Emergency shutdown system for dynamic and high integrity operations

Patent metadata

Field	Value
Publication number	US-10234840-B2
Application number	US-201615259248-A
Country	US
Kind code	B2
Filing date	Sep 8, 2016
Priority date	Sep 8, 2016
Publication date	Mar 19, 2019
Grant date	Mar 19, 2019

Abstract

Provided in some embodiments are systems and methods for emergency shutdown (ESD) systems. Embodiments provide for receiving, from a central logic solver (CLS) of an emergency shutdown (ESD) system for a plant via a first communication channel, a command indicative of a first state for an ESD valve, in response to receiving the command, controlling the ESD valve to operate in the first state, obtaining, from a central status monitor (CSM) of the ESD system via a second communication channel, current status information for the plant, determining a second state for the ESD valve based at least in part on the current status information obtained from the CSM, and controlling the ESD valve to operate in the second state.

First claim

What is claimed is:

1. An emergency shutdown (ESD) system for a plant, comprising:
a central control system comprising:
a central logic solver (CLS) comprising a first communication interface coupled to a first communication channel for communicating with each of a plurality of emergency shutdown (ESD) valves of the ESD system, wherein the CLS is configured to, for each of the ESD valves:
determine a desired state for the ESD valve based on status information for the plant; and
issue a command configured to cause the ESD valve to operate in the desired state, wherein the command is communicated to the ESD valve via the first communication interface and the first communication channel;

a central status monitor (CSM) comprising a second communication interface coupled to a second communication channel for communicating with each of the ESD valves, wherein the CSM is configured to:
maintain a current listing of current status information for the plant; and
in response to determining that the CLS is unable to communicate with an ESD valve via the first communication channel, provide, to the ESD valve via the second communication interface and the second communication channel, at least a portion of the current status information for the plant for use in determining an appropriate state for the ESD valve; and

the ESD valves, wherein each of the ESD valves comprises:
a valve mechanism configured to regulate the flow of a medium through a pipe;
an actuation system configured to move the valve mechanism between different operational states;
a communication interface coupled to the first and second communication channels; and
a local controller configured to:
in response to determining that the first communication channel is unavailable:
obtain, from the CSM, current status information for the plant;
determine an appropriate state for the ESD valve based at least in part on the current status information obtained from the CSM; and
control the actuation system to move the valve mechanism to a position corresponding to the appropriate state; and

in response to receiving a command from the CLS specifying a desired state for the ESD valve, control the actuation system to move the valve mechanism to the desired state.

2. The system of claim 1 , wherein the first communication channel is different from the second communication channel.

3. The system of claim 1 , wherein the first communication channel comprises a wired connection between the CLS and the ESD valves, and wherein the second communication channel comprises a wireless connection between the CSM and the ESD valves.

4. The system of claim 1 , wherein the first communication channel comprises a wired connection between the CLS and the ESD valves, and wherein the second communication channel comprises a wired connection between the CSM and the ESD valves.

5. The system of claim 1 , wherein each of the ESD valves comprises a local power supply system configured to provide power for operating the valve mechanism.

6. The system of claim 1 , further comprising:
a central power supply system configured to provide operational power to each of the ESD valves,
wherein each of the ESD valves comprises:
a local power supply system; and
a valve power interface configured to selectively route power from the central power supply system and the local power supply system for use in powering components of the ESD valve.

7. The system of claim 6 , wherein the valve power interface is configured to:
determine whether power for powering the components of the ESD valve is available from the central power supply system; and
in response to determining that power for powering the components of the ESD valve is not available from the central power supply system, route power from the local power supply system for use in powering the components of the ESD valve.

8. The system of claim 1 , further comprising:
an instrument system comprising one or more instruments configured to obtain values for one or more process variables, wherein the instrument system comprises a third communication interface coupled to a third communication channel for communicating the values for one or more process variables to at least one of the plurality of emergency shutdown (ESD) valves; and
wherein the local controller of each of the at least one ESD valves is configured to determine an appropriate state for the ESD valve based at least in part on the values for one or more process variables obtained from the instrument system.

9. The system of claim 1 , wherein the local controller is configured to:
receive an authorization code and a request to operate the valve in a given state;
in response to determining that the authorization code is valid, control the actuation system to move the valve mechanism to the given state; and
in response to determining that the authorization code is not valid, not control the actuation system to move the valve mechanism to the given state.

10. The system of claim 1 , wherein the local controller is configured to:
conduct a self-test operation;
generate a report indicative of results of the self-test operation; and
in response to determining that the ESD valve failed the self-test operation, generate an alert indicating that the ESD valve failed the self-test operation.

11. The system of claim 1 , wherein the different operational states comprise at least a first fail-safe state and a second fail-safe state.

12. The system of claim 1 , wherein the CSM is configured to determine a fail-safe state for the ESD valve based on the status information for the plant, wherein the current status information for the plant comprises the fail-safe state for the ESD valve, wherein determining an appropriate state for the ESD valve based at least in part on the current status information obtained from the CSM comprises determining the fail-safe state for the ESD valve based at least in part on the current status information obtained from the CSM, and wherein controlling the actuation system to move the valve mechanism to a position corresponding to the appropriate state comprises controlling the actuation system to move the valve mechanism to the fail-safe state.

13. A method comprising:
receiving, by a local controller of an emergency shutdown (ESD) valve from a central logic solver (CLS) of an ESD system via a first communication channel, a command indicative of a first state for an ESD valve;
controlling, by the local controller in response to the local controller receiving the command, the ESD valve to operate in the first state;
obtaining, by the local controller from a central status monitor (CSM) of the ESD system via a second communication channel, current status information for the plant;
determining, by the local controller, a second state for the ESD valve based at least in part on the current status information obtained from the CSM; and
controlling, by the local controller, the ESD valve to operate in the second state.

14. The method of claim 13 , wherein the first communication channel is different from the second communication channel.

15. The method of claim 14 , wherein the first communication channel comprises a wired connection, and wherein the second communication channel comprises a wireless connection.

16. The method of claim 13 , further comprising:
determining whether power for powering components of the ESD valve is available from a central power supply system configured to provide operational power to the ESD valve; and
in response to determining that power for powering the components of the ESD valve

Assignees

• Saudi Arabian Oil Co

Inventors

• Daraiseh Abdelghani
• Flanders Patrick S

Classifications

• G05B19/0428 Primary

  Safety, monitoring (G05B19/0423 takes precedence) · CPC title

• G06F21/305

  by remotely controlling device operation · CPC title

• G05B2219/14116

  Safe, emergency shutdown, esd of system · CPC title

• G05B2219/34465

  Safety, control of correct operation, abnormal states · CPC title

• G05B9/02

  electric · CPC title