HIMA EMERGENCY

SHUTDOWN SYSTEM
By Usama Sheikh

1
VISION, MISSION & VALUES
To be an inspiring business transforming
opportunities into sustainable realities.

Vision Innovation
Teamwork
Values Perseverance
Diversity
Mission Empowerment

Ensure business sustainability with sharp

focus on people development, growth and
stakeholder value thus contributing in food
security and group’s CSR efforts.
2
Contents
History of process safety

01
Safety Instrumented Systems

02
HIMA PLC
03
HIMA Architecture through an
example
04
Some recommendations
05
3
Evolution of process safety

1700s 1800s 1900s 2000s

4
Safety instrumented system

Sensors Logic Solvers Control Elements

5
Safety instrumented function
Overfill SIF I
O

O
LSH
I

Overpressure XV

SIF
PT

High Temp. O

SIF I

TSH XV

6
Layers of protection
Emergency Response
Dyke
Safety instrumented system
Relief Devices
Loss of
Operator Intervention
Basic Process Control System containment!
Process Design

7
Emergency Shutdown Systems at FFBL

Urea, Dap, Utilities Ammonia

ESD-U ESD-A ESD-D ESD-U F-1003 BMS

Modicon
HIMA HIMA HIMA HIMA HIMA
Quantum
H51Q-HS H51Q-HS H51Q-HS H51Q-HS H51Q-HS

8
HIMA Safety System
HIMA HIQUAD

MS, Low availabity – no redundant

Compact! But very limited hardware Full sized but yet still
in the number of I/O HS, High availability – redundancies
modular! 256 I/Os per rack!
available
HRS – Redundancies at all levels 9
9
HIMA H51q-HS

Central rack

I/O rack

10
10
Central rack

power supplies! power monitoring module Communication modules

Redundant processors

11
I/O Rack

F3237 F3236 F3221 F3330 F3322 F3422

power distribution
I/O Modules coupling module modules

12
12
Low pressure SIF
PLC PSL

OIL OIL
PDSH
FILTER FILTER
Starter

RUN

OIL SUMP
STOP
RUN
OIL SUMP
TT
Lube oil
Filter being
starts pumping
to choke thruis
which
ESDS
PSLstarts
primarysends the backup
signal
pump, motor
to ESDS
detected bypressure
pdsh is
maintained
13
Low pressure SIF
Communication
module Redundant F3237: Safety Related Input module
SIL 3 redundant The main test routines are:
Coupling
Redundant module Central F3321: Non-safety related 16
outputAlarms
modules and with
events • Switch on and switch-off capability.
adds
communication
Data the
transfer rack
to DCS
Programming
line monitoring
display
Infinitewith andand
timing
MOSes! Module channel input card
address
I/O
modules bus to
is
provide
via the data
serial
MODBUS thebus HSR • input
Non-testable
DCS
monitoring
self-test
stampingpacket
through
capabilities
fromandcpu’s • Crosstalk of the circuits byw/o line 0 test
walking
HSRwith
LinkHIMA’s
and propriety
connect monitoring
EWSthe
to give viartcHIBUS
start
monitors
tocommand protocol
external systems the • input
Usedfilters
for non-safety signals
supply voltage • Function of the
EWS
through watch dog Coupling
• Correct function of the module- Short circuit and wire
I/O BUS Module
break of the sensor line

F3322: Non-safety relatedEvent

16
Non-Safety Non- Safety channel output card Logger
Safety related input related Safety related • Non-testable w/o line
modules output related output monitoring
module Redundant F8650X
input modules • Used for non-safetySoft MOS
With diagnostic
Line modul signals
display to identify
monitoring e faults to channel level
resistances Synoptic panel alters the
DOL operator of the state
Pressure switch Synoptic Lamp
& Alarm MOS 14
Central module (F8650X)
PRIMARY
Redundant Redundant
PRIMARY

Reading Executing the Writing Performing

Inputs logic outputs diagnostics
15
Analog input module
F6250: Safety Related 2 channel Input
module

Input range: 0-5.5V/ 4-22mA

Output: Contacts
Setting: 0-110%
12 bit resolution adc
Also capable of measuring rate of
change

Line monitoring:
<3.6mA open circuit
>21mA short circuit
According to NE 43
16
Recommendations

Short Term
Upgradation:

F3236+F6250 F6217

Long Term
Upgradation:

HIQUAD H51-Q HIQUAD X

17
Thank you

18