- •Selector controls
- •Override controls
- •Techniques for analyzing control strategies
- •Explicitly denoting controller actions
- •Determining the design purpose of override controls
- •Review of fundamental principles
- •Process safety and instrumentation
- •Explosive limits
- •Protective measures
- •Concepts of probability
- •Mathematical probability
- •Laws of probability
- •Applying probability laws to real systems
- •Practical measures of reliability
- •Failure rate and MTBF
- •Reliability
- •Probability of failure on demand (PFD)
- •High-reliability systems
- •Design and selection for reliability
- •Preventive maintenance
- •Redundant components
- •Overpressure protection devices
- •Rupture disks
- •Safety Instrumented Functions and Systems
- •SIS sensors
- •SIS controllers (logic solvers)
- •Safety Integrity Levels
- •SIS example: burner management systems
- •SIS example: water treatment oxygen purge system
- •SIS example: nuclear reactor scram controls
- •Review of fundamental principles
- •Instrumentation cyber-security
- •Stuxnet
- •A primer on uranium enrichment
- •Gas centrifuge vulnerabilities
- •The Natanz uranium enrichment facility
- •How Stuxnet worked
- •Stuxnet version 0.5
- •Stuxnet version 1.x
- •Motives
- •Technical challenge
- •Espionage
- •Sabotage
- •Terrorism
- •Lexicon of cyber-security terms
- •Design-based fortifications
- •Advanced authentication
- •Air gaps
- •Firewalls
- •Demilitarized Zones
- •Encryption
- •Control platform diversity
- •Policy-based fortifications
- •Foster awareness
- •Employ security personnel
- •Cautiously grant authorization
- •Maintain good documentation
- •Close unnecessary access pathways
- •Maintain operating system software
- •Routinely archive critical data
- •Create response plans
- •Limit mobile device access
- •Secure all toolkits
- •Close abandoned accounts
- •Review of fundamental principles
- •Problem-solving and diagnostic strategies
- •Learn principles, not procedures
- •Active reading
- •Marking versus outlining a text
- •General problem-solving techniques
- •Working backwards from a known solution
- •Using thought experiments
- •Explicitly annotating your thoughts
32.6. SAFETY INSTRUMENTED FUNCTIONS AND SYSTEMS |
2699 |
32.6.6SIS example: water treatment oxygen purge system
One of the processes of municipal wastewater treatment is the aerobic digestion of organic matter by bacteria. This process emulates one of many waste-decomposition processes in nature, performed on an accelerated time frame for the needs of large wastewater volumes in cities. The process consists of supplying naturally occurring bacteria within the wastewater with enough oxygen to metabolize the organic waste matter, which to the bacteria is food. In some treatment facilities, this aeration is performed with ambient air. In other facilities, it is performed with nearly pure oxygen.
Aerobic decomposition is usually part of a larger process called activated sludge, whereby the e uent from the decomposition process is separated into solids (sludge) and liquid (supernatant), with a large fraction of the sludge recycled back to the aerobic chamber to sustain a healthy culture of bacteria and also ensure adequate retention time for decomposition to occur. Separating liquids from solids and recycling the solids ensures a short retention time for the liquid (allowing high processing rates) and a long retention time for the solids (ensuring thorough digestion of organic matter by the bacteria).
2700 |
CHAPTER 32. PROCESS SAFETY AND INSTRUMENTATION |
A simplified P&ID of an activated sludge water treatment system is shown here, showing how both the oxygen flow into the aeration chamber and the sludge recycle flow back to the aeration chamber are controlled as a function of influent wastewater flow:
Oxygen supply
FY
Wastewater |
Primary clarifier |
FT |
Secondary clarifier |
|
influent |
|
|
Aeration |
Treated |
|
|
|
||
|
|
|
chamber |
water |
|
|
|
|
Activated |
|
|
|
Activated sludge recycle |
sludge |
|
Grit and sludge |
|
disposal |
|
|
|
|
||
|
(unactivated) |
FT |
|
|
|
|
|
|
|
|
|
|
M |
|
|
|
k |
FY |
|
FIC
Aerobic decomposition performed with ambient air as the oxidizer is a very simple and safe process. Pure oxygen may be chosen instead of ambient air because it accelerates the metabolism of the bacteria, allowing more processing flow capacity in less physical space. For the same reason that pure oxygen accelerates bacterial metabolism, it also accelerates combustion of any flammable substances. This means if ever a flammable vapor or liquid were to enter the aeration chamber, there would be a risk of explosion.
Although flammable liquids are not a normal component of municipal wastewater, it is possible for flammable liquids to find their way to the wastewater treatment plant. One possibility is the event of a fuel carrier vehicle spilling its cargo, with gasoline or some other volatile fuel draining into a sewer system tunnel through holes in a grate. Such an occurrence is not normal, but certainly possible. Furthermore, it may occur without warning for the operations personnel to take preemptive action at the wastewater treatment plant.
32.6. SAFETY INSTRUMENTED FUNCTIONS AND SYSTEMS |
2701 |
To decrease this safety hazard, Low Explosive Limit (LEL) sensors installed on the aeration chamber detect and signal the presence of flammable gases or vapors inside the chamber. If any of the sensors register the presence of flammable substances, a safety shutdown system purges the chamber of pure oxygen by taking the following steps:
•Stop the flow of pure oxygen into the aeration chamber
•Open large vent valves to atmosphere
•Start air blowers to purge the chamber of residual pure oxygen
Oxygen supply
Control
valve
M
Shutoff
valve
Influent
Air
Vent
LEL M
valve
Blower AAH
Vent
Aeration |
|
Effluent |
chamber |
|
|
|
|
Activated sludge recycle
As with the P&ID, this diagram is a simplified representation of the real safety shutdown system. In a real system, multiple analytical high-alarm (LEL) sensors work to detect the presence of flammable gases or vapors, and the oxygen block valve arrangement would most likely be a double block and bleed rather than a single block valve.
2702 CHAPTER 32. PROCESS SAFETY AND INSTRUMENTATION
The following photograph shows an LEL sensor mounted inside an insulated enclosure for protection from cold weather conditions at a wastewater treatment facility:
In this photograph, we see a purge air blower used to sweep the aeration chamber of pure oxygen (replacing it with ambient air) during an emergency shutdown condition:
Since this is a centrifugal blower, providing no seal against air flow through it when stopped, an automatic purge valve located downstream (not to be confused with the manually-actuated vent valve seen in this photograph) is installed to block o the blower from the oxygen-filled chamber. This purge valve remains shut during normal operation, and opens only after the blower has started to initiate a purge.