 2 out of 3 architecture (2oo3).* Common Cause BETA factor: 5 %* The assumed DC 90%* Yearly proof tests. Proof test coverage factor is 95 %* SFF=93% type B.

The calculated PFD = 6.2·10-5

5

Yokogawa Logic Solver ProSafe-SLS

SIL 4 certifiedSIL 4 certified

PFD = 1.2 ·10-5 testperiod: 1 year.

Solenoid valves, type type Maxseal ICO4S

CertifiedLambda-DU: 1 4·10-7 / hLambda-DU: 1.4 10-7 / h.1 out of 4 architecture (1oo4).BETA factor: 5 %The assumed DC 90%Yearly proof tests.Proof test coverage: 95 %SFF>90% type A.ypCal. lambda-DU 1oo2: 8·10-9 / h

6

Solenoid valves, type type Maxseal ICO4S

No vendor information Dangerous undetected failure rate of a single pilot valve is

Pilot valves, type type SUN Hydraulic, LODC-XDN

0.9·10-6 / hour. SFF: 72% Type A (SINTEF)* 1 out of 4 architecture (1oo4).* Common Cause BETA factor: 5 %* The assumed DC 90%* Yearly proof tests. Proof test coverage factor is 95 %* SFF>90% type A.* D f il t f th 1 2 i 5 3 10 8 / h* Dangerous failure rate of the 1oo2 is 5.3·10-8 / hour

7

Pilot valves, type type SUN Hydraulic, LODC-XDN

Info van Exida

Mokveld valves

k ld f l iMokveld afsluiter RZD-X-SAVTÜV gecertificeerd:

‘Suitable for safety related applications up to and including SIL 3’.

8

TÜV report Mokveld afsluiter

TÜV report Mokveld afsluiter

9

TÜV report Mokveld afsluiter

Clean duty

TÜV report Mokveld afsluiter

Unclean duty

10

Failure rate for Pluto application

Mokveld failure rates acc. to the TÜV report (unclean duty):Full stroke failure 8.62·10-8/hLeakage 1.18·10-6/hSFF= 80%.Assumed Mokveld dangerous failure rate for the Pluto flowlines (20% probability that leakage will really lead to LOC):F ll t k f il 8 62 10 8/hFull stroke failure 8.62·10-8/hLeakage 20% of 1.18·10-6/h= 2.36·10-7/h +

Totally 3.22 ·10-7/h

PFD Mokveld afsluiters

The dangerous failure rate of a Mokveld valve+ 2 Sun pilotvalves + 2 Maxseal solenoid valves is:valves + 2 Maxseal solenoid valves is:3.22 ·10-7/h + 0.08·10-7/h + 0.53 ·10-7/h = 3.83 ·10-7/h.

The PFD 2 valves & 2 flowlines=2 · 1.27·10-4 = 2.54·10-4.

The calculation is based on yearly prooftest, Proof test coveragefactor of 95 %, overhaul each 10 years and common causeBETA f t f 5%BETA factor of 5%.

11

HIPPS SIL 3 verificatie

Functional requirement

The pressure of the downstream piping/equipment will not exceed the design pressure (closure < 2 seconds).

HIPPS SIL 3 verificatie

Independent layer of protection

The HIPPS is physically and functionally separated from other protective / control systems apart from the monitoring and status signals.

12

HIPPS SIL 3 verificatie

Architectural requirementsHWFT SFF t SILHWFT SFF type max SIL

Sensing part:Impulse lines 1 > 60% A 3Astava I. Man. Certified 4Transmitters 1 93% B 3Logic Solver Certified 4Final Elements:Final Elements:Shut off valves 1 80% A 3Solenoid valves 3 >90% A 4Pilot valves 3 72% A 4

HIPPS 3

HIPPS SIL 3 verificatie

Probabilistic requirementsS i t PFD SILSensing part: PFD SILImpulse lines 8.9 · 10-5Astava interlock. Man. 4.3 · 10-5Transmitters 6.2 · 10-5Logic Solver 1.2 · 10-5Final Elements: 2.54·10-4Shut off valvesShut off valvesSolenoid valvesPilot valves

HIPPS 4.6 · 10-4 3

13

Conclusie

HIPPS voldoet aan de eisen van SIL 3

Jaarlijks testen10-jaarlijks uitnemen van afsluiters voor i t i ti / tiinterne inspectie / reparatie.

Safety Solutions Consultants BV

Laan van Westenenk 5017334 DT ApeldoornThe NetherlandsTel +31 55 549 3362E il j @ f tE-mail jansen@safety-sc.comWebsite www.safety-sc.com