A High Performance HMI Better Graphics For Operations Effectiveness

A High Performance HMI:
Better Graphics for Operations Effectiveness

Bill Hollifield, PAS Principal Consultant
PAS
16055 Space Center Blvd, Suite 600
Houston, TX, USA 77062
(281) 286-6565
e-mail: bhollifield@pas.com
KEY WORDS
High Performance Human Machine Interface, HMI, Operator Effectiveness, Process Graphics
Hollifield, Page 2
ABSTRACT: A HIGH PERFORMANCE HMI: BETTER GRAPHICS FOR OPERATIONS EFFECTIVENESS

Almost all industrial processes are controlled by operators using dozens of graphic screens. The graphic designs
are typically little more than P&IDs covered in hundreds of numbers. This traditional, low performance Human
Machine Interface (HMI) paradigm is typical in all processes controlled by DCS and SCADA systems, including the
water and wastewater sector. It has been shown to be lacking in both providing operator situation awareness
and in facilitating proper response to upsets. In many industries, poor HMIs have contributed to major
accidents, including fatalities.
HMI improvement has become a hot topic. The knowledge and control capabilities now exist for creating High
Performance HMIs. These provide for much improved situation awareness, improved surveillance and control,
easier training, and verifiable cost savings.
This paper will cover:
HMIs Past and Present

Common but Poor HMI Practices
Justification for HMI Improvement What Can You Gain?
High Performance HMI Principles and Examples
Depicting Information Rather Than Raw Data
The Power of Analog
Proper and Improper Use of Color
Depicting Alarm Conditions
Trend Deficiencies and Improvements
Display Hierarchy and the Big Picture
The High Performance HMI Development Work Process
Obstacles and Resistance to Improvement
Cost-effective Ways to Make a Major Difference
Implementation of proper graphic principles can greatly enhance operator effectiveness. A High Performance
HMI is both practical and achievable.
Presented at the 2012 ISA Water & Wastewater and Automatic Controls Symposium
Holiday Inn Castle Resort, Orlando, Florida, USA Aug 7-9, 2012 www.isawwsymposium.com
Hollifield, Page 3
A High Performance HMI:

Better Graphics for Operations Effectiveness
Introduction
The human-machine interface (HMI) is the collection of screens, graphic displays, keyboards, switches, and
other technologies used by the operator to monitor and interact with the SCADA system. The design of the HMI
plays a critical role in determining the operators ability to effectively manage the operation, particularly in
response to abnormal situations.
For several reasons, the current design and capability of most HMIs are far from optimal for running complicated
operations. Most of these consist simply of schematic-style graphics accompanied by numbers. Such displays
provide large amounts of raw data and almost no real information. They provide inadequate situation
awareness to the operator.
This paper concentrates on proper and effective design of the graphics used in modern SCADA systems.
HMIs Past and Present

Before the advent of sophisticated digital control systems, the operators HMI usually consisted of a control wall
concept.
The control wall (see Figure 1) had the advantages of providing an overview of the entire operation, many
trends, and a limited number of well-defined alarms. A trained operator could see the entire operation almost
at-a-glance. Spatial and pattern recognition played a key role in the operators ability to detect burgeoning
abnormal situations.
The disadvantages of these systems were that they were very difficult to modify. The addition of incremental
capability was problematic, and the ability to extract and analyze data from them was almost non-existent. The
modern electronic control systems (SCADA & DCS) replaced them for such reasons.
When these systems were introduced, they included the capability to create and display graphics for aiding in
the control of the operation.
Hollifield, Page 4
Figure 1: Example of a Control Wall
However, there were no guidelines available as to how to actually create effective graphics. Early adopters
created graphics that mimicked schematic drawings, primarily because they were readily available.
Graphics such as Figures 2 and 3 were developed over 20 years ago and remain common throughout the
industry. Indeed, inertia, not cost, is the primary obstacle to the improvement of HMIs. Operators become
accustomed to this style of graphic and are resistant to change.
As a result, industries that use modern control systems are now running multi-million dollar operations from
primitive HMIs created decades ago, at a time that little knowledge of proper practices and principles was
available.
Hollifield, Page 5
Figure 3: A Typical Crowded, Schematic-Style Graphic

As SCADA and DCS system hardware progressed, graphics from the manufacturers began to adopt very flashy
design practices. The results were displays that are actually sub-optimal for operators, but operators began
deploying these as well.
Figure 4 is an example of flashy design taken from a power generation facility to illustrate the point. The graphic
dedicates 90% of the screen space to the depiction of 3-D equipment, vibrantly colored operation lines, cutaway
views, and similar elements. However, the information actually used by the operator consists of poorly depicted
numerical data which is scattered around the graphic, and only makes up 10% of the available screen area.
Hollifield, Page 6
Figure 2: An Early Graphic Exhibiting Many Problematic Practices

The limited color palette was used inconsistently and screens began to be little more than crowded displays of
numbers.
Figure 4: A Flashy Graphic Inappropriate for Actual Operational Control

Hollifield, Page 7
There are no trends, condition indicators, or key performance elements. You cannot easily tell from this graphic
whether the operation is running well or poorly. That situation is true for more than 90% of the graphics used
throughout the industry because they were not designed to incorporate such information. Instead, they simply
display
dozens
to
hundreds
of
raw
numbers
without
informative
context.
Justification for HMI Improvement

Poorly performing HMIs have been cited time and again as significant contributing factors to major accidents.
Yet our industry has made no significant change in HMI design. There is another industry that learns from its
accidents and has made phenomenal advancement in HMI design based on new technology. That industry is
avionics. Lack of situation awareness is a common factor cited in aviation accident reports. Modern avionics
feature fully-integrated electronic displays (See Figure 5). These depict all of the important information, not just
raw data, needed by the operator (i.e., pilot). Position, course, route, engine diagnostics, communication
frequencies, and automated checklists are displayed on moving maps with built-in terrain proximity awareness.
Real-time weather from satellite is overlaid on the map. Detailed database information on airports is available
with just a click. Situation awareness and abnormal situation detection is far improved by these advances. This
capability impossible even a dozen years ago in multi-million dollar airliners is now standard on even the
smallest single engine aircraft.
Figure 5: Garmin G1000 Avionics Package in a Small Plane

Since safety is significantly improved with modern HMIs, it is only logical that we would want all operators to
have access to them. Yet most operators have done little to upgrade.
There have been tests involving actual operators running realistic simulations using traditional graphics vs. High
Performance ones. The author participated in a major test of these principles sponsored by the Electric Power
Research Institute (EPRI) at a large coal-fired power plant. The results were consistent with a similar test run by
the ASM (Abnormal Situation Management) Consortium on an ethylene plant. The test showed the high
performance graphics provided significant improvement in the detection of abnormal situations (even before
Hollifield, Page 8
alarms occurred), and significant improvement in the success rate for handling them. In the real world, this
translates into a savings of hundreds of thousands of dollars per year.
Proper Graphic Principles

Ineffectively designed graphics are very easy to find. Simply search the internet for images under the category
HMI. Problems with these graphics include:
Primarily a schematic representation
Lots of displayed numbers
Few trends
Spinning pumps/compressors, moving conveyors, animated flames, and similar distracting elements
Brightly colored 3-D vessels
Highly detailed equipment depictions
Attempts to color code piping with contents
Large measurement unit callouts
Bright color liquid levels displaying the full width of the vessel
Lots of crossing lines and inconsistent flow direction
Inconsistent color coding
Misuse of alarm-related colors
Limited, haphazard navigation
A lack of display hierarchy
Ineffective graphics encourage poor operating practices, such as operating by alarm.
By contrast, High Performance graphics have:
A generally non-schematic depiction except when functionally essential
Limited use of color, where color is used very specifically and consistently
Gray backgrounds to minimize glare
No animation except for specific alarm-related graphic behavior
Embedded, properly-formatted trends of important parameters
Analog representation of important measurements, indicating their value relative to normal, abnormal,
and alarm conditions
A proper hierarchy of display content providing for the progressive exposure of detailed information as
needed
Low-contrast depictions in 2-D, not 3D
Logical and consistent navigation methods
Consistent flow depiction and layout to minimize crossing lines
Techniques to minimize operator data entry mistakes
Validation and security measures
Hollifield, Page 9
Data or Information?
A primary difference of high performance graphics is the underlying principle that, wherever possible, operation
values are shown in an informational context and not simply as raw numbers scattered around the screen.
Information is data in context made useful.
As an example, consider this depiction of a compressor (see Figure 6). Much money has been spent on the
purchase of instrumentation. Yet, unless you are specifically trained and experienced with this compressor, you
cannot tell if it is running at peak efficiency or is about to fail.
55.7 psig
65.1
155.2
135.1
psig
108.2
190.5 psig
166.1 F
2.77
MSCFH
Cooler
Oil 155.2 F
Oil 85.1 psi
West
East
W. Vibration: 2.77
E. Vibration: 3.07
Drive: 232.2 amps
Figure 6: All Data, No Information

The mental process of comparing each number to a memorized mental map of what is good is a difficult
cognitive process. Operators have hundreds of measurements to monitor. Thus the results vary by the
experience and memory of the operator, and how many abnormal situations they have experienced with this
particular compressor. Training new operators is difficult because the building of these mental maps is a slow
process.
Adding more numbers to a screen like this one does not aid in situation awareness; it actually detracts from it.
By contrast, these numbers can be represented in a bank of analog indicators, as in Figure 7. Analog is a very
powerful tool because humans intuitively understand analog depictions. We are hard-wired for pattern
recognition.
With a single glance at this bank of properly designed analog indicators, the operators can tell if any values are
outside of the normal range, by how much, and the proximity of the reading to both alarm ranges and the values
at which interlock actions occur.
Hollifield, Page 10
RECYCLE COMPRESSOR K43
Cool
gpm
Suct
psig
Inter
psig
Dsch
psig
Suct
degF
Inter
degF
Dsch
degF
Motor
Amps
Oil
psig
Oil
degF
290
Alarm
Indicator
Alarm Range
170
38.7
93.1
42.7
185
95
Desirable
Operating
Range
120
170
80
Alarm Range
Figure 7: Analog Depiction of Information

In just a second or two of examination, the operator knows which readings, if any, need further attention. If
none do, the operator can continue to survey the other portions of the operation. In a series of short scans, the
operator can be fully aware of the current performance of their entire span of control.
The knowledge of what is normal is embedded into the HMI itself, making training easier and facilitating
abnormal situation detection even before alarms occur, which is highly desirable.
Color
Color must be used consistently. There are several types of common color-detection deficiency in people,
particularly males (red-green, white-cyan, green-yellow). For this reason, there is a well-known principle for the
use of color:
Color, by itself, is not used as the sole differentiator of an important condition or status.
Most graphics throughout the world violate this principle. Redundant coding of information using additional
methods other than color is desirable. A color palette must be developed, with a limited number of
distinguishable colors used consistently.
Bright colors are primarily used to bring or draw attention to abnormal situations, not normal ones. Screens
depicting the operation running normally should not be covered in brightly saturated colors, such as red or
green pumps, equipment, valves, etc.
Hollifield, Page 11
When alarm colors are chosen, such as bright red and yellow, they are used solely for the depiction of an alarmrelated condition and functionality and for no other purpose. If color is used inconsistently, then it ceases to
have meaning.
So what about the paradigm of using bright green to depict on and bright red for off, or vice versa if you are
in the power industry? This is an improper use of color. The answer is a depiction such as Figure 8.
Figure 8: Depicting Status with Redundant Coding and Proper Color Usage
The relative brightness of the object shows its status, plus a WORD next to it. Things brighter than the
background are on (think of a light bulb inside them). Things darker than the background are off.
Hollifield, Page 12
Alarm Depiction
Proper alarm depiction should also be redundantly coded based upon alarm priority (color / shape / text). Alarm
colors should not be used for non-alarm related functionality.
Figure 9: Depiction of Alarms

When a value comes into alarm, the separate alarm indicator appears next to it (See Figure 9). The indicator
flashes while the alarm is unacknowledged (one of the very few proper uses of animation) and ceases flashing
after acknowledgement, but remains as long as the alarm condition is in effect. People do not detect color
change well in peripheral vision, but movement, such as flashing, is readily detected. Alarms thus readily stand
out on a graphic and are detectable at a glance.
It is highly beneficial to include access within the HMI to the alarm rationalization information contained in the
Master Alarm Database (See Figure 10). If these terms are unfamiliar, you are advised to become familiar with
the 2009 standard, ANSI/ISA18.22009, Management of Alarm Systems for the Process Industries. In the
pipeline industry, recent Control Room Management regulations issued by the Pipeline and Hazardous Materials
Safety Administration (PHMSA) include an alarm management component. An American Petroleum Institute
(API) recommended practice on Pipeline Alarm Management (API RP-1167) was issued in December 2010 and is
expected to be incorporated into future PHMSA regulations.
Hollifield, Page 13
120.1deg C
TI-468-02 Column Overhead Temperature

Alarm: PVHI
Setting: 120 deg C
Priority: 3
Class: Minor Financial
Response Time: <15 min
Alarm Consequences:
Alarm Causes:
Corrective Actions:
Off-spec Production
Excess steam
Adjust base steam rate
Lowered efficiency
Pressure excursion
Check pressure and feed

parameters vs. SOP 468-1
Insufficient reflux
Adjust reflux per

computation; check controller
for cascade mode
Feed composition variance
Check feed composition
Figure 10: Linked Alarm Information

Trends
The most glaring deficiency in HMI today is the general lack of properly implemented trends. Every graphic
generally has one or two values on it that would be far better understood if presented as trends. However, the
graphics rarely incorporate them.
Instead, engineers and managers believe claims that their operators can easily trend any value in the control
system on demand with just a click. This is incorrect in practice; a properly scaled and ranged trend may take 10
to 20 clicks/selections to create, and usually disappears into the void if the screen is used for another purpose!
This deficiency is easily provable; simply walk into the control room and count how many trends are displayed.
Then pick a value at random and ask an operator to create a trend and watch. Our observations, made in
hundreds of control rooms, indicate that trends are vastly underutilized and situation awareness suffers due to
that omission.
Hollifield, Page 14
Figure 11: Trend Depiction of Desirable Ranges

Trends should be embedded in the graphics and appear, showing proper history, whenever the graphic is called
up. This is generally possible, but is a capability often not utilized.
Trends should incorporate elements that depict both the normal and abnormal ranges for the trended value.
There are a variety of ways to accomplish this (See Figure 11).
Hollifield, Page 15
Level Indication
Vessel levels should not be shown as large blobs of saturated color. A simple strip depiction showing the
proximity to alarm limits is better. A combination of trend and analog indicator depictions is even better (See
Figure 12).
100
Crude
Feed
TK -21
Very Poor
Vessel
Level
Indication
Better
Vessel
Level
Indication
2 Hrs
86.5%
Trend and
Analog
Level
Indication
Figure 12: Vessel Levels

Bar Charts
Attention to detail is important. It is typical to use bar charts to show relative positions and values. While this
may be better than simply showing numbers, it is inferior to the use of moving pointer elements since as the
bars value gets low, the bar disappears. The human eye is better at detecting the presence of something than
its absence. The example in Figure 13 is superior in showing relative values, besides the color improvement.
Hollifield, Page 16
Analog Position Poor Bar Graphs

0%
25%
50%
75%
Valve
V-1
V-2
V-3
X-1
X-2
X-3
X-4
S-1
S-2
K-1
K-2
100%
100%
100%
95%
88%
100%
100%
75%
0%
55%
100%
100%
Analog Position - Better
0%
25%
50%
75%
Valve
V-1
V-2
V-3
X-1
X-2
X-3
X-4
S-1
S-2
K-1
K-2
100%
100%
100%
95%
88%
100%
100%
75%
0%
55%
100%
100%
Figure 13: Bars vs. Pointers
Tables and Checklists

Even tables and checklists can incorporate proper principles (See Figure 14). Consistent colors and even status
indication can be integrated.
Hollifield, Page 17
Air
Comp
Status
Mode
Diag
C #1
RUNNING
AUTO
OK
C #2
STOPPED
MAN
OK
C #3
RUNNING
AUTO
OK
C #4
STOPPED
AUTO
FAULT
Startup Permissives
Breaker 15 Power
OK
Oil Temp 16-33
OK
Oil Pres Status
OK
Level in TK-8776
OK
Gen System Status
OK
Comp 88 in Auto
NOT OK
Lineup Ready
OK
Sys Status Checks
OK
Bearing Readouts
NOT OK
Comm check
OK
Outlet Temp < 250
OK
Cooling Flow
NOT OK
Internal Circuit Check
OK
Bypass Closed
OK
AFS Function
OK
Figure 14: Tables and Checklists
There are dozens of additional principles like these. See the References section.
Hollifield, Page 18
Display Hierarchy
Displays should be designed in a hierarchy that provides progressive exposure of detail. Displays designed from a
stack of schematic designs will not have this; they will be flat like a computer hard disk with one folder for all
the files. This does not provide for optimum situation awareness and control. A four-level hierarchy is desired.
Level 1 Operation Overview

This is a single display showing the operators entire span of control, the big picture. It is an overall indicator as
to how the operation is running. It provides clear indication of the current performance of the operation by
tracking the Key Performance Indicators (See Figure 15).
Control interactions are not made from this screen.
Reactor 1
Comp A Comp B
Run Plan:
Actual:
Cool
CPC
Key Performance Indicators
Hydrog A
CRM
LVL
Prod:
State:
Agit:
Locks:
Thionite
Mid-Run
ON
CLEAR
Balance
IN
Bed
A1
Cycle
Comp A
Conversion Efficiency
Bed
A2
80
Dsch
Suct
OUT
500
80.0
F
L
O
W
Rate
VIB:
BRG:
OIL:
Locks:
72.0
2 HR
Reactor 2
Run Plan:
Actual:
Cool
CPC
1.0
470
2 HR
CRM
LVL
Prod:
State:
Agit:
Locks:
CRM-114
Mid-Run
ON
CLEAR
Bed
B1
Cycle
Comp B
Bed
B2
Feed System
Balance
IN
OUT
500
VIB:
BRG:
OIL:
Locks:
2 HR
P1 P2 P3 P4
Toggle
2
0
1
4
List /Summary
1
0
0
1
2 071608 08:55:07 RX2 LOW CRM QUALITY EXC
OK
OK
OK
CLEAR
Aux Systems
Feed A
Feed B
Feed C
Atv 1
Atv 2
Pres
%IP
T-In
T-Out
Visc
SynG
CWT
CWP
S10
S200
PWR
VentP VentT
MGA
C57D
Null-A
Grok
F
L
O
W
Rate
60.0
12 HR
0.5
Dsch
Suct
68.0
Alarms:
ACK
UNACK
12 HR
70
Emissions Limit Ratio
Hydrog B
2
Comp A Comp B
OK
OK
OK
CLEAR
470
2 HR
Main
Menu
Reactor
1
Reactor
2
Hydrog
A
Trend
Control
Feed
Sys
Aux
Sys
Menus
Hydrog
B
Clr
L2
L3
Jup2
L4
Figure 15: Example Level 1 Display

Level 2 Unit Control
Every operation consists of smaller, sectional unit operations. A level 2 graphic exists for each separate major
unit operation. It is designed to contain all the information and controls required to perform most operator
tasks associated with that section, from a single graphic (See Figure 16).
Hollifield, Page 19
Feed Components: A - B - C
Main Feed
P 76.8 MPH
S 76.0
O 88.5 %
AUTO
80.0
Reactor
40.0
M5
Product: Thionite
VENT SYS
Agitator
ON
Analysis: Purity %
State:
Mid-Run
Material Balance
M5 Pressure
P 98.0 psig
S 95.0
O 44.3 %
AUTO
SHUT
DOWN
M5
Reset
IN
OUT
+10%
Main Feed MPH

+/- 5 psi, 2hr
32.0
6.0
72.0
-90
-60
-60
+/- 1 %, 2hr
-30 2 Hours
Analysis: Inhibitor Concentration %
-10%
-30 2 Hours
M5 Level %
P 71.0 %
S 70.0
O 54.3 %
AUTO
Additive 1
P 11.9 MPH
S 12.0
O 22.3 %
AUTO
14.0
-90
FREEZE
M5
4.0
-90
Additive 1 MPH
-60
19707
ISOLATE
M5
-30 2 Hours
19301
Calc Diff: 2.1 %

Hours: 238.1
Since: 06/02/07
14:00:00
Run Plan:
Actual:
5.0 %
92.0 MPH
PRODUCT
52.3 %
Hours
10.0
-90
-60
-30 2
Pumps
Pump 1
Needed 1 RUNNING
Additive 2
P
4.0 MPH
4.0
S
O 44.3 %
AUTO
6.0
4
M5 Temp
P 45.0 C
S 45.0
O 54.3 %
AUTO
To Coils
Additive 2 MPH
2.0
Diagnostics Pump 2
1-OK 2-BAD STOPPED
-90
Main
Menu
-60
Coolant
Purge
Cat.
Flow
Rate
Activity
Coolant
Conversion
Reserve
Temp
Efficiency
Capacity
-30 2 Hours
Level 1
Reaction
Overview
M4
M6
Trend
Control
Feed
System
Product
Recovery
COOLING SYS
M5
Startup
Overlay
48.0
Temperature C
40.0
M5
Sequence
Overlay
-90
- Level 3 M5
Interlocks
-60
-30 2 Hours
- Level 3 M5 Cooling
System
Figure 16: Example Level 2 Display of a Reactor

Level 3 Unit Detail
Level 3 graphics provide all of the detail about a single piece of equipment. These are used for a detailed
diagnosis of problems. They show all of the instruments, interlock status, and other details. A schematic type of
depiction is often desirable for a Level 3 displays (See Figure 17).
Hollifield, Page 20
Figure 17: Example Level 3 Display

Level 4 Support and Diagnostic Displays
Level 4 displays provide the most detail of subsystems, individual sensors, or components. They show the most
detailed possible diagnostic or miscellaneous information. The dividing line between Level 3 and Level 4 displays
can be somewhat gray.
Pipeline Network or Distribution Overview Displays

Pipeline networks are used in many industries, including water collection/distribution networks and in the
oil/gas sector. Most existing displays that purport to be Overviews of a pipeline network are simply geographical
layouts of the network covered in numbers. Figure 18 is a mock-up example of such a typical depiction. For a
pipeline network overview display, there are certainly important items related to the geography, but this detail
level is distracting and unhelpful to the operator.
Hollifield, Page 21
42.87
11.55
60.02
21.43
12.44
2.34
18.48
17.36
32.17
40.56
27.81
31.41
38.33
29.927
Figure 18: Typical Low-Performance Pipeline Network Overview

There exists a highly successful technique for depicting geographic networks in a way that strips out all of the
nonessential information, leaving what is important to the user and the task at hand. That technique is in the
depiction of subway systems.
Early versions of the depiction of the London subway system were confusing to the user (see figure 19.)
Hollifield, Page 22
Figure 19: Original 1908 Depiction of the London Subway System

In the 1930s, this depiction was modified and has since become a world-famous and universally adopted graphic
technique for subway depiction. The key is the depiction of topography, not geography.
Hollifield, Page 23
Figure 20: Topological London Subway Routing Diagram

In the Figure 20 depiction, all lines (including the Thames river) are horizontal, vertical, or at 45 degrees. The
outlying legs are shown as straight lines regardless of the actual routing. This is because the subway rider only
needs to know how many stops remain to the destination or terminal, and not the precise direction of travel at
any point. Enough geographical cues are shown to identify start points and destinations. While complex and
showing a lot of information, the actual use of this drawing for navigation is simple and intuitive. Along with the
announcements and labeling on the trains and at the stations, the diagram provides for good situation
awareness for the task at hand, even by newcomers to the subway system.
The kinds of geographic information that can be important for depiction of a distribution system (particularly for
pipelines carrying hazardous materials) include:
Jurisdictional or regulatory boundaries

Proximity to waterways, residential spaces, or similar areas significantly affected by potential releases
Proximity to response services
Important Status Conditions and Alarms
Significant highway or waterway crossings
A high performance display will incorporate such information along with:
Moving analog indicators indicating performance.

Direction and content indicators
Important trends
Important status and alarms
Translated to a pipeline network, a conceptual High Performance Overview display might resemble figure 21.
Hollifield, Page 24
Station Status
XFER
Altair 4
Mesklin
A B C D E F G H
A A A A M A A A
Diag
Arrakis
A B C D E F G H
A A A A M A A A
Trantor
A B C D E F G H
A A A A M A A A
A B C D E F G H
A A A A M A A A
H
A
B
C
D
ON
ON
ON
ON
E
F
G
H
OFF H
ON
ON
ON
113 112
0
112
113 113 113 112
42
43
42
44
43
43
43
8.0
10.0 0.6
9.5
9.8 9.5 9.8 9.0
75 78 78 75 51 50 75 55
74 77 45 74 50 50 65 51
Pipeline Permissives
Breaker 15 Power
OK
Oil Temp 16-33
OK
Oil Pres Status
OK
Level in TK-8776
OK
Gen System Status
OK
Comp 88 in Auto
NOT OK
Lineup Ready
OK
Sys Status Checks
OK
Bearing Readouts
NOT OK
Comm check
OK
Outlet Temp < 250
OK
Cooling Flow
NOT OK
Internal Circuit Check
OK
Bypass Closed
OK
AFS Function
OK
08-15-2009 14:22:09
Econ
O2 %
100%
A2 BFP
KLB/HR
100%
100%
95%
88%
100%
100%
75%
0%
55%
5.0
1800
A2 BFP
Recirc
Selector
B2 BFP
Recirc
Selector
VALVE
FORCED
OPEN
VALVE
FORCED
OPEN
1800
VALVE
CONTROLLED
100%
100%
PULV A
B2 BFP
KLB/HR
AUTO
5.0
50%
Minbari
River
VALVE
CONTROLLED
AUTO
1800
50%
AUTO
1800
50%
Arrakis
Trantor
Terminus
Gateway
Mesklin
FUEL
MASTER
MAN
Altair 4
TX LA
Figure 21: Conceptual High-Performance Pipeline Network Overview

65.1
AUTO
65.0
50.1%
API-RP-1165: Recommended Practice for Pipeline SCADA Displays

PULV B
D PULV
E
PULV
F PULVa
G document
PULV H
In PULV
2006,
API
issued
on Pipeline SCADA HMI displays. There are some inconsistencies within that
document. This is significant because some parts of API-RP-1165 have been incorporated into federal
regulations issued by PHMSA.
PULV C
Overall, the concepts incorporated in the text portion of the document are valid. It mentions several good
practices. The examples section, however, provides several depictions that are in direct violation of those very
text principles!
For example, Section 8.2.4 properly states that Color should not be the only indication for information. That is,
pertinent information should also be available from some other cue in addition to color such as a symbol or piece
of text.
Yet throughout the remainder of the document, examples are shown that routinely violate this principle. Figure
22 shows only a few of the recommended practice examples from API-RP-1165. In many of these examples,
Hollifield, Page 25
only subtle color differences, not distinguishable by a substantial fraction of the operator population, are the
only means to distinguish a significant status difference.
In one table, API-1165 recommends color coding alarms by type. The well-known best practice is that they are
redundantly coded by priority, not type (see Figure 22.)
Users of API-1165 are therefore advised to pay more attention to the principles it contains than to the example
depictions.
BACKGROUND
COLOR
STATE
FOREGROUND
COLOR
EXAMPLE
Color
Green
Red
Yellow
Yellow
Red
Blue
1234
1234
1234
1234
1234
1234
Color
Normal
High-High Alarm
High Alarm
Low Alarm
Low-Low Alarm
Unknown/Error
Black
Black
Black
Black
Black
Black
4 Way Valve Symbols
RIGHT <- Device State
Field ID -> ABC
T <- Tag
Data Attribute
STATIC
T
RIGHT
T
RUN
ABC
ABC
RIGHT
T
RIGHT
ABC
T
RIGHT
LEFT
RIGHT
ABC
RIGHT
LEFT
T
LEFT
ABC
T
LEFT
TRANSIT
T
LEFT
ABC
T
LEFT
UNKNOWN/
ERROR
INVALID
T
TRN
ABC
T
TRN
INV
ERR
ABC
T
INV
ERR
Tagged
T
LEFT
ABC
T
LEFT
Offscan
O
ABC
T
ABC
T
RIGHT
ABC
RIGHT
ABC
T
LEFT
ABC
T
LEFT
ABC
T
TRN
ABC
T
INV
ERR
ABC
T
LEFT
Manual
M
ABC
T
MT
ABC
Comm Failure
T
RIGHT
RIGHT
Communication
Failure (Stale)
ABC
T
ABC
T
RIGHT
ABC
T
RIGHT
ABC
T
LEFT
ABC
LEFT
ABC
T
LEFT
ABC
ABC
T
LEFT
MT
ABC
Alarm Inhibited
T
TRN
S
TRN
ABC
T
INV
ABC
INV
ERR
ABC
ERR
ABC
T
LEFT
ABC
T
LEFT
Alarm Inhibit
I
ABC
T
ABC
T
RIGHT
Tagged
ABC
RIGHT
ABC
T
LEFT
ABC
T
LEFT
ABC
T
TRN
ABC
T
INV
ABC
ERR
Off Scan
ABC
ABC
ABC
ABC
ABC
ABC
ABC
Station ABC
U1
T
RUN
OPN
RUN
U2
OPN
OPN
% Open
OPN
123.4
V8
V9
V10
V11
V12
T
Case
OPN
Psi
123.4
V7
T
Suction
DIscharge
Psi
123.4
T
T
V5
T1
Suction SP
OPN
Discharge SP
Psi
Psi
123.4
T
T1
OT
Psi
T
CLS
123.4
RUN
123.4
V13
OPN
Tank Level
V6
50.0
T
T
V1
To Station BCD
OPN
V3
OPN
CLS
V4
T T
V2
T
T
V15
OPN
V16
CLS
OPN V14
OPN
T T
OPN
V17
To Station DEF
Figure 22: Sub-optimal Examples from API-RP-1165
Hollifield, Page 26
The Seven Step Work Process

There is a seven step methodology for the development of a high performance HMI.
Step 1: Adopt a high performance HMI philosophy and style guide. A written set of principles detailing the
proper way to construct and implement a high performance HMI is required.
Step 2: Assess and benchmark existing graphics against the HMI philosophy. It is necessary to know your starting
point and have a gap analysis.
Step 3: Determine specific performance and goal objectives for the control of the operation and for all modes of
operation. These are such factors as:
Safety parameters/limits
Production rate
Run length
Equipment health
Environmental (i.e. Emission control)
Production cost
Quality
Reliability
It is important to document these, along with their goals and targets. This is rarely done and is one reason for
the current state of most HMIs.
Step 4: Perform task analysis to determine the control manipulations needed to achieve the performance and
goal objectives. This is a simple step involving the determination of which specific controls and measurements
are needed to accomplish the operations goal objectives. The answer determines the content of each Level 2, 3,
and 4 graphic.
Step 5: Design high performance graphics, using the design principles in the HMI philosophy and elements from
the style guide to address the identified tasks.
Step 6: Install, commission, and provide training on the new HMI.
Step 7: Control, maintain, and periodically reassess the HMI performance.
Conclusion
Sophisticated, capable, computer-based control systems are currently operated via ineffective and problematic
HMIs, which were designed without adequate knowledge. In many cases, guidelines did not exist at the time of
graphic creation and the resistance to change has kept those graphics in commission for two or more decades.
The functionality and effectiveness of these systems can be greatly enhanced if redesigned in accordance with
proper principles. A High Performance HMI is practical and achievable.
References
Hollifield, B., Oliver, D., Habibi, E., & Nimmo, I. (2008). The High Performance HMI Handbook.
Hollifield,B., Perez, H., Crawford, W., (2009), Electric Power Research Institute (EPRI), Operator HMI Case Study:
The Evaluation of Existing Traditional Operator Graphics vs. High Performance Graphics in a Coal Fired Power
Plant Simulator, Product ID 1017637, Note: currently available only to EPRI members
Hollifield, Page 27
About the Author

Bill Hollifield is the PAS Principal Alarm Management and HMI Consultant. He is a voting member of the ISA SP18 Alarm Management committee, the ISA-101 HMI committee, and the American Petroleum Institutes
committee for API-1167 Recommended Practices for Alarm Management of Pipeline Systems.
Bill is also the coauthor of The Alarm Management Handbook, The High-Performance HMI Handbook, and the
Electric Power Research Institutes Alarm Management and Annunicator Application Guidelines. Bill has
international, multi-company experience in all aspects of Alarm Management and HMI, along with many years of
chemical industry experience with focus in project management, chemical production, and control systems.
Bill has authored several papers on Alarm Management and HMI, and is a regular presenter on such topics in
such venues as API, ISA, and Electric Power symposiums. He has a BSME from Louisiana Tech University and an
MBA from the University of Houston. Hes a pilot, built his own aircraft (a Vans RV-12, with a High Performance
HMI!), and builds furniture (and the occasional log home in the Ozarks) as a hobby.
Bill and Sweetie
About PAS
PAS (www.pas.com) improves the automation and operational effectiveness of power and process plants
worldwide by aggregating, contextualizing, and simplifying relevant information and making it universally
accessible and useful. We provide software and services that ensure safe running operations, maximize situation
awareness, and reduce plant vulnerabilities. Our comprehensive portfolio includes solutions for Alarm
Management, Automation Genome Mapping, Control Loop Performance Optimization, and High-Performance
Human-Machine Interfaces. PAS solutions are installed in over 1,000 industrial plants worldwide.

A High Performance HMI Better Graphics For Operations Effectiveness

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

A High Performance HMI Better Graphics For Operations Effectiveness

Uploaded by

Copyright:

Available Formats

A High Performance HMI:

Better Graphics for Operations Effectiveness

ABSTRACT: A HIGH PERFORMANCE HMI: BETTER GRAPHICS FOR OPERATIONS EFFECTIVENESS

HMIs Past and Present

A High Performance HMI:

HMIs Past and Present

Figure 1: Example of a Control Wall

Figure 3: A Typical Crowded, Schematic-Style Graphic

Figure 2: An Early Graphic Exhibiting Many Problematic Practices

Figure 4: A Flashy Graphic Inappropriate for Actual Operational Control

Justification for HMI Improvement

Figure 5: Garmin G1000 Avionics Package in a Small Plane

Proper Graphic Principles

Drive: 232.2 amps

Figure 6: All Data, No Information

Figure 7: Analog Depiction of Information

Figure 9: Depiction of Alarms

TI-468-02 Column Overhead Temperature

Setting: 120 deg C

Class: Minor Financial

Response Time: <15 min

Adjust base steam rate

Check pressure and feed

Adjust reflux per

Feed composition variance

Check feed composition

Figure 10: Linked Alarm Information

Figure 11: Trend Depiction of Desirable Ranges

Figure 12: Vessel Levels

Analog Position Poor Bar Graphs

Tables and Checklists

Level 1 Operation Overview

Key Performance Indicators

Emissions Limit Ratio

Figure 15: Example Level 1 Display

Main Feed MPH

Analysis: Inhibitor Concentration %

Calc Diff: 2.1 %

Figure 16: Example Level 2 Display of a Reactor

Figure 17: Example Level 3 Display

Pipeline Network or Distribution Overview Displays

Figure 18: Typical Low-Performance Pipeline Network Overview

Figure 19: Original 1908 Depiction of the London Subway System

Figure 20: Topological London Subway Routing Diagram

Jurisdictional or regulatory boundaries

A high performance display will incorporate such information along with:

Moving analog indicators indicating performance.

Figure 21: Conceptual High-Performance Pipeline Network Overview

API-RP-1165: Recommended Practice for Pipeline SCADA Displays

RIGHT <- Device State

Field ID -> ABC

Figure 22: Sub-optimal Examples from API-RP-1165

The Seven Step Work Process

Environmental (i.e. Emission control)

About the Author

Bill and Sweetie

You might also like