HIPS
Protection
System
The Modern Approach
Traditionally HP pipe work and vessels are
protected from over pressure by Pressure Relief
Valves
The draw back to this is that the entire asset
would have to be able to withstand full pressure
Valves would have to be full flow
Large Vent / Flare
Cost implication
Environmental implication
The Modern Approach
It is better to prevent this occurrence than to
mitigate the consequence
Benefit in terms of design
Inherently more safe
Lower environmental impact
Specification of containment vessels
Implement thermal relief only
Technology to produce such a Protective System
exists
Topics For Discussion
Protective Systems
HIPS
SIS
Protective Systems
Any Item which, by means of its
functionality, protects Personnel,
Plant or Environment from risk of
exposure to Danger or Harm, can
be viewed as a protective device or
system
Protective Systems
This includes Instrument based
Protective systems
ESD, SCS, PES and includes,
Initiator, (PB, switch, Transmitter)
Solver, (logic, hard wire)
Final element, (relay, SOV, Valve)
More commonly called
IPF, (Instrument Protective
Function)
Protective Systems
Legislation makes requirements
upon operators to have inspection
and test schemes for protective
devices.
UK, Pressure Systems Regs
IEC 61508 Safety Standard
Protective Systems
The Pressure Systems Regs
Written Scheme of Inspection
all protective devices
Obviously included Instrumentation
Impact upon Maintenance
Routines
Frequency
Protective Systems
IEC 61508
Equipment Lifecycle
Pipe to Pipe
Includes Initiators, solvers, valves
Quantitative Safety Assessment
Independent Review
Protective Systems
Quantitative Safety Assessment
To Personnel, Environment, Plant
Factors
Consequence of risk
Frequency of exposure
Probability of unwanted occurrence
Outcome is a required Safety
Integrity Level, SIL
Equipment Lifecycle
The IEC standard requires that the
entire life cycle of a protective
system be considered.
Impact upon
Design
Operation
Maintenance
Equipment Lifecycle
Clearly the system must be
designed to offer the required level
of safety integrity
Assessment of required level of
protection
Assessment of required Safety
Integrity Level, SIL
SIL
Quantitative Risk assessment
methods are used to define the
required SIL level for a given
protective function
System is then designed to meet
or exceed this requirement
SIL expressed as a number 1 to 4
SIL
Clearly the system must be
designed to offer the required level
of safety integrity
This level of integrity must not be
compromised by ageing
SIL must be maintained throughout
the entire life of the equipment.
Equipment SIL
SIL is an expression of the integrity of the entire
function, i.e. Initiator to Final element
Its basis is in the Probability of Failure on
Demand, PFD
Safety
Integrity
Level
PFD
Average probability of failure to perform designed function on demand
> or = 10Exp-5 to < 10Exp-4
> or =10Exp-4 to < 10Exp-3
> or = 10Exp-3 to <10Exp-2
> or = 10Exp-2 to 10Exp -1
Equipment SIL
It can be seen that maintaining SIL
levels over the life cycle of a system
has an impact upon Maintenance
SIL
Required SIL Rating
TIME
Equipment SIL
The entire system must meet the
SIL requirement
This leads to designs becoming
segregated by technology
SIL 4 Hardwired, triplicated, etc.
SIL 3,2,1 Redundant, PLC etc
SIL 4 become HIPS
Other SIL become SIS
HIPS
HIPS is an Acronym which stands for,
HIGH INTEGRITY PROTECTION SYSTEM
Malampaya HIPS is for SIL 4 requirements only
Multiple voting initiator,
Redundant, fault tolerant logic solver,
Discrete logic
Multiple final element
Lower SIL requirements fulfilled by the SIS
SIS
SIS is an acronym which stands for
Safety Instrumented System
Malampaya SIS is for SIL 3,2, and 1
requirements.
Multiple voting initiator,
Redundant, fault tolerant logic solver,
Multiple final element
Level of input voting dependant upon SIL
Inter trip
HIPS
SIS
KEY SWITCH
MATRIX
HIPS SIL 4
SIS SIL 3,2,1
2oo3
1oo2 or 2oo2
Duplicated
Output
Triplicated
Input
Single or
double
Output
Single or
double
Input