lhc access system 1 authors: p, ninin, l. scibile t, ladzinski edms: 698097 the lhc access system...
TRANSCRIPT
Authors: P, Ninin, L. Scibile T, Ladzinski EDMS: 698097
LHC ACCESS SYSTEM
1
The LHC Access System
Where do we stand ?
P. Ninin, T. Ladzinski, L. Scibile, TS-CSE
Workshop Chamonix XV – 25 January 2006
Authors: P, Ninin, L. Scibile T, Ladzinski EDMS: 698097
LHC ACCESS SYSTEM
2
Agenda
• System overview
• Prototype
• Man Machine Interfaces
• Challenges
• Conclusion
Authors: P, Ninin, L. Scibile T, Ladzinski EDMS: 698097
LHC ACCESS SYSTEM
3
Scope
LHC Access Control SystemLACS
Off-the-shelf Access Equipement
LHC Access Safety SystemLASS
Interlock SystemBeam => No AccessAccess => No Beam(Nuclear category)
Integrated concept for LHC Machine & Experiments to protect people against the LHC radiation hazards.
Authors: P, Ninin, L. Scibile T, Ladzinski EDMS: 698097
LHC ACCESS SYSTEM
4
LHC site access
LHC building access
LHC experimental service area access * ACCESSIBLE during beam operation
The LHC accelerator and experiment Access Service Access Tunnel Access Experiment NON ACCESSIBLE during beam operation
Authors: P, Ninin, L. Scibile T, Ladzinski EDMS: 698097
LHC ACCESS SYSTEM
5
LHC Access Control System
Goals:
• Manage access rights
• Identify user
• Verify authorization
• Automatic or remote access control
Status:
• Contract running since September 04
• System engineering completed
• Site acceptance of the pilot installation “LHC 0” - Started in June 2005 - completed in January 2006
• +3 months: quality and integration issue
• LHC 8 installation- Doors/grids installation (TS/IC)
- Cabling (TS/EL)
- Access equipment
Authors: P, Ninin, L. Scibile T, Ladzinski EDMS: 698097
LHC ACCESS SYSTEM
6
LHC Access Control Systems
• Scope of the system- 34 Access points- 95 controlled sectors doors- 65 interlocked End-of-Zone doors - 26 interlocked “porte crinolines”- 17 interlocked movable shielding walls- 170 Racks- 110 surveillance camera- 200 controllers (PLC, PC, etc)- Remote control system form CCC and Experiments - Supervision system from TCR
Authors: P, Ninin, L. Scibile T, Ladzinski EDMS: 698097
LHC ACCESS SYSTEM
7
Access Point
PADMAD
Display
Signalisation
Tokens Distributors
Badge readerIntercom
Biometry
Radiation key
Authors: P, Ninin, L. Scibile T, Ladzinski EDMS: 698097
LHC ACCESS SYSTEM
8
Access Equipment
Authors: P, Ninin, L. Scibile T, Ladzinski EDMS: 698097
LHC ACCESS SYSTEM
9
TS-CSE working ona central facility for:
EnrolmentAccess card deliveryDosimeter delivery
Safety trainingHelp-desk Access
B33Visiteurs
Authors: P, Ninin, L. Scibile T, Ladzinski EDMS: 698097
LHC ACCESS SYSTEM
10
From a prototype to a reliable system
• Management of the various access mode regarding the safety
• Control system performance
• Video/Audio integration
• Material Access Device Robustness
• Biometry integration and link with Human Resource Database
• Man Machine Interface Design
• Patrol
• Contractor management : quality, deadlines
Authors: P, Ninin, L. Scibile T, Ladzinski EDMS: 698097
LHC ACCESS SYSTEM
11
LHC Access Safety System
Goals:• Protect personnel during Beam operation
- nobody inside - Stop LHC if a door is forced
• Allow Access operation when safety conditions are met- No radiation hazards (LHC beam, RF).
• Nuclear Safety system- Audited by the French Nuclear Authority INB
Status:• HW and SW Architecture prototyping done• Identification of the interlocked LHC machine elements completed• INB documentation completed• Safety studies completed• Contract for the realisation of the system started in October 2005
- SW & HW Design progressing well
Authors: P, Ninin, L. Scibile T, Ladzinski EDMS: 698097
LHC ACCESS SYSTEM
12
LHC Access Safety System – INB
• Architecture reviews with the French Nuclear Safety Authorities – IRSN: June, August, October 2005- Siemens safety PLCs accepted together with a diversified
redundant system- cable loop surveying the external envelope of the
machine and acting on the Beam Important Safety Elements
- Cable loop design finished (budget – copper prices!)- Integration in the existing architecture
• First version of Annex 1 of Report Préliminaire de Sûreté, EDMS: 679353
Authors: P, Ninin, L. Scibile T, Ladzinski EDMS: 698097
LHC ACCESS SYSTEM
13
LHC Access Safety System – Remarks
• Involvement from AB to be continued:- Lack of official product manager- Fast answers to few remaining issues (patrol, radiation
Veto etc.)- Integration of redundant cable loop- Operational procedures:
• Operator training• Patrol procedures• Equipment tests
• Lessons from the test- As we use Failsafe PLC: all must be perfectly mastered
• Otherwise it goes Failsafe• Not easy in absence of specification
Authors: P, Ninin, L. Scibile T, Ladzinski EDMS: 698097
LHC ACCESS SYSTEM
14 Louis. Hammouti
Safety Control Panel (EDMS No 578789)
LASS operation mode selection
EIS-RF
ONOFF
RF
ON OFF
ACCESTUNNEL
POINT 1
ATLAS
ON OFF
ACCESTUNNEL
ON OFF
ACCESSERVICE
ON OFF
ACCESEXPERIENCE
ON OFF
ACCESTUNNEL
ON OFF
ACCESSERVICE
ON OFF
ACCES RF
ON OFF
ACCESTUNNEL
ALICE
ON OFF
ACCESEXPERIENCE
ON OFF
ACCESSERVICE
ON OFF
ACCESTUNNEL
CMS
ON OFF
ACCESEXPERIENCE
ON OFF
ACCESTUNNEL
ON OFF
ACCESSERVICE
ON OFF
ACCESTUNNEL
ON OFF
ACCESTUNNEL
LHC-B
ON OFF
ACCESEXPERIENCE
ON OFF
ACCESSERVICE
Electronsstoppers
ONOFF
Electron Sto.
ATLAS
YES NO
DELEGATION
YES NO
DELEGATION
YES NO
DELEGATION
YES NO
DELEGATION
YES NO
DELEGATION
POINT 2 POINT 3 POINT 4 POINT 5 POINT 6 POINT 7 POINT 8
LHC
OK OK
EIS-a
ON OFF
ACCES
Key release
ON
FAISCEAU
OFF
EIS-f
Key release
AlarmeFaisceauImminent
DélaiDécroissance
Radiation18 18
Commande pour établir un mode (= retirer un VETO)Allumé = confirmation que le VETO est retiré
Position sûre de tous les EIS (non alimenté, fermé etc.)
Commande pour annuler un mode (= mettre un VETO)Allumé = confirmation que le VETO est mis
MODEAllumé = Mode établiAucun VETO sur le groupe d’EIS correspondant
Position non sûre d’au moins un EIS (alimenté, ouvert, etc.)
Clignotement signalant un incident ou anomalie sur les EIScorrespondants (ex intrusion)
OFF
ON
18 Compteur décroissant
Clef en position insérée et verrouillée
EIS-a EIS-a EIS-a EIS-a EIS-a EIS-a EIS-a EIS-a EIS-a EIS-a EIS-a EIS-a EIS-a
EIS-a EIS-a EIS-a EIS-a EIS-a
ASB
TI2
EIS-f
FAISCEAU
Key release
OFF ON
ACCES Point 2
Key release
OFFON
EIS-a
TI8
EIS-f
FAISCEAU
Key release
OFF ON
ACCES Point 8
Key release
OFFON
EIS-a
Authors: P, Ninin, L. Scibile T, Ladzinski EDMS: 698097
LHC ACCESS SYSTEM
15 Louis. Hammouti
Access mode selection (EDMS No 584513)
SCREEN OFF
Point 8
Including : R-202, Lift, UA87, UJ86, UL86, UL84, UJ84, UA83
LHC
Stairs : surface to underground
Stairs : surface to US85 (st. 3)
US85 (st. 1) via a ladder (crinoline)
US85 st. 1, 2 and 3P
CANCEL
Sector 4
Sector 2
Sector 3
Sector 1
Sector 5
Select ALL PM85
Patrol OFF Patrol ON VALIDATE
P
PATROL sector selection
RestrictedGeneral Closed
Mode selection
CANCEL VALIDATE
PM25
PM45
PM65
PM85
Point 1
Point 2
Point 3
Point 8
ULX15
Zone service Zone Tunnel Zone experimentale
Point 4
Point 5
Point 6
Point 7
USC55
PX24
UPX16
PZ45
UX85
Select ALL
PM56
UP23
PZ33
Uj47
UP55
UP63
UJ27
Ux46
UL55
UJ67
UJ87
UJ23
UJ43
UPX56
UJ63
PM76
UJ83
UJ14 UJ16PM15 PM18
P
SCREEN OFF
P
PatrolON / OFF
PATROL area selectionACCESS mode selection
RestrictedGeneral Closed
Mode selection
CANCEL VALIDATE
PM25
PM45
PM65
PM85
Point 1
Point 2
Point 3
Point 8
ULX15
Zone service Zone Tunnel Zone experimentale
Point 4
Point 5
Point 6
Point 7
USC55
PX24
UPX16
PZ45
UX85
Select ALL
PM56
UP23
PZ33
Uj47
UP55
UP63
UJ27
Ux46
UL55
UJ67
UJ87
UJ23
UJ43
UPX56
UJ63
PM76
UJ83
UJ14 UJ16PM15 PM18
P
SCREEN OFF
P
PatrolON / OFF
Authors: P, Ninin, L. Scibile T, Ladzinski EDMS: 698097
LHC ACCESS SYSTEM
16 Louis. Hammouti
Data from LASS - ISE access and safety chains
ISE access results for LHC safety chain
1
Service
Tunnel ATLAS
Tunnel
1
2
Tunnel
54
3
Tunnel
Tunnel
Service
CMS
Tunnel
Service
LHC-B
6
7
8ALICETunnel
Service
Service
DENYLHC : circulating BeamsConditions for Beam Fulfilled ?
Point 3 area
Point 4 area
Point 5 area
Tunnel
MUST BE
Safe and locked
Safe and locked
Safe and locked
TI8 operation key
LHC operation key
BIW (siren)
Transferred in beam mode
Transferred in beam mode
completed
NOT OK
NOT OK
NOT OK
Tunnel CMS
Point 7 area
Service LHC-BTunnelSafe and lockedPoint 8 area
TunnelSafe and locked
OK
MACHINE RESULTS STATUS CONDITIONS
MachineAccessLHC TI2 E. S. RF TI8
ACCESS RESULTS STATUS
LHC zone Point 2 E.S. zone RF zone Point 8
2
1
(5 chains 5 views)
E.S.zone
RFzone
Authors: P, Ninin, L. Scibile T, Ladzinski EDMS: 698097
LHC ACCESS SYSTEM
17 Louis. Hammouti
DENYLHC : circulating Beams ALLOWEDTI2 : Injected Beam
Conditions for Beam Fulfilled ?
TI8 : Injected Beam
Point 8 area OK
TI8 operation key
MUST BE
Safe and locked
Tranferred in beam mode
DENY
Conditions for Test Fulfilled ?
Electrons Stoppers Test
Tunnel pt 4 (but RF area) OK
MUST BE
Safe and locked
Set in electron stopper modeControl panel OK
ALLOWED
Conditions for Tests Fulfilled ?
RF Test
RF area OK
MUST BE
Safe and locked
Set in RF modeControl panel OK
ALLOWED
Conditions for Beam Fulfilled ?
Point 4 area
Point 5 area CMS
Point 6 area
Point 7 area
Point 8 area Service LHC-BTunnel
OK
OK
OK
TI2 key
MUST BE
Safe and locked
Safe and locked
Safe and locked
Safe and locked
Safe and locked
TI8 key
LHC key
BIW (siren)
Transferred in beam mode
Transferred in beam mode
Transferred in beam mode
completed
OK
NOT OK
NOT OK
NOT OK
Conditions for Beam Fulfilled ?
Point 2 area OK
TI2 key
MUST BE
Safe and locked
Tranferred in beam mode OK
Details Details
Details
Details Details
MACHINE RESULTS STATUS CONDITIONS
MachineAccessLHC TI2 E. S. RF TI8
ACCESS RESULTS STATUS
LHC zone Point 2 E.S. zone RF zone Point 8
CONDITIONS FOR BEAM
4
3
3
(1 view)
NOT OK
Set in TI2 beam modeControl panel OK
Set in TI8 beam modeControl panel NOT OK
Set in LHC beam modeControl panel NOT OK
Authors: P, Ninin, L. Scibile T, Ladzinski EDMS: 698097
LHC ACCESS SYSTEM
18 Louis. Hammouti
ACCEPT
DENY
MUTE
SELECT
CALL (LIST)
NAME First Name Location
11
6
Keys taken LIST
6
People IN LIST
20
MAX INPM85 - RESTRICTED
1
YCPS01=PM85
YCPZ01=SD8
YCPZ01=PM85
PM85
23
YCAPG01=PM85
YCAPG02=PM85
YCAMG01=PM85
PAD
PAD
MAD
Search box (status)
Sector result (status)P
Patrol in progress
Access control (31 access points 31 views)
Authors: P, Ninin, L. Scibile T, Ladzinski EDMS: 698097
LHC ACCESS SYSTEM
19
Man Machine Interface design
• Several iteration were done with AB/OP - Thanks to the collaboration of R. Giachino and G. Roy- To be continued
• 60 views defined, plus integration with logging and alarm system, and technical supervision
• Version 1 is frozen now - Under realisation- Changes will be done after using ECR
• Delicate integration of the Safety and non Safety part- Due to the LASS isolated network
Authors: P, Ninin, L. Scibile T, Ladzinski EDMS: 698097
LHC ACCESS SYSTEM
20
Integration & InstallationSafety LASS LACS
Access Safety Specification
Access SafetyArchitecture
Design
INBAIWG
Safety PlanLHC Sectorisation &
Integration Review
AccessControl
Tendering
Preliminary Risk Analysis
Contract
Access Safety realisation
Access ControlSpecification
LHC Access SystemPrinciples (AIWG)
AccessPilot Installation
LHC0
Safety FunctionSpecification
Preliminary Safety Study(Architecture)
Cabling Definition
Access ControlDesign
AccessSafety
Tendering
Contract
Installation
Installation preparation
INB Documentation
Authors: P, Ninin, L. Scibile T, Ladzinski EDMS: 698097
LHC ACCESS SYSTEM
21
Conclusions
• Progressing step by step
• Good benefits from documentation efforts on the INB Side
• LHC Access System is a complex system integrating numerous technologies
• V1 frozen : this is the “Baseline”- We can always do better -> V2 with an ECR
• Challenge: Upgrade it from a functional prototype to a robust system
• AB support needed: specification work remains
• TS/CSE fully mobilised to make it !
Authors: P, Ninin, L. Scibile T, Ladzinski EDMS: 698097
LHC ACCESS SYSTEM
22
Thanks to the LHC Access project Collaborators:
T. Pettersson L. ScibileJ.-F. JugetS. Di LucaT. RiescoN. RamaS. Grau
M. Munoz
E. Sanchez-Corral MenaT. Ladzinski
G. SmithA. Day
D. SwobodaF. Rodriguez Mateos
G. RoyR. GiachinoR. Saban
With the help of :CEGELEC – SCHNEIDER - SIEMENS
Authors: P, Ninin, L. Scibile T, Ladzinski EDMS: 698097
LHC ACCESS SYSTEM
23
Conditions pour avoir accès
Authors: P, Ninin, L. Scibile T, Ladzinski EDMS: 698097
LHC ACCESS SYSTEM
24
Planning Strategy
03/ 1/ 0510/ 1/ 0517/ 1/ 0524/ 1/ 0531/ 1/ 0507/ 2/ 0514/ 2/ 0521/ 2/ 0528/ 2/ 0507/ 3/ 0514/ 3/ 0521/ 3/ 0528/ 3/ 0504/ 4/ 0511/ 4/ 0518/ 4/ 0525/ 4/ 0502/ 5/ 0509/ 5/ 0516/ 5/ 0523/ 5/ 0530/ 5/ 0506/ 6/ 0513/ 6/ 0520/ 6/ 0527/ 6/ 0504/ 7/ 0511/ 7/ 0518/ 7/ 0525/ 7/ 0501/ 8/ 0508/ 8/ 0515/ 8/ 0522/ 8/ 0529/ 8/ 0505/ 9/ 0512/ 9/ 0519/ 9/ 0526/ 9/ 0503/ 10/ 0510/ 10/ 0517/ 10/ 0524/ 10/ 0531/ 10/ 0507/ 11/ 0514/ 11/ 0521/ 11/ 0528/ 11/ 0505/ 12/ 0512/ 12/ 0519/ 12/ 0509/ 1/ 0616/ 1/ 0623/ 1/ 0630/ 1/ 0606/ 2/ 0613/ 2/ 0620/ 2/ 0627/ 2/ 0606/ 3/ 0613/ 3/ 0620/ 3/ 0627/ 3/ 0603/ 4/ 0610/ 4/ 0617/ 4/ 0624/ 4/ 0601/ 5/ 0608/ 5/ 0615/ 5/ 0622/ 5/ 0629/ 5/ 0605/ 6/ 0612/ 6/ 0619/ 6/ 0626/ 6/ 0603/ 7/ 0610/ 7/ 0617/ 7/ 0624/ 7/ 0631/ 7/ 0607/ 8/ 0614/ 8/ 0621/ 8/ 0628/ 8/ 0604/ 9/ 0611/ 9/ 0618/ 9/ 0625/ 9/ 0602/ 10/ 06
09/ 10/ 0616/ 10/ 0623/ 10/ 0630/ 10/ 0606/ 11/ 0613/ 11/ 0620/ 11/ 0627/ 11/ 0604/ 12/ 0611/ 12/ 0618/ 12/ 0608/ 1/ 0715/ 1/ 0722/ 1/ 0729/ 1/ 0705/ 2/ 0712/ 2/ 0719/ 2/ 0726/ 2/ 0705/ 3/ 0712/ 3/ 0719/ 3/ 0726/ 3/ 0702/ 4/ 0709/ 4/ 0716/ 4/ 0723/ 4/ 0730/ 4/ 0707/ 5/ 0714/ 5/ 0721/ 5/ 0728/ 5/ 0704/ 6/ 0711/ 6/ 0718/ 6/ 0725/ 6/ 0702/ 7/ 0709/ 7/ 0716/ 7/ 0723/ 7/ 0730/ 7/ 0706/ 8/ 0713/ 8/ 0720/ 8/ 0727/ 8/ 07
56Secteurs
7867 81 12 23 34 45
20
05
juin
juil
août
sept
févr
mars
avr
mai
oct
nov
déc
20
06
juin
juil
août
sept
févr
mars
mai
oct
nov
déc
janv
janv
avr
mai
août
20
07
juil
avr
mars
févr
janv
juin
Authors: P, Ninin, L. Scibile T, Ladzinski EDMS: 698097
LHC ACCESS SYSTEM
25
Installation
• Phase 1:• No impact on magnet transport and installation in the tunnel• To assure safety of personnel, as much as possible avoid the
period of short circuit tests in UA / RA• Access works will be in parallel with the activity of
interconnection of magnet in the tunnel
• Phase 2: • Access surface installation is only allowed to start in each
point when HC in adjacent LSS sectors has started (to avoid perturbation of transport of heavy and big material)
• Phase 3:• Co-activities not allowed during the first and last 2 weeks of
Cold-down HC and the period dedicated to Powering test