Tank Gauging System Specification for Full

Containment Tank
Glossary

2oo3 Two out of Three

API American Petroleum Institute
BPCS Basic Process Control System
DCS Distributed Control System
DU Dangerous Undetected
ESD Emergency Shut Down
FCC Federal Communications Commission
FMCW Frequency Modulated Continuous Wave
GIIGNL International Group of Liquefied Natural Gas Importers
HART Highway Addressable Remote Transducer
IEC International Electrical Commission
IS Intrinsically Safe
ISO International Organization for Standardization
LED Light-emitting Diode
LNG Liquefied Natural Gas
LTD Level, Temperature and Density
OIML The International Organization of Legal Metrology
OPS Overfill Prevention System
PFDavg Average Probability of Failure on Demand
RTD Resistance Temperature Detector
RTG Radar Tank Gauges
SFF Safe Failure Fraction
SIL Safety Integrity Level
SIS Safety Instrumented Systems
Scope
This specification defines the requirements for a high precision full containment tank gauging
system with highest accuracy for cryogenic and/or refrigerated gases.
The specification covers all hardware, software, software configuration, calibration and
communication with host computer systems, when so required. In addition to level measurement
for inventory and safety purposes, the specification covers auxiliary temperature, pressure, cool
down control, leak detection- and stratification monitoring.

1 Industry Standards
A tank gauging system and/or the organization(s) developing and manufacturing one shall comply
with, and where applicable be certified according to, the following national and international
standards and best practices.

1.1 Standards and Best Practices

Standard Vocabulary
EN 1473 Installation and equipment for liquefied
natural gas — Design of onshore installations
API 625 Tank Systems for Refrigerated Liquefied Gas
Storage
API MPMS ch. 7.3 Temperature Determination—Fixed
Automatic Tank Temperature Systems
API MPMS ch. 3.1B Standard Practice for Level Measurement of
Liquid Hydrocarbons in Stationary Tanks by
Automatic Tank Gauging
API 2350 Overfill Protection for Storage Tanks in
Petroleum Facilities
GIIGNL Guidelines from the International Group of
Liquefied Natural Gas Importers

1.2 Electrical Standards for Hazardous Areas

Local regulations apply Example:
ATEX
IECEx
FM-US
FM-Canada
Inmetro

1.3 International Organization for Standardization

ISO 9001 Quality management systems
ISO 14001 Environmental management systems
ISO 4266:2002 part 1, 3, 4 & 6 Petroleum and liquid petroleum products-
Measurement of level and temperature in
storage tanks by automatic methods
1.4 OIML, International Organization of Legal Metrology
OIML R85:2008 Automatic level gauges for measuring the
level of liquid in stationary storage tanks.
Test report format R85 shall be available.
The product shall be registered at the OIML
certificate database. (www.oiml.org)

1.5 Safety Standards

IEC 61508-2, - 3 Functional safety of
electrical/electronic/programmable electronic
safety related systems
IEC 61511-1, -2, -3 ed. 1 Functional safety – Safety instrumented
systems for the process industry sector

1.6 Communication Standards

IEC 61158 Industrial communication networks – Fieldbus
specifications
IEC 62591 Industrial communication networks - Wireless
communication network and communication
profiles - WirelessHART

1.7 Other Standards

CE Mark Equipment shall conform to ATEX directive,
EMC directive, RTTE directive and LVD
directive
FCC part 15 Federal Communications Commission
– Low power communication device
transmitter
IEC 60079-11 Explosive atmospheres - Part 11: Equipment
protection by intrinsic safety "i"
IEC 60079-25 Explosive atmospheres - Part 25: Intrinsically
safe electrical systems
IEC 60751 Industrial platinum resistance thermometers
and platinum temperature sensors

2 System Requirements
The manufacturer of the tank gauging system shall comply with the international standards ISO
9001 and ISO 14001.
The tank gauging system shall consist of a total system solution from tank units to Operator
Interface and external data communication. The system shall be able to measure tank level,
density, pressure and product-, cool down- and leak detection temperature. Based on the
measured values, the system shall provide data and inventory calculations (net volumes, density
and mass) to host and monitor temperature and density profile across tank innage. The level
measurement of the tank gauging system shall be based on high precision Radar Tank Gauges
(RTG).
The system shall consist of the following instrumentation:
a. Minimum two radar type level gauges equipped to provide remote level readings and
level alarm signals in the control room. Each gauge shall be equipped with transmitter
and threshold contact allowing the reading of low-low level, low level, normal operating
level, high level, and high-high level. Both gauges shall be equipped for reading with
multiple element temperature selector and converter, and temperature elements.
b. A third independent instrument shall be used for level alarm signals. This gauge shall be
of radar type. A safety shutdown in a voted configuration with the primary level gauges
(a) is carried out by the ESD system when critical tank level is reached.
c. Level, Temperature and Density Measurement
When required, the instruments shall be designed for cryogenic tanks and shall be
suitable for measuring the level, temperature and density of LNG across the tank innage.
System shall support redundant technologies for stratification monitoring.
Devices shall connect to DCS and to tank management system.
d. Multiple spot temperature measurements
Liquid temperature measurements shall be done with Pt-100 type Resistance
Temperature Detectors (RTDs). Multiple spot temperature measurement systems are
the standard configuration.
e. Local indication and display
The system shall have the possibility to be provided with field mounted indicators.
f. Cool down and leak detection temperature sensors
Measurements for cool-down and leak detection shall be of RTD type, platinum sensor
type.
g. LNG Tank Management system
A system is to be provided for the purpose of communication with the tank
instrumentation to read levels, temperatures, density, etc. for programming gauge
parameters and for readout or communication to host.
h. Stratification safety
The system shall be able to detect stratification. System shall detect and indicate alarm
when any of the relevant parameters exceeds configured set points and as an option
provide roll over prediction software.

2.1 Communication and Power Supply

2.1.1 Hard-wired Communication and Power
The system shall internally use an international standardized communication bus as according to
IEC 61158. No proprietary protocols shall be used. The system shall be scalable enabling add-
on of devices at a later stage. The communication infrastructure shall allow connecting the system
using both daisy-chaining and star configuration.
The RTG, associated temperature transmitters, pressure transmitters, field displays and related
equipment shall be Intrinsically Safe (IS), 2-wire and bus-powered. All sensors and devices shall
communicate via a digital communication bus. The bus shall auto configure to simplify installation
of equipment.
The tank gauging system shall be able to integrate a wide range of measurement devices in order
to meet different performance and functionality criteria required for each tank in the system.
The tank gauging system shall have the ability to emulate and interface with other types of tank
gauging systems using built-in communication adapters and protocol drivers.
The system shall automatically adjust to external power in the range of 24 – 48 VDC or 48 – 240
VAC, 50/60 Hz.

2.1.2 Wireless Communication

Wireless communication shall be possible and done in accordance to the IEC 62591 standard.
Proprietary wireless protocols shall not be used.

2.2 Safety
2.2.1 Functional Safety
The system shall have a separate safety function suitable for use in Safety Instrumented Systems
(SIS). The functions must be certified by a third party and capable of meeting Safety Integrity
Level 2 (SIL 2) requirements as per IEC 61508.
The tank gauging system shall have optional SIL 2 rated 4-20mA outputs configurable for level
measurements and shall meet the requirements for overfill prevention.
The tank gauging system shall have optional SIL 2 rated relay outputs, which are controlled by
customer-selected variables such as level and temperature. The relays can be used for control of
pumps, valves etc. or indication of alarms. The relay outputs shall meet requirements for overfill
prevention. The relay alarms shall be configurable from the software residing in the operator
interface unit in the control room. It shall be possible to control each relay by multiple inputs and
multiple alarm criteria.
The entire system shall be able to perform alarm and error handling for all system components.
The system components shall have built-in status LEDs.
Level technology separation between the Overfill prevention system (OPS) and the basic process
control system (BPCS) should use identical separation as per IEC 61511 and API 2350.

2.2.2 Stratification Safety

For LNG storage, the system shall provide temperature and density profiles across tank innage
to monitor, prevent and eliminate stratification.
System should be capable of providing redundant profile measurements using an LTD device and
the inventory level devices and temperature instruments.

2.2.3 Redundancy
The system shall provide for several levels of redundancy:

• The RTG shall be capable of built-in measurement redundancy.

 • The system shall support redundant communication paths such as dual hard wired
buses or a combination of wired communication and wireless according to IEC 62591
from the tank to the data collector/control room.
• If dual hard wired buses are used, simultaneous use of different communication
protocols shall be supported.
• Critical system devices such as the field data concentrators shall have the ability to
operate in hot standby redundancy mode. The switch to redundant standby units shall
be automatic.

2.2.4 Other
During normal operation, bench testing or field service, the RTG shall not generate microwave
power levels hazardous to humans. International health requirements stipulate that the radiated
power shall be less than 2 mW EIRP.

2.3 Local Indication and Display

The system shall have the possibility to be provided with field mounted indicators. The system
shall support up to 3 field displays per tank. Field level indicator integral to the field control unit
shall display exactly the same level as indicated in the control room operator console.
The readout devices shall be user configurable in Metric or U.S/Imperial units. The display digits
shall have a height of at least 25 mm (1 in.) and be back-lit. The displays shall be configurable for
various read-out parameters and view modes and shall be able to display 4 or more variables
simultaneously.
The display shall support multiple languages in menus and view screens. The user shall be able
to select which language to use directly in the device via the display settings. At least 6 different
languages shall be supported.
The display shall have a protective lid.

2.4 Configuration
Measurement devices in the system shall be configurable remotely from a software package in
the control room, or locally on the tank using an Intrinsically Safe (IS) handheld field
communicator, or in case of wireless communication, via the wireless interface.
All configurable measurement devices shall have an optional hardware based write protection
function which can be sealed.

2.5 Environmental Conditions

All measuring devices shall be designed for continuous operation in ambient temperature of -
40°C to +70 °C (-40°F to +158 °F) and relative humidity of 100% while maintaining custody
transfer accuracy. For hot climates, self-ventilating sun radiation protection shall be provided.
The control room equipment such as operator workstations and associated peripheral equipment
shall be installed indoors. The control room equipment shall be designed for operation at ambient
temperatures of 0 - 50 °C (32 - 122 °F) and a relative humidity of 95%, non-condensing.
The system shall have lightning and surge protection. The field equipment shall be designed with
galvanic isolation on communication and power connections. The field units shall be equipped
with transient suppression components.

3 General Radar Tank Gauge Design

3.1 Radar Tank Gauge Operation
The radar gauge must use Frequency Modulated Continuous Wave (FMCW) technology. Radar
technology which measures level based on elapsed time between sending and receiving a fixed
frequency signal (pulse or time domain) are not suitable for high performance tank gauging.
Incremental phase evaluation shall not be used since it can lead to significant level gauging errors.
The RTG shall have a signal processing system optimized for high accuracy tank gauging. It shall
have a digital reference to ensure accuracy and stability. Analog delay lines suffer from
temperature and aging effects and shall not be used. Signal processing algorithms and/or
software for enhanced accuracy and for handling interference and/or liquid surface echoes shall
be automatically controlled by the RTG. Manual activation of such functionality shall not be
necessary.
The radar gauge itself shall calculate the level rate value. The filtering of the level rate value shall
be adjustable. The level rate value shall be available on the field bus as a standard parameter in
the communication protocol. A host calculated level rate shall not be used since timing errors
make it unreliable.

3.2 Performance Criteria

For storage tank applications, the instrument accuracy of the RTG shall be equal to or better than
±0.5 mm max deviation. The vendor shall on request provide instrument accuracy documentation
for each individual gauge. The test procedure shall be traceable to national standards.
For high performance measurement the drift of measured level value shall be less than half a mm
(±0.5 mm) for the entire ambient temperature range: -40°C to +70 °C (-40°F to +158 °F). The
measurement update time or reaction time shall be less than 0.5 seconds. Repeatability shall be
0.2 mm or better.
The RTG shall deliver stated accuracy right from the initial adjustment on the tank, without use of
phase evaluation and auto correction. The instrument shall not need initial emptying or filling
operations for calibration. The RTG shall measure accurately at level rates of up to 200mm/s right
from initial start up.

3.3 Mechanical Construction

The RTG shall be capable of having dual, independent and galvanically isolated gauge
electronics, enabling built-in redundancy, dual level outputs or a combined level gauging and
alarm handling. Independent measurement of level and level alarm shall be possible through 1
single tank opening.
The RTG shall be equipped with dual memory banks enabling reprogramming and configuration
under continuous operation.
The RTG subparts (antennas, electronics, housing etc.) shall be designed in such a way that they
can be freely interchanged, without recalibration.

3.4 Safety
The RTG shall have a separate safety function suitable for use in Safety Instrumented Systems
(SIS). The function must be certified by a third party to be capable of meeting Safety Integrity
Level 2 (SIL 2) requirements as per IEC 61508. The Safe Failure Fraction (SFF) of the stand-
alone RTG shall be specified and certified to be greater than 90% and allow redundant use (voted
2oo3) for SIL 2.

4 Installation
4.1 Installation on Cryogenic and Refrigerated Full Containment Tanks
The RTG shall remain accurate over the entire measuring range (>60 meters/197 ft). It shall have
online adjustment of the transmitted frequency so that accuracy is not affected by tank
temperature. The measurement shall be reliable and accurate also when measuring on liquids
with low dielectric constant (<1,7) and under surface boiling conditions.
The antenna design shall be suitable for installation in a 4-inch, schedule-10, 40, or a 100 mm
diameter, stainless steel still-pipe. The vendor shall provide an optional isolation valve at the
gauge head to provide increased safety. The vendor shall provide at least 1 verification pin for
the still-pipe to permit on-line field verification of the level measurement while the tank is in
operation. During verification, the normal level reading shall also be available. A device for end-
of-pipe measurement verification shall be provided.
The RTG shall be able to be integrated into a tank management system via standard
communication protocols.
To cover the entire tank any multiple spot temperature sensors shall be provided with lengths up
to 70 meters (230 ft) as standard offering.

5 Temperature Measurement System

Temperature measurement shall be done with Pt-100 type Resistance Temperature Detectors
(RTDs). Multiple spot temperature measurement systems are the standard configuration.

5.1 Multiple Spot Temperature Measurement

The system shall support up to 16 RTD elements per temperature transmitter. The RTD elements
shall be freely placeable – the system should not be locked to equidistant spacing. The distance
between the individual elements shall not exceed 3 meters (10 ft).
The system shall use 4-wire RTD elements.
The temperature measurement system shall at least be designed for liquid products with
temperatures down to -170°C (-274°F).
Sensors used for liquefied gases at temperatures below -50°C (-58°F) shall conform to DIN Class
A.
The temperature conversion accuracy in the temperature transmitter must be ±0.05°C (± 0.09°F)
or better. The RTD sensor accuracy shall be capable of delivering ±0.1°C (±0.18°F) accuracy for
the whole temperature range -170°C up to +100°C (-274 to +212°F).
Calibration of the temperature sensors resulting in individually calculated using Callendar-van
Dusen coefficients shall be possible. Configuration of the temperature transmitter using the
temperature sensors’ calibration data shall be supported.
Temperature measurement devices for average temperature measurements shall include a
specified number of RTD elements of graduated lengths housed in a common flexible metal
thermo-well. The system shall support multiple temperature transmitters per tank.
The field electronics shall be capable of automatically determining a true average from the
submerged RTDs. In case of non-cylindrical tanks, weighing factors shall be possible to use for
correct average product temperature calculations.

5.2 Cool Down and Leak Detection Temperature Measurements

Depending on tank size, between 8 and 32 sensors should be dedicated for cool down on inner
tank bottom and inside inner tank shell (wall).
Depending on tank size, between 8 and 32 sensors should be dedicated for leak detection in
bottom plate of annular space duties respectively. At least 4 of the leak detection sensors should
be dedicated to shell vertical corner protection measurements.
The temperature sensors for cool-down and leak detection shall be of 4-wire RTD type, able to
be built with lengths up to 300m in accordance with IEC 60751 and be designed for liquid products
with temperatures down to -200°C (-328°F).
Each probe for leak detection and cool down shall be connected to a multi spot temperature
transmitter located on the tank and connected to DCS through tank gauging system infrastructure
to Tank Management and safety systems. Each transmitter shall be able to connect up to 16 4-
wire RTD probes.

6 Level, Temperature, Density Instrument (LTD)

The level, temperature and density monitoring system provides level, temperature and density
profiles over the tank innage.
The field mounted equipment shall consist of tank mounted probe assemblies for probe position,
a vibrating tube density sensor and an RTD sensor. The probe shall be suspended inside the tank
via a drive tape/cable/chain. The tape/cable shall be connected to the tank top mounted drive
mechanism.
LTD device shall in operator selected time intervals automatically perform temperature and
density measurements across tank innage. Resolution shall be pre-determined by operator.
Operator shall also be able to manually preselect two specific levels and resolution for a defined
area of the tank innage. DCS/TMS shall continuously be able to receive profile data including
level, temperature and density readings.
7 Field Interface Unit
The field interface unit shall transfer data from tanks to an inventory management system and/or
to a Host/DCS system. The field interface unit shall support all instrumentation included in the
tank gauging system using standard protocols
The field interface unit shall have a hardware write protection-switch and possibility for mechanical
metrological sealing. It shall be able to collect data for up to 60 tanks and/or 250 field devices. It
shall have a minimum of 8 configurable ports capable of either field or host communication.
Reconfiguration of ports from field to host communication (and vice versa) shall be possible.
Additional interfaces shall be ports for Ethernet, USB and SD-cards.
The field interface unit shall be capable of operating in a redundant pair with an identical,
secondary field interface unit acting as hot standby. The switch to the redundant unit shall be
automatic and not depending on external action.
The field interface unit shall have embedded capability to calculate inventory volumes.

8 Tank Management Software (TMS)

8.1 Human Machine Interface (HMI)
The HMI shall be a user configurable graphical interface allowing the operator to see the status
and current readings of all instruments at all times. It shall perform calculations, system
management, alarm handling, configuration and data storage.
The HMI shall support network functions. Real-time data from all tanks shall be available on all
server and client stations. It shall be possible to configure which tanks shall be available on each
server and client PC station. It shall be possible to view data remotely and/or on portable devices
using a secure web interface. All users shall have unique usernames and passwords and receive
access only to their own dedicated tanks.
The HMI must at a minimum provide the following general categories of standard functionality:

• All standard windows shall be able to customize on demand. Standard operator’ views
shall be easily customized on-site, e.g. possible to change font, color and presented
parameters.
• The HMI shall have the ability to support local languages.
• The HMI software shall have the ability to interface to all common DCS, PLC, SCADA
systems or similar. The interface to host system interfaces shall be Modbus serial links
and OPC DA format.
• The HMI software shall be able to act as a master for other types of tank gauging
systems. All standard parameters shall be supported. The HMI system shall present
diagnostics and support maintenance and service commands to connected devices. The
Master interface to other systems shall be Modbus RTU and OPC DA. The collected
data shall be mappable to any tank in the HMI software.
• An alarm log shall be provided which displays all current acknowledged and cleared
alarms. An alarm inhibit function shall be provided so a single or group of alarms could
be de-activated. The ability to inhibit any alarm shall be multi-level password protected.
 • A group configuration function shall be provided that permits the plant operator(s) to
define the groupings of tanks for display on the group view screen and the group
Inventory screen. A similar grouping function shall be available for alarm handling.
• A value entry function shall be provided that permits the plant operator(s) to manually
enter process values and operating parameters for each tank. It shall be possible to
configure tanks in the system which are not equipped with RTGs.
• An engineering function interface shall be provided for system configuration and set-up.
All configuration changes shall be password protected.
• It shall be possible to set individual access levels for all windows in the HMI software.

8.2 Tank Inventory Management

The tank management software (TMS) shall calculate tank inventory values according to
applicable API and ISO standards. All values in the calculation process shall be displayed.

8.2.1 Data Parameters

The software shall at a minimum provide the following data parameters:

• Net Standard Volume

• Gross Standard Volume
• Total Observed Volume
• Gross Observed Volume
• Mass calculations
• Vapor, liquid & air pressure
• Observed density
• Reference density
• Level rate
• Flow rate
• Average temperature
• Spot temperature
• Air temperature
• Level
• Ullage
For full containment tanks the software shall at a minimum provide the following data parameters:

• Liquid Mass
• Mol Mass
• Outer Vapor Temperature
• Inner Vapor Volume
• Inner Vapor Mass
• Outer Vapor Volume
• Outer Vapor Mass
• Total Vapor Volume
• Total Vapor Mass

8.2.2 Functionality
The software shall at a minimum provide the following tank inventory functionality:
• Perform standard commands for mechanical instruments such as servo level gauges
and Level, Temperature and Density gauge (LTD)
• Perform and display a profile of temperature readings across the tank innage
• Perform and display profile of density readings across the tank innage
• Perform and display a detailed profiled measurement in an operator selected section of
the tank
• Graphically display the cool down sensor temperatures measurements
• Graphically display the leak detection sensor positions and temperature measurements
• Alarm capabilities: The system shall generate multiple High, Low, and Safe alarms for
level, level rate, temperature and pressure.
• The system should also generate alarms for Temperature and density profile deviations
(stratification) and deviations in leak detection or cool down temperature sensors
Configurable time delays shall be provided for each process variable to minimize
nuisance alarms.
• Alarms shall be able to be sent via email and SMS text messages (via gateway).
• The system shall be capable of storing unique volume tables and correction factors, with
at least 5000 strapping points for each storage tank. These tables will provide level to
volume conversion of the tank.
• The system should be capable of calculating observed density (DOBS) and volume
correction factor (VCF) based on DENSITY VS TEMP volume table or Density correction
factors (DCF).
• The system shall have an input for ambient air temperature. The system shall be able to
use this temperature value combined with the product temperature, for compensation of
thermal tank shell expansion.
• System shall be able to calculate Net Standard Volume (NSV) based on a user selected
reference temperature.
• The system shall be capable of handling primary and secondary value units. (e.g.
primary volumetric values in cubic meters and secondary unit in barrels).
• Flow rate: The system shall provide a calculated volume rate of change based on the
true level rate from the RTG and the tank capacity table.
• Batch handling: The system shall provide importing and exporting flow indications based
on volume movements in the tank. Indications of “estimated end time of batch” shall be
provided based on user set points. The batch handling shall be able to handle multiple
destinations and sources. The batch function shall generate printable batch reports.
• Report functions: The system shall be able to generate reports in different formats,
minimum in text-, PDF- and HTML-format. All reports shall be printable, sent via e-mail
and stored as a file. Reports shall be generated manually or automatically by user
defined schedules. Minimum required reports include: tank reports, inventory balance
reports and alarm reports. Reports shall be configurable by the user as standard
functionality, without use of 3rd party software or add-ons.
• The software shall include a proof test manager to generate proof test report and to
handle proof test history and proof test scheduling. The Tank Gauging Safety System
shall be checked at regular intervals in order to detect Dangerous Undetected (DU)
 failures, faults not detected by the diagnostic software (DD). The time periods depend on
the PFDavg value.

8.2.3 Rollover Prediction

As an option to the standard stratification safety functions, the system shall be able to provide
reliable rollover prediction and product composition data using the tank gauging system and
additional data required from Host system.
The software shall be able to detect stratification automatically from the LTD system profile and
determine the positions of the layers. The system shall provide data on the time to rollover and
raise alarms when any of the parameters exceed configurable setpoints.
The software option shall also assess and provide data aging of homogenous LNG.

8.3 Diagnostics
The system diagnostics shall be capable of performing self-checks on each tank gauge and data
collection or control units. At a minimum, the following features shall be included:

• All field inputs, including level, temperature, density and pressure signals shall be
monitored for errors. All errors shall be alerted and logged. The error indications shall be
categorized as communication failure, measuring device failure or software failure.
• All diagnostic information shall be displayed, alarmed, stored in historical files and
included in reports. This diagnostic information shall include details of all failure types,
system status and configuration modifications. All diagnostic alarms shall be presented
locally or distributed via e-mail.

8.4 System Security

The tank gauging software shall have functions to enable auto start of the software when the PC
is powered up. The software shall be able to run as a shell, in order to prevent the PC to be used
for other activities.
A metrological seal function shall be provided in the HMI to prevent unauthorized tampering of
the system. The method of sealing shall be approved by NMI (the Netherlands) and PTB
(Germany).
The HMI and main application software shall have a minimum of 15 levels of password protection.
The security level of certain functions shall be changeable in all configuration windows. All
functions shall have a pre-set security password level.
It shall be possible to set up individual user accounts with unique passwords and security levels
for each operator. This shall enable tracking of system changes recorded in a log file. The system
administrator with the highest level of authority and password shall handle the assignment of user
accounts.

8.5 System and Data Recovery

The tank gauging software shall support redundancy in several ways. The software itself shall
support redundancy as well as being able to handle redundant Field Interface Units and
communications ports. The software shall be able to operate with 1 primary active computer
together with a silent backup (hot redundancy), as well as with multiple active PCs asking for data
separately.
The tank gauging software shall be capable of automatic data backup of all system configuration
and process parameters. The system shall also be capable of retrieving all configuration
parameters once a system failure has been cleared.

2020 Ed 1