Professional Documents
Culture Documents
575
4.10 4.13
DCS: INTEGRATION WITH OTHER DCS: OPERATOR’S GRAPHICS 727
SYSTEMS 700 Introduction 727
Introduction 700 Operator Console Equipment 727
Existing Systems 700 Video Display 728
MODBUS Interface 700 Keyboards 728
OPC Interface 702 Peripheral Devices 729
Motor Controls 702 Remote and Web-Based Stations 729
Fieldbus Interface 703 Remote Clients 729
Safety Systems 703 Web Pages 730
Conclusions 705 Operator Graphics 730
Reference 705 Types of Displays 731
Bibliography 705 Overview Graphic Displays 731
Graphic Displays 731
Faceplate with Detailed Display 732
Trend Displays 732
4.11 Static Graphic Components 732
DCS: MANAGEMENT OF ABNORMAL Dynamic Elements 732
CONDITIONS 706 Dynamos 733
Introduction 706 Aliases 734
Abnormal Condition Management 706 Display Access 735
Types of Control 707 Process Performance Monitoring 736
Need for Operator Intervention 707 Process Graphic Data Interfaces 736
Psychological Basis for Intervention 707 Conclusion 738
Detect Phase 708 Bibliography 738
Sort/Select and Monitor Phases 709
Plan/Act Phase 709 4.14
Response Time 709 DCS: SYSTEM ARCHITECTURE 739
Planning the Intervention 709
Introduction 740
Types of Operations 709
Analog Control 740
Managing Abnormal Conditions 710
Direct Digital Control 741
Control Room Design 711
Distributed Control System 741
Operator Training 712 Functional Components 742
Alarm System Design 712 DCS Control Network 742
Graphical User Interface 716 Operator Console 744
Conclusions 718 Core Architectural Components 745
Acknowledgments 718 International Fieldbus Standards 749
References 718 Data Highway Designs 749
Bibliography 718 Control Network 749
Ethernet Configuration 749
Alarm Management 750
4.12 Alert Processing 750
DCS Attributes 752
DCS: MODERN CONTROL GRAPHICS 720
Reliability 753
Introduction 720 Mean Time between Failure 753
Function Block Representation 720 Pricing 754
Standard for Process Control 721 Bibliography 755
Function Block Modes 721
Function Block Types 722
Sequential Function Chart (SFC) 723 4.15
Ladder Diagrams 724 DIGITAL READOUTS AND GRAPHIC DISPLAYS 757
Batch S88 725 Introduction 758
Safety Logic 725 Human Factors 759
Conclusions 725 Size and Contrast 759
Bibliography 726 Application Notes 760
Types: A. Audiovisual Annunciators: integral, remote, and semigraphic systems with audible
and visual display and electromechanical (relay) or solid-state (semiconductor)
designs
B. Recording Annunciators: integral, solid-state systems with recorded printout
C. Bargraphs
D. Vocal Annunciators: integral, solid-state systems with audible command message
Cost per Alarm Point: Integral cabinet costs $75 to $175; remote system, $125 to $250; semigraphic system,
$125 to $250; recording annunciator or annunciator with communications will add
about 30% to the cost per point. These figures are budgetary in nature (± 20%), and
a number of variables can affect the price. These factors include system size, window
size, number of alarm points per board, field contact voltages, type of lamp, com-
munications options, and required certifications (e.g., Class I, Div. 2, etc.).
580
In addition to this section, safety alarm systems are discussed More sophisticated annunciator designs can incorporate
in several other parts of this handbook, particularly in connec- bargraph-type displays, color computer graphics, and event-
tion with DCS and CRT systems in Chapter 4 and PLCs in recording or data-logging systems. Much of the new devel-
Chapter 5. The subject of process alarm management is sepa- opment in annunciator system designs involves enhanced
rately covered in Section 1.6. This section concentrates on methods of communication and reporting. As a consequence,
dedicated, conventional annunciators and other alarm devices. annunciator status can be logged and used for tasks such as
alarm management and abnormal event analysis.
Graphic displays can be dynamic, where flow in pipes is
INTRODUCTION shown by actual movement, and CRT displays can concen-
trate large amounts of information into a single display.
The purpose of an alarm system (annunciator) is to bring Figure 4.1a illustrates such a display, where the CRT displays
attention to an abnormal or unsafe operating condition in the
plant. Traditional annunciators used discrete alarm modules
for this purpose. These dedicated hardware units are dimin-
ishing in numbers yet are still used in installations where 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16
simplicity is desired or where separation from the basic pro- A
cess control system is required for safety reasons. B
In some installations where traditional units have been C
replaced by PLC- or DCS-based annunciators, the recogni- D
tion of and response to alarm conditions have deteriorated E
F
because on computer screens they are not very visible and
G
can go unnoticed. In addition, because of the low incremental H
cost of adding new alarm points, excessive numbers of alarms I
been configured. Because of the floods of alarms, an impor- J
tant new component of safety system design is alarm ratio- K
nalization and alarm management (Section 1.6). L
It is possible to connect conventional annunciators as front-
end devices to DCS systems through various communication Area 3-H of plant layout Color code:
links. There is a wide variety of such links available, ranging is flashing in coded color 1-Combustibles 5-CO
2-Smoke 6-SO2
from serial links employing MODBUS protocol to Ethernet 3-Fire 7-Vinyl chloride
links utilizing Object Linking and Embedding (OLE) for Pro- 4-High pressure
cess Control (OPC). This hybrid solution adds the visibility,
reliability, and built-in redundancy of dedicated annunciators FIG. 4.1a
to the flexibility and record-keeping convenience of DCS- The overall safety status of the plant can be displayed on a single
based systems. CRT.
the plot plan of the plant as the background. Such a plot plan general-purpose central control rooms. However, more
can be separated into small square segments, so that if an compact, reliable, and flexible annunciators were subse-
unsafe condition is detected in a particular segment, the cor- quently introduced.
responding square can start flashing in the color that corre- In the early 1950s, the plug-in relay annunciator was devel-
sponds to the type of safety problem detected. This type of oped. Instead of utilizing solenoid-operated drops, it used elec-
annunciator display is easily and quickly comprehended and trical annunciator circuits with small telephone-type relays to
can provide a summary report on a large number of safety operate alarm lights and to sound a horn when abnormal con-
conditions in an efficient manner. ditions occurred. The alarm lights installed in the front of the
annunciator cabinets were either the bull’s-eye type or back-
lighted nameplate designs.
HISTORY The annunciators were compact, reliable, and because of
the hermetically sealed relay logic modules, they could also
The term “drop” was initially applied to individual annunci- be mounted in certain hazardous areas in addition to the
ator points, from which we may infer that annunciator sys- general-purpose control rooms. In order to be mounted in
tems developed from paging systems of the type used in Class 1 explosion-proof areas, they required purging
hospitals and from call systems used in business establish- (Figure 4.1b). Miniaturization of instruments and the use of
ments to summon individuals when their services are needed. graphic control panels initiated the development of remote
These systems consisted of solenoid-operated nameplates annunciator systems, consisting of a remotely mounted relay
that dropped when deenergized. The drops were grouped at cabinet connected to alarm lights installed at appropriate
a central location and were energized by pressing an electrical points in the graphic or semigraphic diagram.
pushbutton in the location requiring service. The system also Solid-state annunciator systems with semiconductor
included an audible signal to sound the alert. logic modules were developed in the late 1950s. These
Similar systems were used for fire and burglar alarms. The permitted additional miniaturization and lowered both the
drops were operated either by manual switches or by trouble operating power requirements and the amount of heat
contacts that monitored thermal and security conditions in generated. The semigraphic annunciator was introduced
various building locations. The use of these systems in the in the late 1960s and fully utilized the high-density capa-
chemical processing industry was a logical development when bilities of solid-state logic. It has permitted the designs of
alarm switches became available. very compact and flexible semigraphic displays in control
This development, however, was preceded by explosion- centers.
proof, single-station annunciators that were designed to oper- With the spread of digital communication networks and
ate in the petroleum and organic chemical process plants microprocessor-based smart instruments, the number of
constructed immediately before, during, and after World War alarm points increased, their management as a function of
II. They were usually installed on control panels located importance (Section 1.6) became a separate field, and their
either outdoors near the process unit or in local control displays were further miniaturized. These days, with the
houses. A drop-type system could not be used in these loca- greater availability and reliability of integrated circuit logic
tions because they were electrically hazardous. components, alarms can be displayed on handheld tools in
By the late 1940s, centralized control rooms were the field, on computer screens at workstations, or on CRTs
introduced. Drop-type annunciators were suited for these in DCS systems.
FIG. 4.1b
Local annunciators were available in explosion-proof designs or were mounted in air-purged enclosures when mounted in Class 1 areas.
(Courtesy of Bebco Industries.)
PRINCIPLES OF OPERATION the pushbutton closes a common circuit (bus) to each visual
indicator in the annunciator system, turning on those lamps
The annunciator system consists of multiple alarm points. Each that are not already on as result of an abnormal operating
alarm circuit includes a trouble contact (alarm switch), a logic condition.
module, and a visual indicator (Figure 4.1c). The individual
alarm points are operated from a common power supply and Operating Sequences
share a number of annunciator system components, including
an audible signal generator (horn), a flasher, and acknowledge A wide variety of sequences are available to define the oper-
and test pushbuttons. In normal operation the annunciator sys- ation of an individual alarm point in the normal, alert,
tem and individual alarm points are quiescent. acknowledged, and return-to-normal stages in the annuncia-
The trouble contact is an alarm switch that monitors a tor sequence. The five most commonly used annunciator
particular process variable and is actuated when the variable sequences are shown in Table 4.1d, identified by the original
exceeds preset limits. In electrical annunciator systems it is code designation of the Instrumentation, Systems, and Auto-
normally a switch contact that closes (makes) or opens mation Society (ISA). These sequences were specified by the
(breaks) the electrical circuit to the logic module and thereby ISA-recommended practice RP-18.1, which has since been
initiates the alarm condition. In the alert state, the annunciator revised and updated into standard ISA 18.1.
turns on the visual indicator of the particular alarm point, the Because the old sequence designations are still used in
audible signal, and the flasher for the system. The visual some plants, some of their more common versions are listed
indicator is usually a backlighted nameplate engraved with in Table 4.1d and also described below. The sequence desig-
an inscription to identify the variable and the abnormal con- nations of the present standard ISA 18.1 will also be discussed
dition, but it can also be a bull’s-eye light with a nameplate. below.
The audible signal can be a horn, a buzzer, or a bell.
The flasher is common to all individual alarm points and The Old ISA Sequence Designations ISA Sequence 1B, also
interrupts the circuit to the visual indicator as that point goes referred to as flashing sequence A, is the one most frequently
into the alert condition. This causes the light to continue to used. The alert condition of an alarm point results in a flashing
flash intermittently until either the abnormal condition visual indication and an audible signal. The visual indication
returns to normal or is acknowledged by the operator. turns off automatically when the monitored process variable
The horn acknowledgment pushbutton is provided with returns to normal.
a momentary contact: when it is operated, it changes the logic ISA Sequence 1D (often referred to as a dim sequence)
module circuit to silence the audible signal, stop the flasher, is identical to Sequence 1B except that ordinarily the visual
and turn the visual indicator on “steady.” When the abnormal indicator is dim rather than off. A dimmer unit, common to
condition is corrected, the trouble contact returns to normal, the system, is required. Because all visual indicators are
and the visual indicator is automatically turned off. always turned on—for dim (normal), flashing (alert), or
The lamp test pushbutton with its momentary contact tests steady (acknowledged)—the feature for detecting lamp fail-
for burned-out lamps in the visual indicators. When activated, ure is unnecessary.
ISA Sequence 2A (commonly referred to as a ring-back
sequence) differs from Sequence 1B in that following
acknowledgment the return-to-normal condition produces a
Power supply dim flashing and an audible signal. An additional momen-
Common system
Horn Lamp
acknowledge
signal test Pushing the reset button after the monitored variable has
generator
(horn) returned to normal turns off the dim flashing light and silen-
Flasher ces the audible signal. This sequence is applied when the
operator must know if normal operating conditions have been
restored.
alarm points
TABLE 4.1d
The Old ISA Designations of Annunciator Sequences
ISA Code for Annunciator Process Variable Condition
the Sequence Condition (Trouble Contact) Visual Indicator Audible Signal Use Frequency
variables that have exceeded normal operating limits. An sequence A. The sequence designations in ISA 18.1 use the
off-normal condition in any one of a group of process vari- following letter codes:
ables will cause some or all of the remaining conditions in
the group to become abnormal. The first alarm causes flash- A = Automatic Reset
ing, and all subsequent points in the group turn on the steady M = Manual Reset
light only. This sequence monitors interrelated variables. R = Ringback
The visual indication is turned off automatically when con- F = First-out
ditions return to normal after acknowledgment.
Therefore, using the ISA 18.1 sequence designations A-13
The New ISA Sequence Designations In the updated annu- means that the annunciator has automatic reset and is pro-
nciator standard ISA 18.1, the sequence designations are vided with Option 13, which suggests the presence of a dim
different, as shown in Table 4.1e. The most widely used lamp monitor. For definitions of less frequently used
sequence, the basic flashing sequence, is now designated as sequences, refer to ISA 18.1.
TABLE 4.1e
The New ISA Designations of Annunciator Sequences as Defined by ISA Standard ISA 18.1
Condition-sensing Return to
Signal Returns to Normal Condition-sensing Normal
Sequence Device Normal Alert Before Acknowledge Acknowledge Returns to Normal Reset Remarks
Optional Operating Features Annunciator sequences may system requires a normally closed trouble contact operated
be initiated by alarm switch trouble contacts that are either by a direct-acting analog input.
open or closed during normal operations. These are referred If an increase in the measured variable results in an
to as normally open (NO) and normally closed (NC) increased output signal, the detector is direct acting; if the
sequences, respectively, and the ability to use the same logic output signal is reduced, it is a reverse-acting sensor. If the
module for either type of trouble contact is called an NO-NC trouble contacts in all alarm switches in the plant are standard-
option. It is important because some alarm switches are avail- ized such that normal operating conditions will cause all trouble
able with either an NO or an NC contact but not with both, contacts to be NC (or NO), the required annunciator sequence
and therefore without the NO-NC option in the logic module is also NC (or NO), and Figure 3.1f need not be consulted.
two types of logic modules would be required. The logic Annunciator systems are fail safe or self-policing if they
module is converted for use with either form of contact by a initiate an alarm when the logic module fails because of relay
switch or wire jumper connection. coil burnout. The feature is standard for most NO and NC
The relationship between the NO and NC sequences annunciator sequences; annunciators using NC trouble con-
required in the logic module to match the various trouble tacts are also fail safe against failures in the trouble contact
contacts and analog measurement signal actions is shown in circuit.
Figure 4.1f. A high alarm in a normally closed annunciator The lock-in option locks in the alert condition initiated
by a momentary alarm until the horn acknowledgment button
is pushed, preventing loss of a transient alarm condition until
the operator can identify it. The logic module is usually
Off-normal limit High changed from lock-in to non-lock-in operation by either addi-
tion of a wire jumper or operation of a switch. The lock-in
Annunciator sequence NC NO feature is useful for monitoring unstable or fluctuating process
variables.
Sensor action Direct Reverse Direct Reverse
Repeater lights may be located away from the common Integral Annunciator
logic module and serve to alert operators in other areas.
Annunciator cabinet terminals for connecting these repeater The integral annunciator, a cabinet containing a group of
lights in parallel with the annunciator visual indicator are individual annunciator points wired to terminal blocks for
available. connection to external trouble contacts, power supply, horn
It may also be desirable to actuate a horn in more than and acknowledge and test pushbuttons, is the most econom-
one location. The electrical load of multiple audible signals ical of the various packaging methods available in terms of
requires an interposing relay, called a horn-isolating relay, cost per point. It is also the simplest and cheapest to install.
operated by the logic modules. This relay has contacts of Two methods of packaging integral annunciators are illus-
adequate capacity to operate multiple audible signals. Horn- trated in Figure 4.1g. In the nonmodular type, plug-in logic
isolating relays may be installed either in the annunciator modules are installed inside the cabinet and connected to
cabinet or in a separate assembly. alarm windows on the cabinet door through an interconnecting
Annunciator systems can be used for several operational wiring harness; in the modular type, individual plug-in alarm
sequences without changing system wiring, and many logic point assemblies of logic module and visual indicator are
modules can supply more than one operational sequence. grouped together.
This multiple sequence capability is sometimes useful when The nonmodular and modular cabinet styles are both
the sequence has not yet been determined. designed for flush panel mounting with the logic modules
and visual indicators accessible from the front. Electrical
terminals for the external circuitry are located in the rear of
ANNUNCIATOR TYPES the cabinet and are accessible from the back.
Integral annunciators are used on nongraphic and on
The audiovisual annunciator can be packaged as an integral, semigraphic control panels in which physical association of
remote, or semigraphic annunciator. the visual indicators with a specific location in the graphic
Back lighted
name plates
Pushbutton
stations
Relay type
Front view-door closed
logic modules
Solid state
alarm module
Lamp module
Window bezel
Visual
indicators
Filter
(1) Nonmodular (2) Modular type module Power and system
Rear view of terminal enclosure function terminals
Rear view with cover removed
FIG. 4.1g
Integral annunciator cabinets are available in modular (right) and nonmodular (left) construction.
(5)
(1)
(3)
(6)
(2) (4)
(7)
FIG. 4.1h
Integral annunciator window configurations. 1. Modular single-point annunciator. 2. Modular double-point annunciator. 3. Modular triple-
point annunciator. 4. Modular quadruple-point annunciator. 5. Nonmodular single-point. 6. Nonmodular triple-point. 7. Nonmodular single-
point with small nameplate.
process flow diagram is not required. Integral annunciator They are used with full and semigraphic control panels and
cabinets occupy more front but less rear panel space than the in nongraphic applications in which an integral annunciator
equivalent remote designs. The electrical terminals are in a cabinet may require too much front panel space. Figure 4.1i
general-purpose enclosure at the rear of the cabinet, and trouble
contacts can be wired directly to them, thus eliminating the
need for and resultant costs of intermediate terminal blocks
for trouble contact wiring.
An advantage of the modular-type cabinet is that it can
be expanded by enlargement of the panel cutout and by the
addition of modular alarm point assemblies. Nonmodular cab-
inets cannot be expanded, and new cabinets must be installed
to house additional alarm points. Consequently, one should
include more spare points when specifying the cabinet size
for a nonmodular system. The modular cabinet is also more
compact, takes up less panel space, and has a greater visual
display area per point than the nonmodular design.
Figure 4.1h illustrates various configurations of visual
(1) Chassis with general purpose enclosure
indicators that can be supplied with integral annunciator cab-
inets. Many of these groupings are also available in single-
unit assemblies for remote annunciator systems.
Remote Annunciator
illustrates a remote annunciator chassis with optional cabinet terminal blocks rather than directly to the cabinet terminals,
enclosure. The chassis contains spare positions for plug-in logic as with the integral annunciator.
modules and a system flasher. Auxiliary system modules, such These terminal blocks, the terminal enclosure, and the
as horn-isolating relays, may also be plugged into the logic required wiring result in higher installation costs and extra
module chassis positions. space requirements. Finally, the remote annunciator is diffi-
The chassis and cabinet enclosure are designed for wall cult to change, and modification costs of remote systems are
or surface mounting behind the control panel. Each chassis substantially higher than those of the integral type, partially
position has terminal points for connecting the visual indi- because spare visual indicators cannot be installed initially.
cator and trouble contact. In addition, the chassis has a system
Semigraphic Annunciator
terminal block for connecting electrical power, horn, flasher,
and acknowledge and test pushbuttons. The semigraphic annunciator developed in the late 1960s
The disadvantages of remote annunciators include higher combines some of the advantages of the integral annunciator
equipment and installation costs and an increased require- with the flexibility to locate visual indicators at appropriate
ment for back panel space. In addition, the wiring connec- points in a graphic flow diagram. Figure 4.1j illustrates a
tions from field trouble contacts must be made to intermediate semigraphic annunciator.
Replaceable
translucent Removable transparent
drawing sheet plastic protective panel
Lamp
nesting
Aluminum
panel
housing
1-10
1-9
1-8
1-7
1-6
1-5
1-4
1-3
1-2
1-1
Terminals located
Knockouts G15 G14 G13 G12 G11 G10 G9 G8 G7 G6 G5 G4 G3 G2 G1 FC FC FC
under rear cover
Annunciator logic-rack,
S15 S14 S13 S12 S11 S10 S9 S8 S7 S6 S5 S4 S3 S2 S1 FC FC FC FC FC FC F2 F1 FR R K T C (+) HV CN (−) LC L2 L1
plug-in modules and power supplies
POS.
2-15
2-14
2-13
2-12
2-11
2-10
2-9
2-8
2-7
2-6
2-5
2-4
2-3
2-2
2-1
Lamps
S15 S14 S13 S12 S11 S10 S9 S8 S7 S6 S5 S4 S3 S2 S1 FC FC FC FC FC FC F2 F1 FR R K T C (+) HV CN (−) LC L2 L1
POS.
3-10
3-9
3-8
3-7
3-6
3-5
3-4
3-3
3-2
3-1
(4 high by 15 wide)
G15 G14 G13 G12 G11 G10 G9 G8 G7 G6 G5 G4 G3 G2 G1 FC FC FC
12 10 8 12 10 8 12 10 8 12 10 8 12 10 8 Pin numbers of socket
A15 A14 A13 A12 A11 A10 A9 A8 A7 A6 A5 A4 A3 A2 A1
POS.
4-15
4-14
4-13
4-12
4-11
4-10
To signal terminals
4-9
4-8
4-7
4-6
4-5
4-4
4-3
4-2
4-1
FIG. 4.1j
Construction of a typical semigraphic annunciator, showing the plug-in modules,the lamp nesting panel, and the arrangement of the terminal
blocks on the rear of the unit.
A T
T A
FIG. 4.1k
Control panels with integral, remote, and semigraphic annunciators.
It consists of a cabinet containing annunciator logic mod- with backlighted nameplates (shaded rectangles) and pilot
ules wired to visual indicators placed in a 3/4-inch (18.75-mm) lights (shaded circles) for visual indication. The remote sys-
lamp insertion matrix grid forming the cabinet front. The tem may also be used with miniature lamps in a semigraphic
semigraphic display is placed between the lamp grid and a display similar to the one shown at the right.
transparent protective cover plate, and the visual indicators
are positioned to backlight alarm name plates located in the Recording Annunciators
graphic display.
The protective cover and lamp grid are either hinged or Solid-state, high-speed, recording annunciators are available
removable to provide access to the logic module and lamp to amend or substitute a printed record of abnormal events
assemblies. The lamp assemblies are connected to intermedi- for only visual and/or audible alarms. These systems print
ate terminals located behind the lamp grid, and the terminals out a record of the events and identify the variable, the time
in turn are connected to the logic modules. Terminal points at which the alarm occurs, and the time at which the system
for trouble contact wiring are in the back of the cabinet. returns to normal. They can also discriminate among a num-
The semigraphic annunciator is flexible, and changes in ber of almost simultaneous events and print them out in the
the annunciator system, graphic display, and related panel time sequence in which they occurred. A number of optional
modifications can be made easily and cheaply. It is practical features, including secondary printers at remote locations,
to prepare the graphic displays in the drafting room or supplementary visual indication, and computer interfacing,
model shop, thus protecting proprietary process information are also available. The typical unit consists of logic, control,
of a confidential nature. and printer sections.
The graphic display has little or no effect on completing The input status is continuously scanned. If a change in
either the annunciator or the control panel because it can be the trouble contacts has occurred since the preceding scan
installed on site or at any time. The semigraphic annunciator cycle, the central control places the exact time, the alarm
has a high density of 40 alarm points per linear foot (0.3 m) point identification, and the new status of the trouble contact
and a solid-state rather than relay-type logic design. Power (normal or abnormal) into the memory and initiates the oper-
supplies are self-contained in the semigraphic annunciator ation of the output control unit (Figure 4.1l).
cabinet. The output control unit accepts the stored information
Front panel layouts illustrating integral, remote, and and transfers it to the printer, which logs the event. Following
semigraphic annunciators are shown in Figure 4.1k. Integral this, the memory is automatically cleared of the data and is
systems similar to the one shown at the left in the figure are ready to accept new information. In addition to or in place
normally specified on nongraphic control panels. The of the printer (if a permanent record is not required), a CRT
graphic panel in the center contains a remote annunciator display can serve as the event readout. Trouble contacts are
Armature Form
d
nte Spacer B
m ou C
ld r N Form
Fie O ole
N ub
s A
trontact
co
ut
Inp us Coil
t at Coil
s c
i
log
Spring Armature
an A B
Sc ol
tr
con
Permanent magnet
al
ntr
Ce trol Coil
con NS Coil
ry
mo
Me
al Glass
g it Pivot
Di k & C D
capsule
c
clo ndar r
e te
c al in
Pr FIG. 4.1m
t
tpu Standard electro-mechanical relay structures include: A) the clapper-
Ou trol
con type, B) the phone-type, C) the balanced-force, and D) the Reed
relay.
Operational sequence
Trouble Signal Audible
Condition “A” relay “B” relay
contact lamps signal
Normal Normal Off Off Energized Energized
Alert Abnormal Flashing On Deenergized Energized
Audible silenced Abnormal Steady−on Off Deenergized Deenergized
(acknowledged)
Normal again Normal Off Off Energized Energized
Lamp test Normal Steady−on Off Energized Energized
F2 A5 B5 A5 B5
Internal
F1 A B A B
wiring
of A1 A7 B6 B3 B4 A1 A7 B6 B3 B4
plug-in
B1 A6 B2 A2 A3 A4 B1 A6 B2 A2 A3 A4
M
9 6 4 7 8 10 11 9 2 1 5 7 4 3 6 8 10 11 9 2 1 5 7 4 3 6
Resis-
tor
R R
K K K
Internal N N N
chassis F F F
wiring T T T
R R R
C C C
H H H
N
Power supply
H
FIG. 4.1n
Semischematic diagram of a relay-type annunciator designed for ISA new sequence A (old sequence 1B), which sequences are described
in Tables 4.1d and 4.1e.
A and B are energized, and all A and B relay contacts are in and jumper to the neutral side of the line N. Relay B is also
the state opposite that shown. energized from H through the normally closed acknowledge
Relay A is energized from power source H through the pushbutton to terminal C, closed contact A2, and relay coil
closed trouble contract, relay coil A, resistor R, terminal K, B, to N. Relay B is locked in by its own contact B2, which
closes when relay B is energized. The visual indicator is be deenergized, opening contact B1 and the lock-in circuit,
turned off by open contact A5. The audible signal and the thus permitting the system to return automatically to normal
flasher motor are turned off by open contacts A3 and B4 in when the trouble contact closes.
the same circuit. If the acknowledgment button is pushed after the trouble
contact has reclosed, contact B1 opens momentarily, allowing
Alert The trouble contact opens, deenergizing relay A and the A relay to reenergize. Contact A1 opens, and the circuits
returning all A relay contacts to the state shown in Figure 4.1n. are reestablished in their normal operating state.
The visual indicator is turned on, flashing through circuit H,
lamp filament, terminal L, closed contacts A5 and B6, bus F, Operational Test Full operational test is incorporated in the
and flasher contact F1, to N. The flasher motor is driven annunciator sequence shown by replacement of the jumper
through circuit C, closed contacts A3 and B3, R bus, and the connection between main bus terminals K and N with a
flasher motor to N, and the audible signal is turned on by the normally closed momentary contact pushbutton, which when
same circuit. pushed opens all annunciator circuits, thus initiating the alert
condition of all alarm points in the normal condition.
Acknowledged Relay B is deenergized by operating (open-
ing) the momentary contact horn acknowledgment pushbutton Auxiliary Contacts Normally closed contact A7 connected
and is locked out by open contact A2. All B relay contacts to point terminals A and B is available for auxiliary control
are returned to the state shown in Figure 4.1n. The visual functions.
indicator is turned on steady through closed contact B5 to N
and is disconnected from flasher contact F1 by open contact Relay Fail-Safe Feature Two parallel circuits, one consist-
B6. The flasher motor and audible signal are turned off by the ing of closed contact A3 and open contact B3 and the other
horn acknowledgment pushbutton and remain off as a result of open contact A4 and closed contact B4, operate an alert
of open contact B3. signal when there is a failure of either the A or the B relay
coil. A failure of the former initiates a normal alert in the same
Normal Again When the variable condition returns to nor-
way as the trouble contact. A failure of the B relay turns on
mal, the trouble contact closes to energize relay A, the visual
the audible signal through closed contacts A4 and B4.
indicator is turned off by open contact A5, relay B is ener-
gized by closed contact A2, and all circuits are again in the
Normally Open Trouble Contacts The annunciator sequence
state described under normal.
and features described for NC trouble contacts operate in
essentially the same way when NO contacts are used. In the
Lamp Test The lamp test circuit operates the visual indi-
NO system, however, the trouble contact is wired in parallel
cators of only those alarm points that are in the normal
with the A relay coil to point terminals H and NO, and a wire
condition. The circuit is completed through power source H,
lamp filament, terminal L, closed contact A6, bus T, and jumper is installed between point terminals H and NC. Nor-
normally open momentary contact lamp test pushbutton, to mally, the trouble contact is open and the A relay is energized
N. Closing the lamp test pushbutton to N completes the from terminals H and jumper to terminal NC. In the alert
circuit and lights the visual indicators. Alarm points that are condition, the trouble contact closes to deenergize the A relay
in the off-normal condition (either alert or acknowledged) do by applying power source H to the N side of the relay.
not operate because their A relays are deenergized and the Electromechanical relays are available for use with a
A6 contact is open. The visual indicators of these abnormal variety of AC and DC voltages, but 120 AC, 50 to 60 Hz,
alarm points are already turned on (either flashing or steady) and 125 DC are the most popular. Power consumption of the
through the operation of the alarm sequence. logic modules is normally less than 10 voltamperes (AC) and
10 watts (DC). Special low-drain and no-drain logic modules
Lock-In The lock-in feature operates to prevent an annun- are available; these consume no power during normal oper-
ciator alert condition (caused by a momentary alarm) from ation. Visual indicators consume different amounts of power,
returning to normal until the horn acknowledgment button is depending on the type. Small bull’s-eye lights and back-
pushed. Point terminals H and SL are jumpered to provide lighted nameplates use approximately 3 watts, whereas large
the lock-in feature (see Figure 4.1n). When the trouble con- units require 6 to 12 watts, depending on whether one or two
tact opens, the A relay is deenergized, and power source H lamps are used.
is applied to the N side of the relay through closed contacts Electromechanical annunciator systems are reliable and
A1 and B1. may be used at normal atmospheric pressures and ambient
The power is dissipated through resistor R, terminal K, temperatures in the 0 to 110°F (–17.8 to 43.3°C) range. They
and jumper to N. If the trouble contact returns to normal, are not position sensitive. They will generate a substantial
relay A will remain deenergized because potential H is on amount of heat during plant shutdown when a large number
both sides of the coil. If the acknowledgment button is of points are askew, and therefore power should be discon-
pushed before the trouble contact closes again, relay B will nected during these periods. The principal disadvantages of
the relay-type annunciator are size, power consumption, and Before completion of the description of the normal con-
heat generation. dition, the operation of the flasher-audible module in
Figure 4.1o will be described. The module has two oscillators.
Solid-State Annunciators The first is a 3-Hz unit generating a signal that is amplified
and supplied to the logic modules through the Fl bus. The
A solid-state logic module consists of transistors, diodes, resis- second is a 700-Hz oscillator generating a signal that is ampli-
tors, and capacitors soldered to the copper conductor network fied and supplied to the audible signal through the R bus.
of a printed circuit board supplying the required annunciator The audible signal is a permanent magnet-type trans-
logic functions. The modules terminate in a plug-in printed ducer (speaker) that converts the electrical energy into
circuit connector for insertion into an annunciator chassis; they sound. Initiated by an audio oscillator, the active elements
may also contain mechanical switching or patching devices to of which are transistors T1 and T2, these transistors together
provide lock-in and NO-NC options. with passive components (capacitors C1 and C2 and diodes
Figure 4.1o is a semischematic electrical circuit for a D3 and D4) form an unstable multivibrator when an input
remote system with ISA Sequence 1B. The logic module is present on the FR bus. In the normal conditions there is
shown is in normally closed operation. Remote lamps for two no FR signal, the voltage necessary to turn on transistor T1
points and a flasher-audible module, speaker, and acknowl- is missing, and the oscillator will not operate. This is the
edge and test pushbuttons common to a system are also normal, or quiescent, condition.
included. Switch S1 is the NO-NC option switch and is shown
in the NC operating position. Switch S2 is the lock-in option Alert The trouble contact opens and the base of T1
switch and is shown in the lock-in position. The following becomes low, turning off T1. This action produces a high on
description uses negative logic, i.e., a high equals a negative the base of T2 through R20, which turns on T2 and turns off
voltage, whereas a low is approximately 0 volts. T3. The negative end of C4 is clamped to common through
T2, causing a positive pulse at the base of T5 through diode
Normal The trouble contact of the NC alarm point is con- D12, turning T5 off and T4 on. With T2 conducting, the base
nected to an input filter circuit consisting of resistors R13 of T6 becomes low through resistor R6, and with T5 off the
and R50 and capacitor C1. This provides transient signal clamp on the flasher signal is removed through diode D4 at
suppression as well as voltage dropping. The slide switch S1 the junction of R1 and R2. The flasher source provides an
connects the trouble contact and filter network to resistor- alternating high and low voltage at the Fl bus, which turns
R14. In this state transistor T1 is conducting, causing the full T6 on and off, which in turn turns T7 and the light off and on.
negative voltage to be dropped across resistor R17, resulting The flasher signal is generated by transistors T8 and T9,
in a low voltage at the bottom end of resistor R20. Transistors which are the active elements of an unstable multivibrator
T2 and T3 are the active elements of the input memory and used as an on/off signal to the output driver stage. Resistor
are roughly equivalent to the A relay of an electromechanical R24 and capacitor C6 decouple the oscillator from the power
module (see Figure 4.1n). lines so that its frequency is not affected by that of the other
The base of T2 has four inputs, including resistor R20, oscillators. The output driver stage consists of transistors T10
either directly from the trouble contact in NO operation or and T11, a switching inverter, and an emitter follower stage,
from the collector of T1 in NC operation; resistor R19 with which produces an alternating high and low voltage of F1
a locking signal from the alarm memory transistor T5; resis- bus through R23. Transistor T11 is a high-current transistor
tor R28 and capacitor C2, which form a regenerative feed- capable of driving a multiple lamp load.
back from T3; and resistor R15 from the test circuit. The The audible signal is initiated by a high on the FR bus,
base of T3 has one input, resistor R29 from the collector of which turns on an audio oscillator, the elements of which are
T2. In normal operation, all four inputs to the base of T2 are transistors T1 and T2. The audio oscillator output is amplified
low, T2 is not conducting, and T3 is conducting. Conversely, in an audio amplifier stage composed of transistors T3, T4,
when a high signal is present at any one of the four inputs T5, and T6 connected in two pairs—one T3 and T5; the other
to the base of T2, T2 conducts and T3 turns off. T4 and T6.
Transistors T4 and T5 are the active elements of the alarm The input components to the stage from the audio oscil-
memory and are approximately equivalent to the B relay of lator are opposite each other, i.e., whenever one is high (neg-
an electromechanical module. T4 and T5 together with bias ative voltage) the other is low (near zero), causing only one
resistors R30 and R33 and cross-coupling resistors R31 and pair of transistors to conduct at a time. When T5 is off, T6
R32 form a bi-stable (flip-flop). In normal operation T4 is off is on and the capacitor is discharged. This alternating action
and T5 conducts. The upper end of capacitor C4 is connected causes an alternating current to flow in the speaker coil,
to the collector T2. When T2 is off, its collector is at a high giving an audible signal.
and capacitor C4 will change from top to bottom, minus to
plus. Transistor T7 is a high-capacity lamp amplifier and T6 Acknowledged A negative voltage is applied to the base of
is its preamplifier. In normal operation the base of T6 is high T5 through resistor R40 by closing the acknowledge push-
and T6 is on, T7 is off, and the visual indicator is off. button. This turns T5 on and T4 off, and the FR bus becomes
D5 (+) Resistors
R20
R13
R23
R22
R24
R19
R17
R18
R9
R3
R5
R4
**
R32
R20
T
R10
R28
R24
R31
R25
R19
R15
D4 S2 T3 K
T5 C2 C
R21
T11
R8
R41 D4
T7 (−)
R12
R14
D12 D14 C3 C4
R2
R6
* C2 C4
R34
R35
R17
D3 C1
R14
S1 T6 T10
Capacitors
T6
R7
T4 R10 T8 (1) filter
R43
R29
T1 T2 T3 T4
R48
D2 T5 network
D2 T1 T2 T9
required
R50
R13
R16
R15
R11
R9
R2
R1
R1
R6
D1 C1 D1 D6 per chassis
R21
R30
R40
R33
R23 C5
D3
6 11 12 1 2 3 5 7 10 9 8 1 2 3 9 11 5 8 12
* S1 Shown for NC field contacts
S2 Shown for ‘lock-in’ on
* * momentary alarms
R S G
Τ
Κ
FR
C
F1
(+)
(−)
F2
Typical set of
point terminals Main bus
L1 S G terminals R S G F2 CN (−)
NC trouble No trouble
Operational sequence
contact contact
Trouble Nameplate Audible T1 T1 T2 T3 T4 T5 T6 T7
To Condition Signal lamps
Remote lamps L L
Contact Signal NO NC
additional Normal Normal Off Off Off On Off On Off On On Off
LC Alert
signal Abnormal Flashing On Off Off On Off On Off On/Off Off/On
lamps Audible silenced Abnormal Steady-on Off Off Off On Off Off On Off On
R T C (Acknowledged) Off On Off On Off On On Off
Normal again Normal Off Off
Off On On Off On Off On/Off Off/On
Capacitor Functional test Normal Flashing On
Speaker
Audible
Volume Symbols: PNP NPN
Functional silence
control − Collector
test (acknowledge)
Resistor Diode Pad Base Transistors
+
no.
Capacitors Emitter
CN
FIG. 4.1o
Semischematic diagram of a solid-state annunciator designed for ISA new sequence A (old sequence 1B), which sequences are described in Tables 4.1d and 4.1e.
low, thus silencing the audible signal. When the point is The per-point cost of solid-state systems is slightly higher
acknowledged, T5 conducts; this restores the clamp at R1 than that of their relay-type equivalent, due to the cost of
and R2, which removes the flash source voltage. T6 is off all power supplies and interfacing accessories that may be
the time, T7 is on all the time, and the light is on steady. required with solid-state systems. The cost of the logic mod-
ules, visual indicators, and cabinets themselves is not exces-
Normal Again When the variable condition returns to nor- sive. Integrated circuit components using recently developed
mal, the trouble contact closes and the base of T1 becomes microcircuits will most likely reduce size, power consump-
high, turning T1 on. This produces a low on the base of T2, tion, and heat dissipation of annunciator systems.
which turns T2 off and T3 on. All circuits are again in the
state described under the normal condition.
ANNUNCIATOR CABINETS
Lamp Test No separate lamp test is normally provided.
One initiates a full operational test by pushing the test button, Annunciator systems are installed in areas ranging from gen-
which applies an alternate input signal through resistor R15 eral purpose to hazardous. Annunciator cabinets are installed
to the base of transistor T2. This turns T2 on, initiating a full indoors and outdoors in a variety of dusty, moisture-laden,
operational test of the system as already described. and other adverse environments. Industrial annunciator cab-
inets are usually designed for general-purpose, dry indoor
Lock-In The lock-in feature is provided by a switch S2. If use. Special cabinets and enclosures are used in hazardous,
the switch is in the lock-in position (see Figure 4.1o), when moist, and outdoor locations.
T5 turns off (on the alarm condition), a high at the collector
of T5 is coupled to the base of T2 through R19, which keeps Hazardous Area Designs
T2 turned on even if the trouble contact returns to normal.
Transistor T5 will remain off and keep T2 turned on until the The requirements of Class 1, Division 2 hazardous locations
acknowledgment button is pushed. as defined in Article 500 of the National Electric Code (NEC)
If the switch is in the non-lock-in position, the circuit are satisfied by the visual indicators and logic modules (either
between the collector of T5 and the base of T2 is open; there- relay or solid state) of most annunciator systems. A manually
fore, T2 will turn off if the trouble contact returns to normal operated or door-interlocked power disconnect switch is used
before acknowledgment and return all circuits to normal. with annunciator cabinets in those locations to turn off power
when logic modules are relamped or changed.
Operational Test See description under lamp test. Annunciator equipment for Class 1, Division 1 areas is
installed in cast steel or aluminum housings approved for the
Auxiliary Contacts Auxiliary contacts are not supplied as hazardous environment. The housings are expensive to pur-
part of the logic module. Adapter assemblies consisting of chase and install. These annunciators are available in both
relays operated by the semiconductor logic, however, are integral and remote configurations. The remote type is gen-
available. erally wired to explosion-proof bull’s-eye lights. Annunciator
power must be disconnected either manually or automatically
Relay Fail-Safe Feature Not available in solid-state circuits. before the enclosures are opened to prevent an accidental arc
or spark when logic modules are relamped or changed.
Normally Open Trouble Contacts The annunciator sequence One can weatherproof annunciator cabinets installed in
and features already explained for NC trouble contacts operate either general-purpose or hazardous areas (class 1, division
in essentially the same way for NO contacts. The NO-NC 2) either by housing them in a suitable enclosure or by cov-
option switch bypasses inverter stage transistor T1. When the ering the exposed cabinet front with a weatherproof door.
contact closes on an abnormal condition, it turns on T2 though Housings that comply with class 1, division 1 requirements
R20 and the sequence operation proceeds exactly as described are also weatherproof. Figure 4.1p illustrates several weath-
for the NC operation. erproof and hazardous-area enclosures. For the design of
Solid-state annunciators are for use with DC voltages rang- purging systems, refer to Figure 4.1b.
ing from 12 to 125 DC. Power consumption of the logic mod-
ules ordinarily is less than 5 watts. Visual indicators consume Intrinsically Safe Designs
different amounts of power, depending on the type. Bull’s-eye
lights use approximately 1 watt, whereas back-lighted name- Annunciators are classified as intrinsically safe if they are
plates use from 1 to 6 watts, depending on the number and designed to keep the energy level at the trouble contact below
wattage of lamps. that necessary to generate a hot arc or spark. Care must also
Solid-state annunciators are very reliable and are not posi- be taken in installing the system to place wiring so as to
tion sensitive. They offer the advantages of compactness, low prevent a high-energy arc or spark at the trouble contact
power consumption, and little heat generation, factors that caused by accidental short circuit or mechanical damage.
make them particularly useful in large integral annunciators. Thus, general-purpose trouble contacts may be used with
Front view
NC NO
FIG. 4.1q
The tubing configuration and components of a pneumatic annunci-
ator circuit.
a substantial amount of installation space and are expensive “Functional Safety: Safety Instrumented Systems for the Process Industry
to manufacture. Sector,” IEC 61511, 2002.
Gangaloo, N. R., “New Annunciators,” InTech, March 1989.
Gerold, J., “Managing Abnormal Conditions Pays Process Dividends,” Auto-
mation World, September 2003.
Bibliography Ghosh, A., Abnormal Situation Management Is Your First Line of Defense,
Dedham, MA: ARC Advisory Group, 2000.
“Alarm Systems, a Guide to Design, Management and Procurement,” Engi- Hendershot, D., and Post, R., “Inherent Safety and Reliability in Plant
neering Equipment and Materials Users Association Publication No. 191. Design,” Proceedings of the Mary Kay O’Connor Process Safety Cen-
Attwood, D., and Fennell, D., “Cost-Effective Human Factors Techniques ter Annual Symposium, College Station, TX, 2000.
for Process Safety,” Paper Presented at CCPS International Conference ISA TR91.00.02, “Criticality Classification Guideline—Enunciator
and Workshop, Toronto, 2001. Sequences and Specifications,” ANSI/ISA S18.1, 1992.
Belke, J., “Recurring Causes of Recent Chemical Accidents,” Paper Pre- Jamieson, G., and Vicente, K., “Modeling Techniques to Support Abnormal
sented at MAPP, 1999. Situation Management in the Petrochemical Processing Industry,” Pro-
“Better Alarm Handling,” The British Health & Safety Executive, 1999. ceedings of the Symposium of Industrial Engineering and Manage-
Bullemer, P., “Managing Abnormal Situations: A New Operations Para- ment, Toronto, Ontario, Canada, 2000.
digm,” Paper Presented at Honeywell North American Users Group Jutila, J. M., “Guide to Selecting Alarms and Annunciators,” InTech, March
Meeting, Phoenix, 2001. 1981.
Campbell Brown, D., and O’Donnell, M., “Too Much of a Good Thing? Mattiasson, C., “The Alarm System from the Operator’s Perspective,” Paper
Alarm Management Experience in BP Oil, Part 1: Generic Problems Presented at IEE People in Control Meeting, Bath, U.K., 1999.
with DCS Alarm Systems,” Paper Presented IEE Colloquium on Mostia, B., “How to Perform Alarm Rationalization,” Control, August 2003.
“Stemming the Alarm Flood,” London, 1997. National Electrical Code, Articles 725 and 760, National Fire Protection
Cochran, E., and Bullemer, P., “Abnormal Situations Management: Not by Association, 1981.
New Technology Alone,” Proceedings of the 1996 AIChE Safety Con- Nimmo, I., “Abnormal Situation Management,” Chemical Engineering
ference, Houston, TX, 1996. Progress, September 1995.
Cochran, E., Miller, C., and Bullemer, P., “Abnormal Situations Management Nimmo, I., “The Importance of Alarm Management Improvement Project,”
in Petrochemical Plants: Can a Pilot’s Associate Crack Crude?” Pro- Paper Presented at ISA INTERKAMMA, 1999.
ceedings of the 1996 NAECON Conference, 1996. Nochur, A., Vedam, H., and Koene, J., Alarm Performance Metrics, Sin-
Davis, R. C., “Vocal Alarms,” InTech, December 1969. gapore: Honeywell Singapore Laboratory, 2001.
Errington, J., and Bullemer, P., “Designing for Abnormal Situation Manage- PAS (Plant Automation Services), The Cost/Benefit of Alarm Management,
ment,” Proceedings of the 1998 AIChE Conference on Process Plant Houston, TX: Plant Automation Services, 2000.
Safety, Houston, TX, 1998. Poole, A. D., “Design Considerations for Discrete Alarm Systems,” InTech,
Fitzpatrick, B., “Alarms in the Real World,” Paper Presented at Honeywell September 1992.
North American Users Group Meeting, Phoenix, 2001. Smith, W., Howard, C., and Foord, A., Alarm Management—Priority,
“Functional Safety of Electrical/Electronic/Programmable Electronic Floods, Tears or Gain? www.4-sightconsulting.co.uk: 4-sight Consult-
Safety-Related Systems,” IEC 61508, 1998. ing, 2003.