A typical Safety Instrumented System (SIS) consists of a Safety Integrity Level (SIL)-certified sensor, logic solver, and final element.
These SIS systems can be complex, including multiple components such as a pressure or temperature transmitter, safety relay, and programmable logic controller (PLC). Also, it can include a trip amplifier; and requires intensive wiring and programming.
SIL-certified safety transmitter
A newer approach using a SIL-certified safety transmitter (sensor) that includes the logic solver eliminates the complexity associated with trip amplifiers and accessory hardware.
Rather than using multiple devices and a complex webbing of wiring, a stand-alone, SIL-certified transmitter with a built-in relay, and trip amplifier minimizes the components. It also reduces maintenance and therefore provides greater reliability while reducing cost.
One Series Field Safety Transmitter
The three-in-one allows direct, local switching of the final element in less than 100 milliseconds
The One Series Field Safety Transmitter from United Electric Controls is different from all other SIL-certified transmitters because it functions as the sensor, and logic solver, and has the relay (three-in-one) embedded into the device.
The three-in-one allows direct, local switching of the final element in less than 100 milliseconds. This is significant when the emergency shutdown of the final element is required at the point of measure since the Field Safety Transmitter eliminates the lag time that could occur when using multiple components to initiate shutdown.
Installation
The Field Safety Transmitter can be installed as part of an SIS layer, or as the SIS. As part of an SIS, the Field Safety Transmitter can switch the final element directly or through a redundant safety relay status (SRS), signal through a PLC or Distributed Control System (DCS), and voting logic schemes. In remote areas and applications with limited infrastructure, the Field Safety Transmitter can act as the SIS for the final element.
Applications are far-reaching and can be used anywhere operators need to install a safety device for SIS. The three-in-one device is used within refineries, chemical plants, upstream oil, and gas wellheads. It’s also used in water and wastewater applications, and with most pump-specific applications.
Advantages
Here are just a few advantages of this safety transmitter with a built-in safety relay and trip amplifier:
- Save on wiring costs because now there is only one device as opposed to wiring multiple devices.
- It saves maintenance time. This is because only one device requires attention and built-in diagnostics alerts of potential faults.
- The device provides confidence since it’s been tested and certified for use in SIL 2 in SIS per IEC 61508.
- Local-only programming means access to the device is manually initiated, providing a level of cybersecurity that it cannot be hacked.
- Window mode allows an operator to control the upper and lower level of a process using just one device and one switch.
Window mode
For example, normally on a pump, the user would have a single contact switch protecting the pump from high-pressure damage (dead-heading), and another single contact switch protecting the pump from low-pressure damage.
This is caused by running out of fluid and therefore running dry. However, the window mode protects against both conditions, because it looks for any irregular high or low operation of the pump using the same device.
Application Example
In the remote location, the transmitter performed the only safety instrumented function (SIF) and became the SIS
At an upstream oil and gas wellhead site, the operating company experienced a buildup of paraffin during colder months that would block the wellhead’s hydraulic pressure measurement. This would shut down all four wellheads within the pad rather than just the one that was causing the problem.
They installed the Field Safety Transmitter because, in their remote location, the transmitter performed the only safety instrumented function (SIF) and became the SIS.
Plug Port feature
In addition, the Plug Port feature allowed the operator to set a time and percent of change value for the process that would indicate a deviation from the normal operating condition.
If the pressure flow were restricted on a well, the safety transmitter would shut down that well. Then the transmitter would alert the command center which could dispatch maintenance while the other three wells continued to operate.
