Monday, February 23, 2009

Integrity of Process Control Systgems

Ensuring the integrity of process controls involves both hardware issues, software issues, and human issues. Of these, the hardware issues are usually the easiest to assess and the software issues the most difficult.

The hardware issues are addressed by providing various degrees of redundancy, by providing multiple sources of power and/or an uninterruptible power supply, and the like. The manufacturers of process controls provide a variety of configuration options. Where the process is inherently safe and infrequent shutdowns can be tolerated, nonredundant

configurations are acceptable. For more demanding situations, an appropriate requirement might be that no single component failure can render the process-control system inoperable. For the very critical situations, triple-redundant controls with voting logic might be appropriate. The difficulty is assessing what is required for a given process.

Another difficulty is assessing the potential for human errors. If redundancy is accompanied with increased complexity, the resulting increased potential for human errors must be taken into consideration.

Redundant systems require maintenance procedures that can correct problems in one part of the system while the remainder of the system is in full operation. When conducting maintenance in such situations, the consequences of human errors can be rather unpleasant.

The use of programmable systems for process control present some possibilities for failures that do not exist in hard-wired electromechanical implementations. Probably the one of most concern is latent defects or “bugs” in the software, either the software provided by the supplier or the software developed by the user. The source of this problem is very simple. There is no methodology available that can be applied to obtain absolute assurance that a given set of software is completely free of defects. Increased confidence in a set of software is achieved via extensive testing, but no amount of testing results in absolute assurance that there are no defects. This is especially true of real-time systems, where the software can easily be exposed to a sequence of events that was not anticipated. Just because the software performs correctly for each event individually does not mean that it will perform correctly when two (or more) events occur at nearly the same time. This is further complicated by the fact that the defect may not be in the programming; it may be in how the software was designed to respond to the events.

The testing of any collection of software is made more difficult as the complexity of the software increases. Software for process control has progressively become more complex, mainly because the requirements have progressively become more demanding.

To remain competitive in the world market, processes must be operated at higher production rates, within narrower operating ranges, closer to equipment limits, and so on. Demanding applications require sophisticated control strategies, which translate into more complex software. Even with the best efforts of both supplier and user, complex software systems are unlikely to be completely free of defects.

Wednesday, February 11, 2009

The Benefit of Advance Control

The economics of most processes are determined by the steady-state operating conditions. Excursions from these steady-state conditions generally average out and have an insignificant effect on the economics of the process, except when the excursions lead to off-specification products. In order to enhance the economic performance of a process, the steady-state operating conditions must be altered in a manner that leads to more efficient process operation.

The following hierarchy is used for process control:

Level 0: Measurement devices and actuators
Level 1: Regulatory control
Level 2: Supervisory control
Level 3: Production control
Level 4: Information technology


Levels 2, 3, and 4 clearly affect the process economics, as all three levels are directed to optimizing the process in some manner. However, level 0 (measurement devices and actuators) and level 1 (regulatory control) would appear to have no effect on process economics.

Their direct effect is indeed minimal, but indirectly, they have a major effect. Basically, these levels provide the foundation for all higher levels. A process cannot be optimized until it can be operated consistently at the prescribed targets. Thus, a high degree of regulatory control must be the first goal of any automation effort. In turn, the measurements and actuators provide the process interface for regulatory control.

For most processes, the optimum operating point is determined by a constraint. The constraint might be a product specification (a product stream can contain no more than 2 percent ethane); violation of this constraint causes off-specification product. The constraint might be an equipment limit (vessel pressure rating is 300 psig); violation of this constraint causes the equipment protection mechanism (pressure relief device) to activate. As the penalties are serious, violation of such constraints must be very infrequent.

If the regulatory control system were perfect, the target could be set exactly equal to the constraint (that is, the target for the pressure controller could be set at the vessel relief pressure). However, no regulatory control system is perfect. Therefore, the value specified for the target must be on the safe side of the constraint, thus giving the control system some “elbow room.” How much depends on the following:

  1. The performance of the control system (i.e., how effectively it responds to disturbances). The faster the control system reacts to a disturbance, the closer the process can be operated to the constraint.
  2. The magnitude of the disturbances to which the control system must respond. If the magnitude of the major disturbances can be reduced, the process can be operated closer to the constraint.

One measure of the performance of a control system is the variance of the controlled variable from the target. Both improving the control system and reducing the disturbances will lead to a lower variance in the controlled variable.

In a few applications, improving the control system leads to a reduction in off-specification product and thus improved process economics. However, in most situations, the process is operated sufficiently far from the constraint that very little, if any, off-specification product results from control system deficiencies. Management often places considerable emphasis on avoiding off-spec production, so consequently the target is actually set far more conservatively than it should be.

In most applications, simply improving the control system does not directly lead to improved process economics. Instead, the control system improvement must be accompanied by shifting the target closer to the constraint. There is always a cost of operating a process in a conservative manner. The cost may be a lower production rate, a lower process efficiency, a product giveaway, or otherwise. When management places extreme emphasis on avoiding off-spec production, the natural reaction is to operate very conservatively, thus incurring other costs.

The immediate objective of an advanced control effort is to reduce the variance in an important controlled variable. However, this effort must be coupled with a commitment to adjust the target for this controlled variable so that the process is operated closer to the constraint. In large throughput (commodity) processes, very small shifts in operating targets can lead to large economic returns.