the lhc access system
DESCRIPTION
The LHC Access System. Why do we put doors ? P. Ninin, L. Scibile & the Access project team TS/CSE. LHC Access Project is made of 2 parts: * LHC Access Safety System (High reliability Interlock system) * LHC Access Control System (Industrial Access equipment). - PowerPoint PPT PresentationTRANSCRIPT
Workshop Chamonix XIV , 17-21 January 2005
The LHC Access System
Why do we put doors ?
P. Ninin, L. Scibile & the Access project team TS/CSE
P. Ninin and L. Scibile, TS/CSEWorkshop Chamonix, 17-21 January 2005
LHC Access Project is made of 2 parts:
* LHC Access Safety System (High reliability Interlock system)
* LHC Access Control System (Industrial Access equipment)
Integrated concept for Machine & Experiments
P. Ninin and L. Scibile, TS/CSEWorkshop Chamonix, 17-21 January 2005
LHC Access Control System
Goals:– Manage access right
– Identify user
– Verify authorization
– Automatic or remote access control
Status– Contract running
– System engineering completed
– Site acceptance of “LHC 0” June 2005
P. Ninin and L. Scibile, TS/CSEWorkshop Chamonix, 17-21 January 2005
LHC Access Safety SystemGoals:
– Protect personnel during Beam operation • nobody inside - Stop LHC if a Door is open or an Emergency Stop is
pushed
– Allows Access operation when safety conditions are met• No radiation hazards (LHC beam, RF)
– Distributed, highly reliable interlock system • Strictly designed according to the prescription of the IEC 61508 - Safety
Integrity Level 3
Status:– Specifications review EDMS 456549 (Access Safety Working Group)– HW and SW Architecture prototyping (Siemens Safety Matrix)– Contract for the system integration, installation and commissioning.– On going safety studies
P. Ninin and L. Scibile, TS/CSEWorkshop Chamonix, 17-21 January 2005
LHC Access Safety LHC Access Control
ACCESS SAFETY
ACCESS CONTROL
P. Ninin and L. Scibile, TS/CSEWorkshop Chamonix, 17-21 January 2005
LE PUPITRE DE CONTRÔLEProposal G. Roy, L. Hammouti
Com m ande pour re tirer un VETO +
confirm ation que le VETO est re tiré
Position sûre de tous les EIS (non a lim enté, ferm é etc.)
Com m ande pour envoyer un VETO
MODE Aucun VETO sur le groupe d’EIS correspondant
Position non sûre d’au moins un EIS (alimenté, ouvert, etc.)
Clig n o te m e n t sig n a la n t u n in cid e n t o u a n o m a lie su r le s EIS
co rre sp o n d a n ts (e x in tru sio n )
RF ZONE
TES T LOCAL
OFF
ON
OFF_ Le OFF sur des EIS faisceau/machine (verrouillage en
position sûre des éléments) est toujours possible_ Le OFF sur des EIS accès (verrouillage de la zone) n’est
possible que si la zone est sûre .
IMPORTANT
EIS covered : EIS-f circulant + TED bas de TI2/TI8+ ((SEPT + KICKERS) ou (TBSE + MBI))
SITE 6SITE 3
EIS-m
ONOFF
MA C HINE
EIS-aT
ON OFF
A C C ESTU NNEL
SITE 1
ATLAS
EIS-aT
ON OFF
A C C ESTU NNEL
EIS-aS
ON OFF
A C C ESSER V IC E
EIS-aEx
ON OFF
A C C ESEX PER IENC E
SITE 4
EIS-aT
ON OFF
A C C ESTU NNEL
EIS-aS
ON OFF
A C C ESSER V IC E
EIS-aEx
ON OFF
A C C ESEX PER IENC E
ON OFF
ENA B LE
EIS-aT
ON OFF
A C C ESTU NNEL
ALICE
EIS-aEx
ON OFF
A C C ESEX PER IENC E
SITE 2
EIS-aS
ON OFF
A C C ESSER V IC E
EIS-aT
ON OFF
A C C ESTU NNEL
CMS
EIS-aEx
ON OFF
A C C ESEX PER IENC E
SITE 5
EIS-aS
ON OFF
A C C ESSER V IC E
EIS-aT
ON OFF
A C C ESTU NNEL
EIS-aS
ON OFF
A C C ESSER V IC E
SITE 7
EIS-aT
ON OFF
A C C ESTU NNEL
TI8
EIS-f
ONOFF
FA ISC EA U
EIS-aT
ON OFF
A C C ESTU NNEL
LHC-B
EIS-aEx
ON OFF
A C C ESEX PER IENC E
SITE 8
EIS-aS
ON OFF
A C C ESSER V IC E
TI2
EIS-f
ONOFF
FA ISC EA U
LHC
O K O K
EIS-f
OFF
FA ISC EA U
EIS-a
ON OFF
A C C ES
ON
BIWDelay
RAD.Delay
LOCALRF CONTROL
P. Ninin and L. Scibile, TS/CSEWorkshop Chamonix, 17-21 January 2005
Controlled Area
CCC
Com m ande pour re tirer un VETO +
confirm ation que le VETO est re tiré
Position sûre de tous les EIS (non a lim enté, ferm é etc.)
Com m ande pour envoyer un VETO
MODE Aucun VETO sur le groupe d’EIS correspondant
Position non sûre d’au moins un EIS (alimenté, ouvert, etc.)
Clig n o te m e n t sig n a la n t u n in cid e n t o u a n o m a lie su r le s EIS
co rre sp o n d a n ts (e x in tru sio n )
RF ZONE
TES T LOCAL
OFF
ON
OFF_ Le OFF sur des EIS faisceau/machine (verrouillage en
position sûre des éléments) est toujours possible_ Le OFF sur des EIS accès (verrouillage de la zone) n’est
possible que si la zone est sûre .
IMPORTANT
EIS covered : EIS-f circulant + TED bas de TI2/TI8+ ((SEPT + KICKERS) ou (TBSE + MBI))
SITE 6SITE 3
EIS-m
ONOFF
MA C HINE
EIS-aT
ON OFF
A C C ESTU NNEL
SITE 1
ATLAS
EIS-aT
ON OFF
A C C ESTU NNEL
EIS-aS
ON OFF
A C C ESSER V IC E
EIS-aEx
ON OFF
A C C ESEX PER IENC E
SITE 4
EIS-aT
ON OFF
A C C ESTU NNEL
EIS-aS
ON OFF
A C C ESSER V IC E
EIS-aEx
ON OFF
A C C ESEX PER IENC E
ON OFF
ENA B LE
EIS-aT
ON OFF
A C C ESTU NNEL
ALICE
EIS-aEx
ON OFF
A C C ESEX PER IENC E
SITE 2
EIS-aS
ON OFF
A C C ESSER V IC E
EIS-aT
ON OFF
A C C ESTU NNEL
CMS
EIS-aEx
ON OFF
A C C ESEX PER IENC E
SITE 5
EIS-aS
ON OFF
A C C ESSER V IC E
EIS-aT
ON OFF
A C C ESTU NNEL
EIS-aS
ON OFF
A C C ESSER V IC E
SITE 7
EIS-aT
ON OFF
A C C ESTU NNEL
TI8
EIS-f
ONOFF
FA ISC EA U
EIS-aT
ON OFF
A C C ESTU NNEL
LHC-B
EIS-aEx
ON OFF
A C C ESEX PER IENC E
SITE 8
EIS-aS
ON OFF
A C C ESSER V IC E
TI2
EIS-f
ONOFF
FA ISC EA U
LHC
O K O K
EIS-f
OFF
FA ISC EA U
EIS-a
ON OFF
A C C ES
ON
BIWDelay
RAD.Delay
Example – Access at point 4 during RF tests
During Local Control: Restricted list of people that can access the zone
Local control panel
DELEGATION OF CONTROL
ENABLEENABLE
Access Valves Valves HV inhibit RF inhibit
Activity Mode Stoppers SC Module ACN
Beam CLOSED OUT OPEN OPEN NO NO
Access OPEN-ACCESS IN CLOSED CLOSED YES YES
Conditioning, RF Tests OPEN-RF Enable IN OPEN OPEN NO IF Valves CLOSED
SAFETY MATRIX
Interlock handling: Door opening cuts RF in all cavities. Around 3 secs later (exact time to be determined) the 18 kV cells are opened. The 18 kV is however the ‘legal’ interlock for INB. Handled completely by Access people.
P. Ninin and L. Scibile, TS/CSEWorkshop Chamonix, 17-21 January 2005
LHC Experiments
• Dedicated list for controlling the access to the experimental areas
• Delegation of the Access Control Desks to the experiment control rooms
P. Ninin and L. Scibile, TS/CSEWorkshop Chamonix, 17-21 January 2005
Installation phases
• Between today, the HW commissioning, the machine checkout, and the beam operation?
Installation HW commissioning Machine checkout Beam operation
Installation Access ControlCCC - Surface
+ Where required
Underground Access ControlLimit the constraint of transport
Access safety
LASSCommissioned
RF TestWhen?
LHC phases
P. Ninin and L. Scibile, TS/CSEWorkshop Chamonix, 17-21 January 2005
From Commissioning to LHC Operation
• Access control for the Commissioning– Specific authorization lists– Installation of access points prior to equipment
commissioning– Remote control integrated in the CCC– New training integrated in authorization database– First points to be installed in point 7-8
• Access Safety for the RF Commissioning• Access Safety for the LHC Operation
– Completely tested before the COLD CHECKOUT• Patrol• Safety Matrix• Actions on the machine elements
– INB/DSO tests before FIRST BEAM
P. Ninin and L. Scibile, TS/CSEWorkshop Chamonix, 17-21 January 2005
Conclusion
• For the time being:– In line with LHC planning
– No major technical issues to be solved
• Thanks to:– Access Safety Working Group (G. Roy)
– LHC Area Access Working Group (D. Swoboda)
• Special request to AB:– To finalize the list of equipments (EIS) which needs to be
interlocked with the access.
P. Ninin and L. Scibile, TS/CSEWorkshop Chamonix, 17-21 January 2005
Thanks to the LHC Access projects collaborators
Jean-Francois JugetSerge Di Luca
T. RiescoN. RamaS. Grau
M. MunozF. HavartM. Boffard
E. Sanchez-Corral MenaT. Ladzinski
G. RoyD. Swoboda
G. SmithT. Pettersson
A. DayCEGELEC – SCHNEIDER - SIEMENS