CPMS-AUT-EP-010 - Operator HMI and Graphics Specification Guideline PDF

UNCONTROLLED UNLESS VIEWED VIA THE CPMS SITE
Upstream Engineering Standards and

Practices
CPMS-AUT-EP-010
Operator HMI & Graphics Specification

Guideline
(Including Control Room Design)
Recommended Document Retention: ADM220 Administrative, Policy and Procedures; Policy, Directives and Procedures.
Rev.
Technical Authority Reviewed By Approved By Date Description
No.
A Michael Felmingham N.Basey-Fisher 23-Nov-09 Issued for Approval
1 Michael Felmingham N.Basey-Fisher L. C. Krusen 04-Dec-09 Issued for Use
Operator HMI Specification Guideline
CPMS-AUT-EP-010 Revision 1 Page 2 of 27
TABLE OF CONTENTS
1.0 PURPOSE ........................................................................................................................................... 3

2.0 SCOPE ................................................................................................................................................ 3
3.0 REFERENCES.................................................................................................................................... 3
3.1 ConocoPhillips Upstream Engineering Standards & Practices ................................................. 3
3.2 External References .................................................................................................................. 3
4.0 REQUIREMENTS ............................................................................................................................... 4
4.1 Deliverable................................................................................................................................. 4
4.2 Overarching Requirements........................................................................................................ 4
5.0 OPERATOR HMI SPECIFICATION GUIDELINE ............................................................................... 4
5.1 Objectives .................................................................................................................................. 5
6.0 HARDWARE DESIGN PRINCIPLES .................................................................................................. 5
6.1 Control Room Design ................................................................................................................ 5
6.2 Operator Workstation Design .................................................................................................... 5
7.0 OPERATOR DISPLAY DESIGN ......................................................................................................... 9
7.1 Display Hierarchy ...................................................................................................................... 9
7.2 Operating Display Format........................................................................................................ 11
8.0 DISPLAY STYLE...............................................................................................................................13
8.1 Color ........................................................................................................................................ 13
8.2 Grey Scale ............................................................................................................................... 14
8.3 Salient Color ............................................................................................................................ 15
8.4 Process Lines .......................................................................................................................... 16
8.5 Information and Data Display .................................................................................................. 17
8.6 Process Data Display .............................................................................................................. 18
8.7 Dynamic Process Objects ....................................................................................................... 19
9.0 SYMBOLOGY ................................................................................................................................... 20
9.1 Vessels .................................................................................................................................... 21
9.2 Heat Exchangers ..................................................................................................................... 21
9.3 Rotating Equipment ................................................................................................................. 22
9.4 Valves and Actuators............................................................................................................... 23
9.5 Faceplate, Point Detail, and Group Display for Zone 3.......................................................... 24
9.6 Electrical Schematics .............................................................................................................. 25
9.7 Fire & Gas................................................................................................................................ 26
This document may not be used or reproduced without the permission of ConocoPhillips.
1.0 PURPOSE
The purpose of this guideline is to describe the scope and the contents required of an asset
specific Operator HMI (Human-Machine Interface) Specification. This guideline is based on, and
provides an overlay to, the recommendations of ISO 11064 Parts 1 through 7 Ergonomic Design
of Control Centers.
2.0 SCOPE
This guideline applies to all Upstream Capital Facilities where ConocoPhillips, or an affiliate, is
the Operator. The guideline does not apply to existing operational facilities unless adopted
specifically by local Business Unit Management. It may be made available for consideration by
Joint Ventures. Regulatory compliance is mandatory and the more stringent requirements of
regulations over this guideline shall be applicable.
3.0 REFERENCES
3.1 ConocoPhillips Upstream Engineering Standards & Practices
DOCUMENT DOCUMENT NUMBER

Alarm Management Standard CPMS-AUT-ES-002
Alarm Management Philosophy Guideline CPMS-AUT-EP-007
Alarm Management Overview CPMS-AUT-EP-008
Alarm Management Assessment & Benchmarking CPMS-AUT-EP-009
Alarm System Specification Guideline CPMS-AUT-EP-011
3.2 External References
ORGANISATION TITLE REVISION ISBN

ISO 11064 Ergonomic Design of
Control Centers
ISO 11064 Part 1 Principle for the design of 2001
Control Centers
ISO 11064 Part2 Principles for the 2001
arrangement of Control
Suites.
ISO 11064 Part 3 Control Room layout 2000
ISO 11064 Part 4 Layout and dimensions of 2004
Workstations.
ISO 11064 Part 5 Displays and Controls 2008
ISO 11064 Part 6 Environmental 2005
requirements of Control
Centers
ISO 11064 Part 7 Principles for the 2006
evaluation of Control
Centers
API RP 1165 Recommended Practice 2007
for Pipeline SCADA
System Displays
External References - Continued
ASTM F1166 Human Engineering 2007

Design for Marine
Systems Equipment and
Facilities
NORSOK I-002 Safety and Automation Rev 2 2001
System (SAS)
EEMUA Process Plant Control 2002 0 85931 136 8
Desks Utilizing Human-
Computer Interfaces
Publication No. 201
ASM Consortium Effective Operator Display 5.02 2007
Design
ISA Human-Machine Interface 2009 978-1-934394-
Design for Process Control 35-9
Applications
ISA S5.5 Graphic Symbols for 1985
Process Displays
4.0 REQUIREMENTS
4.1 Deliverable
A documented Operator HMI Specification is required prior to the end of the FEL-2 phase of a
project, to be submitted as part of the AFE review package.
4.2 Overarching Requirements
The Operator HMI Specification shall, by complying with the recommendations of ISO 11064
Parts 1 through 7 Ergonomic Design of Control Centers, for the lifecycle of the asset:
• Define the process for the development, ongoing management, and improvement, of Human-
Machine interfaces in respect of process control.
• Define the organizational roles and responsibilities for reviewing, maintaining and improving
Human-Machine interfaces.
• Recognize the need for change management, and provide guidelines specific to the
management Human-Machine interfaces, whilst being cognizant of the Business Unit
Management of Change System.
• Define the requirements for the training and education of Operators, Engineers, and
Management on the elements of Human-Machine interface which directly affect operator
performance.
Country specific Standards shall be recognized in that they may take precedence over the
requirements of this guideline.
5.0 OPERATOR HMI SPECIFICATION GUIDELINE
By using this Guideline it should be possible for the Asset to develop an Operator HMI
Specification which complements the requirements of the Alarm Management Standard, and if
utilized correctly, a level of risk mitigation for the Operator interface, commensurate with
ConocoPhillips HSE Management System requirements.
5.1 Objectives
The key objective is to provide the Operator with a Human-Machine interface that:
• supports timely and informed decision making during all facets of operation, and
• assists the operator to prioritize their response during process disturbances or shutdown
events, and
• does not overload the operator with irrelevant information, and
• does not itself create additional operator workload by virtue of poor design.
6.0 HARDWARE DESIGN PRINCIPLES
To ensure the Operator HMI and graphic displays meet the objectives of this guideline, it is
important to ensure that all aspects of the Control Room design are complementary to a safe and
effective working environment. To meet these ends it is recommended that the ISO 11064
Standard Parts 1 through 7 is followed through all aspects of Control Centre design. Where a
specific ConocoPhillips overlay of any ISO 11064 recommendation is required, then the relevant
parts of the standard will be referenced and specific additions, deletions and or commentary will
be made.
6.1 Control Room Design
The ISO 11064 standard introduces nine principles of good ergonomic design which facilitate a
complete design process. It is recommended that expert help is sourced in carrying out a
detailed ergonomic assessment and interpreting the results. The focus of this standard is on
meeting end user requirements in all facets of operation, and therefore the primary input defining
Control Room Operator roles and responsibilities must come from the Operations group.
The following parts of ISO 11064 will need to be addressed as part of the Control Room design:
Part 1 - Principle for the design of Control Centers
Part 2 - Principles for the arrangement of Control Suites
Part 3 - Control Room Layout
Part 6 - Environmental requirements of Control Centers
Part 7 - Principles for the evaluation of Control Centers
6.2 Operator Workstation Design
ISO 11064 Part 4 specifies the ergonomic principles and requirements to be followed in the
design of operator workstations. The focus is on meeting end user requirements and therefore
operator roles and responsibilities must be fully defined in all facets of operation including start-
up, normal operations, and upset conditions.
Workstation design should address the normal operational phase and not commissioning
activities. The commissioning phase of a project will typically require additional screens to
support loop checking and start-up activities; it is recommended that these take the form of desk
top machines, separate from the main consoles, which are removed at the end of the
commissioning period.
6.2.1 Monitors and Layout
The number of displays, and hence number of monitors required for an individual operator
workstation shall be based on task analysis. In general a dedicated Operator workstation should
have no more than 4 screens, though 6 can be accommodated if the usage of the extra screens
is dedicated with less frequent monitoring e.g. CCTV or corporate network.
To support good ergonomic design, the basic arrangement shall be 2 screens side by side; these
screens will always have the role of primary surveillance and control. Other screens will fulfill
secondary roles such as displaying alarm Summaries, Overviews, and Trends.
Care should be taken in selecting monitors to ensure horizontal and vertical viewing angles are
maintained within normal range with minimum head movement, as defined by ISO 11064 Part 4.
Touch screen monitors shall not be used at seated workstations as they compromise the required
distance between eye and screen.
LCD Flat Panel monitors on swivel mounts shall be used to allow adjustment to meet individual
operator needs.
The optimum monitor size and aspect ratio shall be determined by applying the “space of
Identification” methodology of ISO 11064 Part 4 Annex A. The recommended minimum size for
monitors is 21 inch diagonal up to a maximum of 25 inch.
6.2.2 Large Screen Displays
The use and selection of large screen displays shall be determined by task analysis. They can
form an integral part of the operator workstation replacing the upper row in a multi tier screen
arrangement. Large Screen Displays are available in 3 technologies Plasma, LCD or Projector.
Most large screens available today will have a 16:10 widescreen aspect ratio which may differ
from the workstation screen aspect ratio, and may require the development of dedicated graphic
displays. In most cases the large screen will be used to display overview graphics such as
trends, alarm summaries and overall process status, but can also be used in a split screen
arrangement replacing multiple monitors.
In determining the selection and placement of large screen displays the following items should be
considered:
• If a large screen or screens are to be used to replace an upper tier of monitors i.e. integral to
the console, then placement shall be such that the Operator does not have to refocus when
moving from Operating Displays to the large screen to view, for example, the Alarm
Summary.
• Display content needs to be visible for all users – Plasma screens provide a wide viewing
angle whereas LCD screens have a narrow viewing angle.
• Tasked based lighting in the Control Room will be in the region of 500 lux therefore a high
contrast ratio is recommended to make detail clearly visible. This may be problematic for the
use of Projector displays
• As screens move further away, object size needs to increase to maintain legibility.
• As screen size increases the resolution decreases, requiring a reduction in information
density to maintain legibility.
6.2.3 Keyboards
Two types of keyboard may be available depending on the automation system supplier, the
standard QWERTY keyboard or a proprietary function based keyboard. The proprietary
keyboards are becoming less common, and can be cumbersome to operate in a society that is
well versed in the point and click techniques of modern computer systems; they are also difficult
to integrate into an ergonomically acceptable design, therefore it is recommended that only
QWERTY keyboards are used on the workstation desktop.
Where different functions are integrated into a workstation there is a risk that the desktop
becomes cluttered with keying and pointing devices. To overcome this, the use of
KVM(keyboard/video/monitor) switches may be considered to reduce the ratio of keyboards and

pointing devices to screens.
6.2.4 Pointing Devices
Pointing devices shall be optical mouse or trackball.
Touch screens shall not be used at seated workstations (see 6.2.1)
In selecting pointing devices and determining desktop layout, consideration must be given to both
right-hand and left-hand users.
6.2.5 Input Devices
Emergency Shutdown, Process Shutdown, Bypass and Override permissive key switches, Safety
System hard wired pushbuttons, and lamps shall be mounted integral to the workstation utilizing
logically arranged mosaic tile mimic or matrix panels. On shared workstations the positioning of
this equipment must be considered in the overall ergonomic design to ensure accessibility is
maintained.
Fire & Gas (F&G) Systems - Where an Operator is deemed to have responsibilities for F&G
system monitoring, then the F&G HMI shall be mounted integral to the workstation with dedicated
screens. Pushbuttons for Fire Pump start, deluge release, Fire Extinguishant release etc shall
be mounted immediately adjacent the F&G Screens, utilizing mosaic tile mimic panels of the
facility layout.
Communications Equipment – Radio communications, telephone, public address base stations,
and CCTV control panels shall be mounted integral to the workstation; effort should be made to
provide an integrated solution to minimize real estate. There shall be no freestanding
communications equipment on any work surface. Where communications traffic is high the use
of wireless headsets is recommended. On shared workstations the positioning of
communications equipment must be considered in the overall ergonomic design to ensure
accessibility is maintained.
If Fire & Gas and Emergency Shutdown Panels are specified separate to the main Operator
Workstation, then these shall be clearly visible from the workstation, and the main workstation
screens shall remain clearly visible from the panel location.
EXAMPLE WORKSTATION LAYOUTS
ALARM TREND
SUMMARY DISPLAYS
OPERATING OPERATING OPERATING OPERATING

DISPLAY & DISPLAY & DISPLAY DISPLAY
ALARM TREND
SUMMARY DISPLAY
BASIC WORKSTATION TWO TIER WORKSTATION
MATRIX ALARM TREND ALARM TREND MATRIX ALARM TREND

PANEL SUMMARY DISPLAYS SUMMARY DISPLAYS PANEL SUMMARY DISPLAYS
ESD or ESD or
F&G F&G
COMMS OPERATING OPERATING OPERATING OPERATING COMMS OPERATING OPERATING

PANEL DISPLAY DISPLAY DISPLAY DISPLAY DISPLAY DISPLAY
PANEL
TWO TIER WORKSTATION WITH TWO OPERATOR WORKSTATION

INTEGRAL MATRIX & COMMS WITH SHARED MATRIX & COMMS
LARGE SCREEN SPLIT SCREEN MULTI PROJECTOR LARGE SCREEN

PROCESS ALARM SUMMARY PROCESS OVERVIEWS
OVERVIEW (Integral & TRENDS (Integral (Can be split screen – Overview/Alarm Summary/Trends)
to Console) to Console) Must be close enough to avoid eye strain
MATRIX OPERATING OPERATING MATRIX OPERATING OPERATING COMMS

PANEL DISPLAY DISPLAY DISPLAY DISPLAY PANEL
PANEL
ESD or ESD or
F&G F&G
LARGE SCREEN WORKSTATION LARGE PROJECTOR SCREEN WORKSTATION
7.0 OPERATOR DISPLAY DESIGN

The basic principles of display design are:
• The operator scope of work must be clearly identified to optimize the overall number of
displays, for an efficient operator workload.
• Every display must be in context for the user and contribute to the operational goals of safety,
and productivity.
• The display design must complement the Alarm System Philosophy, and remain usable in all
facets of control.
7.1 Display Hierarchy
A structured display hierarchy shall be developed which provides logical navigation and linking.
The display hierarchy should be in the form of a tree which determines the parent child
relationships of the displays. There shall be no floating displays which have no logical linkage.
There shall be a maximum of 4 levels in the display hierarchy to ensure the Operator is not
burdened with excessive navigation to get to detail displays.
Level 1 - Overview displays. This may be one display on a small process, or multiple displays
on large process systems. The overview display(s) will always be the top level
assigned to an individual console. If large screens are in use then the Overview
Displays may be formatted to only fit the 16:9 aspect ratio provided by these screens.
Included in Level 1 displays should be an Emergency Shutdown Overview
Level 2 – Area, System or Train displays. The intent of Level 2 displays is to provide an
operating environment specific to an area, system or train, with logical navigation to
associated equipment detail displays. Level 2 displays will include dedicated
Emergency and Process Shutdown overviews which have direct navigation to and from
their associated Area, System or Train displays. Level 2 will be the primary operating
level under steady state conditions.
Level 3 – Equipment Detail displays. The Level 3 displays are the lowest level of process detail.
Examples are individual Wellheads, Separator vessel, Contactor vessel, Compressor
detail etc. Level 3 displays will include dedicated Emergency and Process Shutdown
detail displays which have direct navigation to and from their associated Equipment
Detail displays.
Level 4 – Equipment Utility displays. Information such as Compressor utilities (lube oil,
hydraulics, cooling air), Sequences, information from third party control panels etc.
would constitute level 4 displays.
Example Display Hierarchy – Large Process System

LEVEL 1 LEVEL 2 LEVEL 3 LEVEL 4
Production Overview Wellheads Overview Wellhead A detail
Wellhead B detail
Test Separator Well Test Display
Production Separator
Process Overview Process Train 1 Glycol Contactor
Cold Process Exch.
Expander/Recompressor Exp/Rec. Utilities
Exp/Rec. Sequence
Low Temp. Separator
Process Train 2 Glycol Contactor
Cold Process Exch.
Expander/Recompressor Exp/Rec Utilities
Exp/Rec Sequence
Low Temp. Separator
Export Compression Compressor 1 Comp. 1 Utilities
Comp. 1 Sequence
Compressor 2 Comp. 2 Utilities
Comp. 2 Sequence
Shutdown Overview Emergency shutdown ESD1
ESD2
Process Shutdown PSD1
PSD2
Fire & Gas Overview Deck Overview Wellhead Zone 101
Separator Zone 102
7.2 Operating Display Format

The recommended operating display format is a simple three zone layout.
ZONE 1 ZONE 1
ZONE 2 ZONE 2 ZONE 3
ZONE 3
Zone 1 – Navigation Zone

A navigation zone is required to provide menu driven navigation between displays; the
recommended method is via context sensitive tabbed browsing.
A minimum two rows of tabs are recommended, the top row having fixed functionality, based on
the console role, providing high level system navigation, and the second row to be context
sensitive based on the higher level selection. The layout of tabs should follow the logical
process flow from left to right; the second row is offset to provide discrimination.
To assist with alarm surveillance, and prioritization of corrective actions, the tabs should indicate
the highest priority active alarm color for any tag associated with that area of the plant.
To accommodate the full display hierarchy which may be up to four levels, each tab should be
assigned a drop down menu (right click functionality) to list all associated graphics.
Production Wellhead Process Train 1 Train 2 ESD Utilities
Contactor Cold Exch. Expander LTS
Logical process flow
Zone 2 – Primary Display Area

The central zone of the display will be the primary source of information for the Operator.
The whole graphic display shall be visible and readable; scroll bars shall not be used.
Zone 3 – Secondary Zone
The area at the bottom or side of the display can fulfill various roles, some of which will be
determined by the operating system and its configuration. One use of this are is to create a
Control Zone where the face plate of any selected tag will always be displayed. Other uses
include:
• Trend window – suitable for on demand trends.
• Current Alarms window – latest 3 to 5 alarms.
• Group Display – these types of displays have largely gone out of fashion, but are still very
useful as a secondary display for Operators to be able to manage complex loops.
• Shortcut buttons – provides direct links to tools such as Alarm Management, Sequence of
Events, Show/Hide button etc.
• Time and Date if not already present in a Windows Task Bar.
The relative size of Zone 3 will depend on its use; if a faceplate Control Zone is created then
there could typically be room for a trend or Group Display.
ZONE 1 ZONE 1
CONT.
ZONE
ZONE 2 ZONE 2
TREND
TREND CONTROL
ZONE
Secondary Windows and Pop-ups

If the operating system makes use of windows to display detail, such as a tag faceplate or point
detail, then the operator control over the window environment shall be kept to a minimum. The
following rules are recommended:
• Window minimize and maximize should be disabled, and avoid allowing the operator to resize
windows, so they do not get “lost”.
• Windows always open in the same area of the display that does not hide more important
information.
• Standardize the sizes and number of windows to be used in the design.
• Each window to have a unique identifier recognizable to the operator.
• Limit the number of secondary windows allowed on the display so the primary display is not
lost.
• Ensure windows are not able to be superimposed on top of one another such that they
become indistinguishable.
• Modal windows, requiring a defined response before closure, should include a standard
button set, with the default response of the operator pressing the Enter key highlighted.
• It should not be possible to change the Primary display while the associated pop-up is open.
Display Navigation
Display navigation shall be provided by multiple means which may include the following
techniques:
• From the Navigation Zone, see Section 7.2.
• Right Click functionality linked to on screen objects.
• Display targets embedded in the graphic displays.
Display Targets
Basic color is Dark Grey (RGB 120, 120,120), see Section 8.2 for detail.
Display targets, either Link or Zoom targets, should be 3-D buttons to provide a unique reference
point. They should be used in the following situations:
Link Target
• At the start and end of main process and complex instrument lines, as
SEP they arrive or leave a graphic. The arrow points in the direction of
logical flow, and links to a graphic of the same level.
Zoom Target
• Embedded in, or adjacent to, static objects to provide quick links from
Z higher level displays to lower level process schematics, utility displays,
Safety System displays, APC displays etc.
8.0 DISPLAY STYLE

Display style deals with the specific attributes and techniques to be used in the development of
displays which fulfill the requirements of this guideline and an asset specific specification.
8.1 Color
The use of color in displays can have a profound effect on operator performance, especially when
dealing with abnormal and upset situations. The human brain responds best to simple stimuli,
and color is one of the common methods employed on operator displays to grab attention.
Modern graphics software has the availability of thousands of color variations, which are typically
put to use in developing operator displays; the problem created is that the abundance of bright
colors have the effect of de-sensitizing the operator to changing conditions which need attention.
The methodologies recommended here for the use of color are aimed at promoting operator
effectiveness especially during upset conditions.
Human Vision Color Deficiency
It is important that displays take account of the common color deficiencies suffered by humans.
The most common (8% of the male population) is an inability the distinguish red and green, two
colors commonly used on operator displays and a combination to be avoided. Other
combinations such as blue/green, red/purple, green/yellow and white/cyan can also be
problematic to a smaller percentage of people. If the use of some of these color combinations is
unavoidable then varying the saturation and luminance of individual colors to provide
differentiation will help. Symbols should also be used in graphic and alarm displays as an
additional aid.
Color Terminology
There are three terms commonly used in describing color, Hue, Saturation, and Luminance. It is
important that these terms, and their effect on how colors appear is understood.
Hue – can be defined as the base color - Red, Orange, Blue, etc. In most graphic design
packages the hue will be determined by RGB value i.e. the ratio of Red, Green, and Blue which
make up the color, each typically measured on a scale of 0-255. For example Red is 255,0,0 on
the RGB scale.
Saturation – is the depth of color. Reducing the saturation in effect adds more grey providing a
lower salience i.e. the color tones down or is muted, eventually becoming grey.
Luminance – can be defined as the color variation from light (white) to dark (black). Small
changes in luminance can be used very effectively to provide better contrast for de-saturated
colors on a grey background.
8.2 Grey Scale
The intent of the grey scale is to provide a neutral background for all displays and is a key
recommendation of this guideline. The reasoning behind the recommendation of a grey
background is:
• Ergonomic design requires Control Rooms to be well lit to improve operator alertness. The
grey background contributes to less glare and reflections, than does a black background.
The reduced contrast also reduces eye strain.
• Grey backgrounds support more color combinations, and improve the readability of display
elements.
Static and dynamic objects and text should be built utilizing grey scale to distinguish them from
alarm objects and important information.
Recommended Grey Scale Color Chart

Color RGB Values Usage
Background Grey 240,240,240 Background color for all displays.
Light Grey 200,200,200 Static features – Vessels, Manual valves, non-

return valves, PSV’s etc.
Buildings, Escape routes, roads etc for Fire & Gas
layouts
Low importance text – engineering units.
Equipment Grey 160,160,160 Dynamic objects when not flowing.
Important process lines, Instrument lines,
equipment, etc.
Important static text – tag or descriptor.
Dark Grey 120,120,120 Dynamic objects such as pumps, ESD valves,
switchgear etc. in the flowing condition.
Navigation link buttons.
Important static text on a dark background (typically
Equipment Grey)
Black 0,0,0 Dynamic process values
8.3 Salient Color

Visually salient or bright color is reserved for important information used to guide Operators in
decision making processes, such as alarms. Color, and particularly bright color, must be used
sparingly otherwise the Operator can easily become de-sensitized, and time is wasted whilst
looking for events, or worst of all important events are missed.
The colors in the following table have been chosen to provide the greatest contrast on the light
grey background, symbols are also provided as an aid for color deficiency. Both the outline and
symbol shall be used to annunciate an alarm condition on the graphic display. The same
symbols shall also be used in the in the Alarm Summary displays.
Recommended Salient Color and Symbol Chart
Color and Symbol RGB Values Usage
Red 255,0,0 Critical or Urgent Priority Alarms
Orange 255,160,0 High Priority Alarms
Blue 51,170,255 Low Priority Alarms
Lavender 205,155,255 Journal Priority Alarms, and point status such

as Maintenance Override, Start-up Override
MO SO SI or Safety Interlock.
Magenta 176,0,176 Off Normal Condition (Fault conditions)
Dark Blue 0,0,176 Principle Object outline
Camel 235,225,195 Principle and Associated Object fill
Visual Alarm Annunciation

To provide discrimination between acknowledged and un-acknowledged alarms on the display
the following techniques shall be employed:
• Un-acknowledged alarm outline and symbol shall flash.
• Un-acknowledged alarm flash rate 2Hz at 50% duty cycle.
• Flashing symbols and outlines shall be synchronized across the display.
• Acknowledged alarm outline and symbol shall remain steady.
Examples of Salient Colors and Symbols in Use
NaN Barg 24 Barg
MO
SP 60 %
30 % PV 60
PV 1234 Kg\hr
Ω
52
Examples of a High Priority Alarm Operator selects Level as principle focus;

with Maintenance Override, and Off flow is highlighted as associated focus in
Normal (fault) this cascade loop.
8.4 Process Lines

Lines and arrows are used to indicate process flow and control relationships; they are a
fundamental tool in Operator orientation to process and upset conditions. The following
guidelines should be followed to ensure consistent application of process lines on graphics:
• Flowing process lines should be Equipment Grey (RGB 160,160,160).
• Non- flowing lines (such as bypass lines) should be lower salience Light Grey (RGB
200,200,200).
• The relative importance of the process lines, on any given graphic, should be determined by
line thickness.
• A minimal number of different lines should be used. Only differentiate the most important by
thickness of line.
• Primary process flow should, in general, be represented left to right, and top to bottom to
provide consistent orientation.
• Arrows should be used to indicate flow direction where flow meets vessel, or when entering
and leaving a graphic when no display navigation button is provided.
• Bends in process lines should be minimized.
• Crossing lines should be minimized; where lines are required to cross, the less significant line
is broken; if lines are of equal importance the vertical line is broken.
• Instrument lines should only be used to show complicated control loops. Lines should be 1
pixel wide, dashed, Light Grey (RGB 200,200,200).
8.4.1 Process Lines – Low Salience Color (System Upgrades only)
This section is included for the particular instance where this guideline is being used as part of a
DCS or SCADA system upgrade. In these instances the transition to Grey Scale graphics,
particularly the grey process lines, may not be wholly acceptable to the Operations group. This
section shall not be used for new builds.
In some facilities the graphic line colors follow, as near as possible, the field piping identification
standards, typically ASME A13.1 and BS1710; these standards use a combination of color and
legends (text and symbols) which do not readily transfer to this guideline, particularly when
considering human color deficiency.
Low salience colored lines can be used in conjunction with grey lines to minimize their impact on
the graphic design (see Section 8.1 for description). The following table provides guidance on
suitable colors by process fluid.
Low Salience Colors for Flow Lines (System Upgrades only)

Color RGB Values Process Fluids Example
Light Blue 190,204,220 Air
Dark Blue 97,138,158 Water
Brown 84,63,52 Oil
Yellow 209,209,60 Gas
8.5 Information and Data Display

Text and numeric information should be used when it is required to convey a precise level of
detail. The following guidelines are provided to ensure consistent presentation is applied:
• Text and numbers shall never flash.
• Text and numbers shall always be displayed upright.
• Text shall be presented in mixed case; all capitals format should be avoided.
• Text font shall be San Serif – Arial or Helvetica.
• Preferred font size is 11 point.
• Process data shall be Black (RGB 0,0,0)
• Engineering units shall be Light Grey (RGB 200,200,200)
• Equipment labels and tag names shall be Equipment Grey (RGB 160,160,160), unless on a
piece of equipment, when Dark Grey (RGB 120,120,120) shall be used.
• Equipment labels and tag names should make use of a show/hide feature if available.
• On large overhead displays font sizes will need to larger, and should be tested based on
expected viewing distance.
• There shall be no company, vendor or project logo on any display except the log-on screen
which shall contain the standard ConocoPhillips Information Security Protection policy legal
notice.
• All displays shall include a description bar at the top. Background Light Grey (RGB
200,200,200) and text Dark Grey (RGB 120,120,120)
• Where identical graphics exist by way of multiple Trains or Units, then a box shall be
embedded on the graphic stating “Train 1” or “Unit 2” etc. Box fill shall be Equipment Grey
with no outline (RGB 200,200,200), text Dark Grey (RGB 120,120,120), font size 16 point is
preferred. See Section 9.6 Electrical Schematic for an example.
8.6 Process Data Display
When undertaking the graphic design process, it is important to engage with your Automation
System supplier to ensure that unacceptable limitations on graphics update time are not created
by high density dynamic displays; a maximum update time of 3 seconds shall not be exceeded.
Process data display techniques should differ, between levels of the display hierarchy, to best
suite how Operators will use the graphics through different facets of operations. With reference
to Section 2.7 the process data display techniques for each level are considered in more detail:
Process Overview
The key outcome for a functional Process Overview display is that the Operator should be fully
aware of the status of all key process variables within their span of control. The intent is not to
simply fill the space with numeric data, but to consider and be selective about what is important to
display, and then decide how that information is best displayed.
At Overview level the Operator should be undertaking surveillance of the process to support early
intervention into potential upsets. The most efficient way of presenting that information is in
analogue format that does not require interpretation. Techniques such as profile meters, in-
graphic trends, and qualitative indicators should be considered.
Numeric data must also be provided, but should be limited to key process variables. The use of
analogue and numeric data in the display needs to be balanced to ensure the Operator is not
being overloaded by clutter and repetitive information.
Layout of the Overview should follow logical process flow, but it is not necessary to show process
lines per se, more process linkage. The Overview may lend itself to a Dashboard type layout.
Operating Display
This is the primary operating level under steady state conditions, providing a high level view of
the process unit or area; layout should follow logical process flow left to right.
On the Operating displays all primary control, alarms and equipment status shall be displayed.
Important and appropriate information from the facility Safety Systems shall also be displayed
including primary isolation and blowdown valves, and important process variables.
Where triplicate transmitters are utilized in 2oo3 voting schemes, only the median value of the
three process variables shall be displayed on the graphic. Selecting the point shall display all
three variables in the Point Detail display (example in Section 9.5).
In laying out the display points, care should be taken to ensure that relationships between
parameters are understood, and that the layout reflects those relationships. The Operator will
respond to logically grouped data as one piece of information, versus random placement which
requires each point to be read and analyzed, and then relationships established. For example
placing pressure, level and temperature variables adjacent each other either embedded in or
alongside a vessel symbol.
It is a basic rule of display design that the displays are not a replacement for the P&ID’s, but this
does not mean that the placement of points can ignore physical layout or constraints, especially
where this may support an inappropriate response by the Operator. Examples might be the
placement of a temperature point the wrong side of a side stream tie-in, or a level point whose
transmitter does not cover the entire vessel range.
Equipment Detail Display
As the graphics where the Operator will most likely be dealing with upset or abnormal events
associated with a particular piece of equipment or task, the Level 3 displays shall include all
Control, Alarm and Safety elements associated with that piece of equipment or task, and will be
the closest in representation to the P&ID.
The points discussed above in Operating Display apply equally in the Detail Display.
Safety System Status Display
Safety System Cause and Effect charts are a valuable tool to the Operator in determining the
safe state of equipment during a process or emergency shutdown, and are also a useful aid to
start up. Cause and effect charts are usually in spreadsheet format which does not necessarily
lend itself to a graphical representation, the eye will have difficulty matching rows and columns
unless they can be suitably highlighted. A simpler approach is to use a table with initiators on
the left (PALL, TAHH, FALL Trip etc) and the effects on the right (ESD Valve status, Equipment
trip status etc).
Information should be logically presented with one display per Process or Unit Shutdown through
to the high level ESD’s. Each Shutdown graphic shall be directly navigable to and from its
associated Operating or Detail display.
Process variables are not normally required, but it is appropriate to display timers’ associated with
delays or inhibits.
Sequence Display
To be effective, Sequence Displays need to include all interlocks, timers, and permissives
associated with the sequence; the Operator should not have to leave the display to determine the
status of any element in the sequence. Standard Flow Chart or tabular formats may be used.
Equipment Utility Display
Level 4 displays represent the lowest level display in the hierarchy; they will typically include utility
displays associated with packaged equipment. It is common for the data to be on slower update
times due to the fact it is often transmitted via OPC or Modbus connections. Data can be
presented in a simple schematic, process flow, or tabular format.
8.7 Dynamic Process Objects
The representation of dynamic display objects, by that we mean valves, pumps, fans, and
switchgear shall follow a common format. To overcome differing terminology (particularly
between process and electrical open and closed status) the graphic representation shall simply
consider either a flowing or non-flowing, on or off condition.
Status and Alarm Conditions of Dynamic Objects
Status Color RGB Valve Pump/Motor Switchgear
Not Flowing/Not Equipment 160,160,160

Running/Off Grey
Flowing/Running/On Dark Grey 120,120,120
In Transit N/A N/A
Off Normal/Fault Magenta 176,0,176

outline
Command Disagree Takes the alarm priority

Un-commanded color determined in the
Event Alarm Rationalization
process
9.0 SYMBOLOGY
When determining the dynamic symbol library to be used on a project, it is very important to
engage with your Automation Supplier to ensure that the recommendations of this guideline can
be met without significant customization of the symbol libraries. Customization can lead to
significant problems during system upgrades and should therefore be well documented by the
supplier for reference during the operational phase.
ISA S5.5 1985 Graphic Symbols for Process Displays Section 3.3, though somewhat dated, does
provide useful guidance and a structured approach to symbol design.
The following headings are an overlay to ISA S5.5 1985 Graphic Symbols for Process Displays
Section 3.3, describing changes recommended in keeping with this guideline. The list is not
exhaustive and where other symbols are required the similar techniques should be applied.
9.1 Vessels
• Outline and Fill color shall be Light Grey (RGB 200,200,200)

• Vessel tan lines shall not be shown.
• Vessel support structures shall not be shown
• Vessel cladding shall not be shown
• Vessel shape and orientation shall replicate the actual installation; P&ID’s should provide a
useful reference.
• Where vessel internal process measurements are displayed, then it is appropriate to show, in
simple grey line representation (RGB 160,160,160), internal structures such as weirs, trays,
packing etc. Process points associated with those internal structures shall be appropriately
placed so as not to be misinterpreted. This is most commonly seen with level measurement
that only covers one section of a vessel.
9.2 Heat Exchangers
REBOILER
HEAT
EXCHANGER
(GENERIC) FORCED DRAUGHT
• All heat transfer equipment including Reboilers, and forced draught heat exchangers.
• Forced Draught heat exchangers may also include a dynamic motor symbol (see Section 9.6)
• It is not necessary to differentiate graphically between different heat exchanger types such as
Plate & Frame and PCHE.
9.3 Rotating Equipment
PUMP BLOWER MOTOR or

GENERATOR
EXPANDER
or TURBINE COMPRESSOR
• Pump, Blower and Motor/Generator symbols are shown as dynamic symbols, see Section 8.6
for further detail.
• Expander, Turbine, Compressor sets do not typically have a simple on/off status and hence
are shown as static symbols. Other more detailed information will be displayed to provide the
important status information of this equipment.
• The letter M or G can be added in the Motor/Generator symbol to provide differentiation, if
necessary.
9.4 Valves and Actuators
Symbol Valve Type Symbol Status Color

Gate, Globe, Ball, Static Light Grey
Needle Valve (200,200,200)
Non Return Valve Static Light Grey

(200,200,200)
Relief or angle valve Static Light Grey

(200,200,200)
Butterfly Valve Static Light Grey

(200,200,200)
Control Valve Static Light Grey

(200,200,200)
Control Valve – Static

including Controller
output engineering
50 % units
Motor Operated Valve Static Light Grey
(200,200,200)
Emergency Shutdown Dynamic Refer to Section 8.7

Valve or Solenoid (inc
Deluge)– not flowing
Emergency Shutdown Dynamic Maintenance

MO
Valve – flowing Override is
condition with assumed Journal
Maintenance Override Priority. Refer to
Section 8.3
9.5 Faceplate, Point Detail, and Group Display for Zone 3

Controller Faceplate Example
10-LIC2345 Production Separator

Mode Alarm State
SP 40.0 % ENABLE
Auto
PV 41.5 % PV Hi SP
Man ------
OP 35.0 % PV Lo SP
Casc
15.0
Point Detail example – Triplicate Safety System Transmitters with Maintenance Override
13-PIT5432A 13-PIT5432A 13-PIT5432A

Export Manifold Export Manifold Export Manifold
MOS MOS MOS
PV 150 Barg PV 150 Barg PV 150 Barg
PAHH 230 Barg PAHH 230 Barg PAHH 230 Barg
PALL 50 Barg PALL 50 Barg PALL 50 Barg
Note: All Points are read from the Safety System including Trip Setpoints
Group Detail Display Example
11-LIC1234 11-FIC1234 11-PIC1234 11-TIC1234

o
SP 40.0 % SP 40.0 Kg/h SP 40.0 Barg SP 40.0 C
o
PV 41.5 % PV 41.5 Kg/h PV 41.5 Barg PV 41.5 C
OP 35.0 % OP 35.0 % OP 35.0 Barg OP 35.0 %
MODE AUTO MODE CASC MODE AUTO MODE AUTO
Principle object selected (LIC) and associated object (FIC) also highlighted
9.6 Electrical Schematics
Symbol Description Symbol Status Color

Generator Dynamic Refer to Section 8.7
G
Transformer Static Light Grey

Δ (200,200,200)
Υ
Circuit Breaker, Dynamic Refer to Section 8.7
Contactor or Bus
Coupler
Motor Dynamic Refer to Section 8.7
M
Typical Electrical Schematic
Platform Electrical Schematic
G G G
Unit 1
6000 V
Δ Δ
Υ Υ
G
440 V 440 V
9.7 Fire & Gas
Symbol Description Symbol Status Color
2 26 Gas Detector - Static with gas LEL Equipment Grey

Methane displayed and alarm
(160,160,160)
color by priority
Gas Detector – Toxic Static with gas level Equipment Grey

11 (H2S) displayed and alarm
5 (160,160,160)
color by priority
Gas Detector - Line of Static with gas LELm Equipment Grey

1 Sight displayed and alarm
(160,160,160)
color by priority
Manual Alarm Call Static with alarm state Equipment Grey

Point and alarm color by
(160,160,160)
priority
MO Smoke Detector Static with alarm state Equipment Grey
and alarm color by
(with Maintenance (160,160,160)
priority
Override)
Heat Detector Static with alarm state Equipment Grey

and alarm color by
(160,160,160)
priority
Flame Detector Static with alarm state Equipment Grey

and alarm color by
Symbol orientation to (160,160,160)
priority
show area of
coverage
Provided in the table are examples of symbols for typical Fire & Gas detection devices. The
symbols to be used may be driven by country specific codes or practices. If this guidance
document is being used to support an existing facility upgrade then it is recommended that
existing symbology is assessed for its suitability and utilized as required.
In the alarm condition the symbol will be outlined appropriate to the assigned alarm priority as
shown above.
Maintenance Overrides are displayed as per the Smoke Detector symbol with reference to
Section 8.3
Typical Fire & Gas Layout

Fire & Gas layouts should follow a simplistic design that supports the Operator in being able to
orientate quickly to the event and direct emergency operations. Fire & Gas Layouts should:
• Show only the main pieces of plant equipment to assist orientation and emergency response.
• Show main equipment tag number and description of displayed equipment.
• Show main roads or escape routes.
• Show detectors accurately placed and oriented.
• Show the Fire Zone boundary if appropriate.
• Display compass rose pointing to either Plant or magnetic north.
• Consider adding a small graphic in one corner to show the displayed area or zone in relation
to the overall facility layout.
• Maintain the same orientation across all displays.
• Provide link targets to adjacent zones or areas.
• Display associated Fire and Deluge Zone information including Deluge Release pushbuttons
and solenoids.
Fire Zone 101 De-Ethanizer Reflux
0 N
12
15-P2314A
Reflux Pump
15-V2313
Reflux Drum
15-P2314B
Reflux Pump
0 0
FZ101

CPMS-AUT-EP-010 - Operator HMI and Graphics Specification Guideline PDF

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

CPMS-AUT-EP-010 - Operator HMI and Graphics Specification Guideline PDF

Uploaded by

Copyright:

Available Formats

UNCONTROLLED UNLESS VIEWED VIA THE CPMS SITE

Upstream Engineering Standards and

Operator HMI & Graphics Specification

CPMS-AUT-EP-010 Revision 1 Page 2 of 27

1.0 PURPOSE ........................................................................................................................................... 3

CPMS-AUT-EP-010 Revision 1 Page 3 of 27

DOCUMENT DOCUMENT NUMBER

3.2 External References

ORGANISATION TITLE REVISION ISBN

CPMS-AUT-EP-010 Revision 1 Page 4 of 27

External References - Continued

ASTM F1166 Human Engineering 2007

CPMS-AUT-EP-010 Revision 1 Page 5 of 27

CPMS-AUT-EP-010 Revision 1 Page 6 of 27

CPMS-AUT-EP-010 Revision 1 Page 7 of 27

KVM(keyboard/video/monitor) switches may be considered to reduce the ratio of keyboards and

CPMS-AUT-EP-010 Revision 1 Page 8 of 27

EXAMPLE WORKSTATION LAYOUTS

OPERATING OPERATING OPERATING OPERATING

BASIC WORKSTATION TWO TIER WORKSTATION

MATRIX ALARM TREND ALARM TREND MATRIX ALARM TREND

COMMS OPERATING OPERATING OPERATING OPERATING COMMS OPERATING OPERATING

TWO TIER WORKSTATION WITH TWO OPERATOR WORKSTATION

LARGE SCREEN SPLIT SCREEN MULTI PROJECTOR LARGE SCREEN

MATRIX OPERATING OPERATING MATRIX OPERATING OPERATING COMMS

LARGE SCREEN WORKSTATION LARGE PROJECTOR SCREEN WORKSTATION

CPMS-AUT-EP-010 Revision 1 Page 9 of 27

7.0 OPERATOR DISPLAY DESIGN

CPMS-AUT-EP-010 Revision 1 Page 10 of 27

Example Display Hierarchy – Large Process System

Production Overview Wellheads Overview Wellhead A detail

Test Separator Well Test Display

Process Overview Process Train 1 Glycol Contactor

Cold Process Exch.

Expander/Recompressor Exp/Rec. Utilities

Low Temp. Separator

Process Train 2 Glycol Contactor

Cold Process Exch.

Expander/Recompressor Exp/Rec Utilities

Low Temp. Separator

Export Compression Compressor 1 Comp. 1 Utilities

Compressor 2 Comp. 2 Utilities

Shutdown Overview Emergency shutdown ESD1

Process Shutdown PSD1

Fire & Gas Overview Deck Overview Wellhead Zone 101

Separator Zone 102

CPMS-AUT-EP-010 Revision 1 Page 11 of 27

7.2 Operating Display Format

ZONE 2 ZONE 2 ZONE 3

Zone 1 – Navigation Zone

Production Wellhead Process Train 1 Train 2 ESD Utilities

Contactor Cold Exch. Expander LTS

Logical process flow

Zone 2 – Primary Display Area

CPMS-AUT-EP-010 Revision 1 Page 12 of 27

Secondary Windows and Pop-ups

CPMS-AUT-EP-010 Revision 1 Page 13 of 27

8.0 DISPLAY STYLE

CPMS-AUT-EP-010 Revision 1 Page 14 of 27

Recommended Grey Scale Color Chart

Background Grey 240,240,240 Background color for all displays.

Light Grey 200,200,200 Static features – Vessels, Manual valves, non-

CPMS-AUT-EP-010 Revision 1 Page 15 of 27