Functional Safety Systems for Machine Protection, Personnel Safety
Paper Title Page
MOMPR009 Prototype Design for Upgrading East Safety and Interlock System 179
MOPHA168   use link to see paper's listing under its alternate paper code  
 
  • Z. Zhang, Z. Ji, Y. Wang, B. Xiao
    ASIPP, Hefei, People’s Republic of China
  • F. Xia
    Southwestern Institute of Physics, Chengdu, Sichuan, People’s Republic of China
 
  Funding: This work is supported by the National Key R&D Program of China under Grant No.2017YFE0300504, 2018YFE0302104.
The national project of experimental advanced superconducting tokamak (EAST) is an important part of the fusion development stratagem of China, which is the first fully superconducting tokamak with a non-circle cross-section of the vacuum vessel in the world. The safety and interlock system (SIS) is in charge of the supervision and control of all the EAST components involved in the protection of human and tokamak from potential accidents. A prototype for upgrading EAST SIS has been designed. This paper presents EAST machine and human protection mechanism and the architecture of the upgrading safety and interlock system.
 
poster icon Poster MOMPR009 [1.678 MB]  
DOI • reference for this paper ※ https://doi.org/10.18429/JACoW-ICALEPCS2019-MOMPR009  
About • paper received ※ 30 September 2019       paper accepted ※ 10 October 2019       issue date ※ 30 August 2020  
Export • reference for this paper using ※ BibTeX, ※ LaTeX, ※ Text/Word, ※ RIS, ※ EndNote (xml)  
 
MOPHA041 Cause-and-Effect Matrix Specifications for Safety Critical Systems at CERN 285
 
  • B. Fernández Adiego, E. Blanco Viñuela, M. Charrondiere, R. Speroni
    CERN, Geneva, Switzerland
  • M. Bonet, H.D. Hamisch, M.H. de Queiroz
    UFSC, Florianópolis, Brazil
 
  One of the most critical phases in the development of a Safety Instrumented System (SIS) is the functional specification of the Safety Instrumented Functions (SIFs). This step is carried out by a multidisciplinary team of process, controls and safety experts. This functional specification must be simple, unambiguous and compact to allow capturing the requirements from the risk analysis, and facilitating the design, implementation and verification of the SIFs. The Cause and Effect Matrix (CEM) formalism provides a visual representation of Boolean expressions. This makes it adequate to specify stateless logic, such as the safety interlock logic of a SIS. At CERN, a methodology based on the CEM has been applied to the development of a SIS for a magnet test bench facility. This paper shows the applicability of this methodology in a real magnet test bench and presents its impact in the different phases of the IEC 61511 safety lifecycle.  
poster icon Poster MOPHA041 [0.751 MB]  
DOI • reference for this paper ※ https://doi.org/10.18429/JACoW-ICALEPCS2019-MOPHA041  
About • paper received ※ 27 September 2019       paper accepted ※ 08 October 2019       issue date ※ 30 August 2020  
Export • reference for this paper using ※ BibTeX, ※ LaTeX, ※ Text/Word, ※ RIS, ※ EndNote (xml)  
 
MOPHA062 The Personnel Safety System of ELI-ALPS 351
 
  • F. Horvath, L.J. Fülöp, Sz. Horváth, Z. Héjja, T. Kecskés, I. Kiss, V. Kurusa, G. Kávai, K. Untener
    ELI-ALPS, Szeged, Hungary
 
  Funding: ELI-ALPS is supported by the European Union and cofinanced by the European Regional Development Fund (GOP-1.1.1-12/B-2012-000, GINOP-2.3.6-15-2015-00001)
ELI-ALPS will be the first large-scale attosecond facility accessible to the international scientific community and its user groups. The facility-wide Personnel Safety System (PSS) has been successfully developed and commissioned for the majority of the laboratories. The system has three major goals. First, it provides safe and automatic sensing and interlocking engineering measures as well as monitoring and controlling interfaces for all laboratories in Building A: emergency stop buttons, interlock and enabling signals, door and roller blind sensors, and entrance control. Second, it integrates and monitors the research technology equipment delivered by external parties as black-box systems (all laser systems, and some others). Third, it includes the PSS subsystems of research technology equipment developed on site by in-house and external experts (some of the secondary sources). The gradual development of the system is based on the relevant standards and best practices of functional safety as well as on an iterative and systematic lifecycle incorporating several internal and external reviews. The system is implemented with an easily maintainable network of safety PLCs.
 
poster icon Poster MOPHA062 [1.323 MB]  
DOI • reference for this paper ※ https://doi.org/10.18429/JACoW-ICALEPCS2019-MOPHA062  
About • paper received ※ 30 September 2019       paper accepted ※ 08 October 2019       issue date ※ 30 August 2020  
Export • reference for this paper using ※ BibTeX, ※ LaTeX, ※ Text/Word, ※ RIS, ※ EndNote (xml)  
 
MOPHA066 Electronics for LCLS-II Beam Containment System Shut-off 366
MOPHA065   use link to see paper's listing under its alternate paper code  
 
  • R.A. Kadyrov, D.G. Brown, E.P. Chin, C.I. Clarke, M. Petree, E. Rodriguez, F. Tao
    SLAC, Menlo Park, California, USA
 
  LCLS-II is a new FEL which is under construction at SLAC National Accelerator Laboratory. Its superconducting electron linac is able to produce up to 1.2 MW of beam power. Beam Containment System (BCS) is employed to limit the beam power and prevent excessive radiation in case of electron beam loss or FEL breach. Fast and slow shut-off paths are designed for devices with different response requirements. The system is required to shut-off the beam within 200 µs for some of the fast sensors. Fast path is based on custom electronic designs, and slow path leverages industrial safety-rated PLC hardware. The system spans for 4 km of LCLS-II and combines inputs from about 150 sensors of different complexity. Architecture is based on multiple levels starting with summing sensor inputs locally and to converting them into permits for the shut-off devices. Each level is implemented redundantly. Automated test and manual tests at all levels are implemented in the system. System architecture, electronics design and cable plant challenges are presented below.  
DOI • reference for this paper ※ https://doi.org/10.18429/JACoW-ICALEPCS2019-MOPHA066  
About • paper received ※ 27 September 2019       paper accepted ※ 10 October 2019       issue date ※ 30 August 2020  
Export • reference for this paper using ※ BibTeX, ※ LaTeX, ※ Text/Word, ※ RIS, ※ EndNote (xml)  
 
MOPHA078 Renovation of the SPS Personnel Protection System: A Configurable Approach 395
 
  • T. Ladzinski, B. Fernández Adiego, F. Havart
    CERN, Meyrin, Switzerland
 
  The renovation of the SPS Personnel Protection System (PPS) comprises the installation of industrial access control solutions and the implementation of a new safety instrumented system tailored to the particular needs of the accelerator. The SPS has been a working horse of the CERN accelerator complex for many decades and its configuration has changed through the many years of operation. The classic solutions for safety systems design, used in the LHC and PS machines, have not been judged adequate for this accelerator undergoing perpetual changes, composed of many sites forming several safety chains. In order to avoid expensive software modifications, each time the accelerator configuration evolves, a configurable safety software design was proposed. This paper presents the hardware architecture of the PLC-based SPS PPS and the configurable software architecture proposed. It further reports on the testing and formal verification activities performed to validate the safety software and discusses the pros and cons of the configurable approach.  
poster icon Poster MOPHA078 [2.063 MB]  
DOI • reference for this paper ※ https://doi.org/10.18429/JACoW-ICALEPCS2019-MOPHA078  
About • paper received ※ 29 September 2019       paper accepted ※ 10 October 2019       issue date ※ 30 August 2020  
Export • reference for this paper using ※ BibTeX, ※ LaTeX, ※ Text/Word, ※ RIS, ※ EndNote (xml)  
 
MOPHA088 Consolidation of Re-Triggering System of LHC Beam Dumping System at CERN 412
 
  • N. Magnin, W. Bartmann, C. Bracco, E. Carlier, G. Gräwer, T.D. Mottram, E. Renner, Rodziewicz, J.P. Rodziewicz, V. Senaj, C. Wiesner
    CERN, Geneva, Switzerland
 
  The Trigger Synchronization and Distribution System (TSDS) is a core part of the LHC Beam Dump System (LBDS). It comprises redundant Re-Trigger Lines (RTLs) that allow fast re-triggering of all high-voltage pulsed generators in case one self-triggers, resulting in a so-called asynchronous dump. For reliability reasons, the TSDS relies on many RTL redundant trigger sources that do not participate directly to the execution of a normal dump. After every dump, signals propagating on the RTLs are analyzed by Post Operation Check (POC) systems, to validate the correct performance and synchronization of all redundant triggers. The LBDS operated reliably since the start-up of LHC in 2008, but during the Run 2 of the LHC, new failure modes were identified that could incur damage for the beam dump block. In order to correct these failure modes, an upgrade of the TSDS is realized during the LS2. This paper reviews the experience gained with the LBDS during Run 2 of the LHC operation and describes the new architecture of the TSDS being implemented. Measurements and simulations of signals propagating on the RTL are presented, and the analysis performed by the POC systems are explained.  
poster icon Poster MOPHA088 [2.435 MB]  
DOI • reference for this paper ※ https://doi.org/10.18429/JACoW-ICALEPCS2019-MOPHA088  
About • paper received ※ 30 September 2019       paper accepted ※ 10 October 2019       issue date ※ 30 August 2020  
Export • reference for this paper using ※ BibTeX, ※ LaTeX, ※ Text/Word, ※ RIS, ※ EndNote (xml)  
 
MOPHA139 Implementation of the PLC based Machine Protection System for Magnets at ESS 554
 
  • D. Sánchez-Valdepeñas, M. Carroll, A. Nordt, M. Zaera-Sanz
    ESS, Lund, Sweden
 
  The special properties of the neutrons allow to study the matter structure and dynamics of atoms and molecules. Neutron scattering is applied in a wide range of research fields such as chemistry of materials, biology, magnetism and pharmacy. The European Spallation Source ERIC (ESS) will be the most powerful neutron source in the world with the vision to help the researchers to develop new solutions for the challenges of our time. Inside the Integrated Control System Division (ICS), the Protection Systems group will provide a Beam Interlock System to protect the beam and to avoid the activation of equipment. One of these interlock systems is the Machine Protection System for Magnets (MPSMag), which collects the signals coming from each of the 150 quadrupoles distributed along the 600 meters long LINAC to prevent beam losses. The MPSMag first prototype has been implemented using industrial Programmable Logic Controllers (PLCs), the Profinet real-time fieldbus communications protocol, and Siemens TIA Portal software to fulfill the high availability requirements of the facility. The concept of operation, the state machine, and the electrical design will be presented.  
DOI • reference for this paper ※ https://doi.org/10.18429/JACoW-ICALEPCS2019-MOPHA139  
About • paper received ※ 29 September 2019       paper accepted ※ 10 October 2019       issue date ※ 30 August 2020  
Export • reference for this paper using ※ BibTeX, ※ LaTeX, ※ Text/Word, ※ RIS, ※ EndNote (xml)  
 
MOPHA141 Dynamic System Reliability Modelling of SLAC’s Radiation Safety Systems 558
 
  • F. Tao, K.W. Belt
    SLAC, Menlo Park, California, USA
 
  When the LCLS-II project is complete, there will be three major Department of Energy (DOE) beam programs occupying the same 2-mile long accelerator tunnel, e.g. LCLS, LCLS-II and FACET-II. In addition to the geographical overlap, the number of beam loss monitors of all types has been also significantly expanded to detect power beam loss from all sources. All these factors contribute to highly complex Radiation Safety Systems (RSS) at SLAC. As RSS are subject to rigorous configuration control, and their outputs are permits directly related to beam production, even small faults can cause a long down time. As all beam programs at SLAC have the 95% beam availability target, the complex RSS’s contribution to overall beam availability and maintainability is an important subject worth detailed analysis. In this paper, we apply the dynamic system reliability engineering techniques to create the RSS reliability model for all three beam programs. Both qualitative and semi-quantitative approaches are used to identify the most critical common causes, the most vulnerable subsystem as well as the areas that require future design improvement for better maintainability.  
poster icon Poster MOPHA141 [0.863 MB]  
DOI • reference for this paper ※ https://doi.org/10.18429/JACoW-ICALEPCS2019-MOPHA141  
About • paper received ※ 01 October 2019       paper accepted ※ 10 October 2019       issue date ※ 30 August 2020  
Export • reference for this paper using ※ BibTeX, ※ LaTeX, ※ Text/Word, ※ RIS, ※ EndNote (xml)  
 
MOPHA142 FACET-II Radiation Safety Systems Development 562
 
  • F. Tao, B.M. Bennett, N. Lipkowitz
    SLAC, Menlo Park, California, USA
 
  Facility for Advanced Accelerator Experimental Tests (FACET)-II is an upgrade of the FACET. It uses the middle third of SLAC’s 2-mile long linear accelerator to accelerate the electron beam to 10 GeV, with positron beam to be added in the Stage 2 of the project. Once the project completes in late 2019, it will be operated as a Department of Energy (DOE) user facilities for advanced accelerator science studies. In this paper, we will describe the Radiation Safety Systems (RSS) design and implementation for FACET-II project. RSS include Personnel Protection System (PPS) and Beam Containment System (BCS). Though both systems are safety critical, different technologies are used to implement safety functions. PPS uses Siemens PLC as the backbone for control but legacy CAMAC for data acquisition, while BCS develops customized electronics for faster response to protect safety devices from radiation induced damage.  
poster icon Poster MOPHA142 [1.284 MB]  
DOI • reference for this paper ※ https://doi.org/10.18429/JACoW-ICALEPCS2019-MOPHA142  
About • paper received ※ 01 October 2019       paper accepted ※ 10 October 2019       issue date ※ 30 August 2020  
Export • reference for this paper using ※ BibTeX, ※ LaTeX, ※ Text/Word, ※ RIS, ※ EndNote (xml)  
 
WEPHA035 Firmware Layer Implementation of the nBLM and icBLM Systems for ESS Project 1157
 
  • W. Cichalewski, G.W. Jabłoński, W. Jałmużna, R. Kiełbik
    TUL-DMCS, Łódź, Poland
  • F.S. Alves, H. Carling, I. Dolenc Kittelmann, S. Farina, K.E. Rosengren, T.J. Shea
    ESS, Lund, Sweden
 
  Funding: Work supported by Polish Ministry of Science and Higher Education, decision number DIR/WK/2018/02
Both ionization chamber Beam Loss Monitor (icBLM) and neutron Beam Loss Monitor (nBLM) systems are fundamental components of European Spallation Source (ESS) accelerator safety systems. Main responsibility of this system is instantaneous and reliable detection of accelerated proton beam loss that exceeds predefined safety threshold. Nowadays DMCS (as an in-kind partner to ESS) is responsible for beam loss detection algorithm implementation, evaluation and deployment in firmware. As a hardware platform for mentioned systems MTCA.4 based form factor electronic components have been chosen (delivered by IOXOS). This contribution focuses on both cases (nBLM and icBLM) firmware realisation presentation. Proposed and developed firmware structure and functional blocks that fulfills specified by ESS requirements are described. Additionally, some aspects of the system FPGA circuit resource usage and achieved performance is being discussed.
 
DOI • reference for this paper ※ https://doi.org/10.18429/JACoW-ICALEPCS2019-WEPHA035  
About • paper received ※ 01 October 2019       paper accepted ※ 10 October 2019       issue date ※ 30 August 2020  
Export • reference for this paper using ※ BibTeX, ※ LaTeX, ※ Text/Word, ※ RIS, ※ EndNote (xml)  
 
WEPHA086 A Fast Wire Scanner System for the European Xfel and Its Impact on Safety Systems 1289
 
  • T. Lensch, T. Wamsat
    DESY, Hamburg, Germany
 
  The European-XFEL is an X-ray Free Electron Laser facility located in Hamburg (Germany). The 17.5 GeV superconducting accelerator will provide photons simultaneously to several user stations. Currently 12 Wire Scanner stations are used to image transverse beam profiles in the high energy sections. These scanners provide a slow scan mode for single bunch operation. When operating with long bunch trains (>100 bunches) fast scans are used to measure beam sizes in an almost nondestructive manner. To operate fast scans multiple impacts on the beam loss system (BLM) and the charge transmission interlock (TIS) have to be taken into account. This paper focuses on the interaction between these systems and first experiences performing measurements.  
DOI • reference for this paper ※ https://doi.org/10.18429/JACoW-ICALEPCS2019-WEPHA086  
About • paper received ※ 02 October 2019       paper accepted ※ 10 October 2019       issue date ※ 30 August 2020  
Export • reference for this paper using ※ BibTeX, ※ LaTeX, ※ Text/Word, ※ RIS, ※ EndNote (xml)  
 
WEPHA092 SNS Credited Pulse Energy Limit System Conceptual Design 1304
 
  • C. Deibele, D.C. Williams
    ORNL, Oak Ridge, Tennessee, USA
  • K.L. Mahoney
    ORNL RAD, Oak Ridge, Tennessee, USA
 
  Funding: This material is based upon work supported by the U.S. Department of Energy, Office of Science, Office of Basic Energy Sciences, under contract number DE-AC05-00OR22725.
The Controls Group at the Spallation Neutron Source (SNS) is designing a programmable signal processor based credited safety control that calculates pulsed beam energy based on beam kinetic energy and charge. The SNS Pulsed Energy Limit System (SPELS) must reliably shut off the beam if the average power exceeds 2.145 MW averaged over 60 seconds. This paper will cover the architecture and design choices needed to develop the system under the auspices of a programmable radiation-safety credit control. The authors will also introduce the concept of a graded failure approach that allows the credited system to continue operation in the presence of some faults.
 
poster icon Poster WEPHA092 [0.981 MB]  
DOI • reference for this paper ※ https://doi.org/10.18429/JACoW-ICALEPCS2019-WEPHA092  
About • paper received ※ 30 September 2019       paper accepted ※ 10 October 2019       issue date ※ 30 August 2020  
Export • reference for this paper using ※ BibTeX, ※ LaTeX, ※ Text/Word, ※ RIS, ※ EndNote (xml)  
 
WEPHA131 Evaluation of an SFP Based Test Loop for a Future Upgrade of the Optical Transmission for CERN’s Beam Interlock System 1399
 
  • R. Secondo, M.A. Galilée, J.C. Garnier, C. Martin, I. Romera, A.P. Siemko, J.A. Uythoven
    CERN, Meyrin, Switzerland
 
  The Beam Interlock System (BIS) is the backbone of CERN’s machine protection system. The BIS is responsible for relaying the so-called Beam Permit signal, initiating in case of need the controlled removal of the beam by the LHC Beam Dumping System. The Beam Permit is encoded as a specific frequency traveling over a more than 30 km long network of optical fibers all around the LHC ring. The progressive degradation of the optical fibers and the aging of electronics affect the decoding of the Beam Permit, thus potentially resulting in an undesired beam dump event and by this reduce the machine availability. Commercial off-the-shelf SFP transceivers were studied with the aim to improve the performance of the optical transmission of the Beam Permit Network. This paper describes the tests carried out in the LHC accelerator to evaluate the selected SFP transceivers and it reports the results of the test loop reaction time measurements during operation. The use of SFPs to optically transmit safety critical signals is being considered as an interesting option not only for the planned major upgrade of the BIS for the HL-LHC era but also for other protection systems.  
poster icon Poster WEPHA131 [0.826 MB]  
DOI • reference for this paper ※ https://doi.org/10.18429/JACoW-ICALEPCS2019-WEPHA131  
About • paper received ※ 30 September 2019       paper accepted ※ 09 October 2019       issue date ※ 30 August 2020  
Export • reference for this paper using ※ BibTeX, ※ LaTeX, ※ Text/Word, ※ RIS, ※ EndNote (xml)  
 
WEPHA136 The Software-Based Machine Protection System Using EPICS in J-PARC MR 1418
 
  • K.C. Sato, N. Kamikubota, T. Kimura, S. Yamada, N. Yamamoto
    J-PARC, KEK & JAEA, Ibaraki-ken, Japan
  • S.Y. Yoshida
    Kanto Information Service (KIS), Accelerator Group, Ibaraki, Japan
 
  In J-PARC, a Machine Protection System (MPS) stops accelerator beam operation automatically when an interlock signal comes. Normal MPS accepts interlock signals by hard-wire, but a software-based MPS, called "Soft-MPS", uses only EPICS PVs without wiring. A PLC controller running Linux was introduced to watch at some EPICS PVs over Ethernet, and outputs Soft-MPS signals to the MPS unit after logical calculates. There are 2 reasons of using Soft-MPS. (1) To install interlock signals rapidly. This type of Soft-MPS will switch to hard-wire later. (2) To use non-hardware parameters: for example, machine operation modes, beam bunch information, etc. From the first Soft-MPS setup in 2018 spring, 9 Soft-MPS signals are currently used. As more Soft-MPS signals are expected in the future, we need to discuss the policy.  
poster icon Poster WEPHA136 [1.544 MB]  
DOI • reference for this paper ※ https://doi.org/10.18429/JACoW-ICALEPCS2019-WEPHA136  
About • paper received ※ 28 October 2019       paper accepted ※ 03 November 2019       issue date ※ 30 August 2020  
Export • reference for this paper using ※ BibTeX, ※ LaTeX, ※ Text/Word, ※ RIS, ※ EndNote (xml)  
 
WEPHA168 Status of the TPS Vacuum Control System 1485
 
  • Y.C. Yang, C.K. Chan, C.-C. Chang, J.-Y. Chuang, Y.Z. Lin
    NSRRC, Hsinchu, Taiwan
 
  The Taiwan photon source (TPS) is a 3 GeV photon source. For the vacuum system NI CompactRIO controllers with embedded real-time processors and programmable FPGAs were selected to design the inter-lock system to maintain ultra-high vacuum conditions and protect vacuum devices. The vacuum pressure protection function and component protection logics worked well during the past years of operation. Be-sides, basic function and other applications such as TCP/IP Modbus communication and real time message APIs were developed. The architecture of the vacuum control system is presented in this paper.  
DOI • reference for this paper ※ https://doi.org/10.18429/JACoW-ICALEPCS2019-WEPHA168  
About • paper received ※ 30 September 2019       paper accepted ※ 03 October 2020       issue date ※ 30 August 2020  
Export • reference for this paper using ※ BibTeX, ※ LaTeX, ※ Text/Word, ※ RIS, ※ EndNote (xml)  
 
THCPR01 Novel FPGA-Based Instrumentation for Personnel Safety Systems in Particle Accelerator Facility 1617
 
  • S. Pioli, M. Belli, M.M. Beretta, B. Buonomo, P. Ciambrone, D.G.C. Di Giulio, L.G. Foggetta, O. Frasciello, A. Variola
    INFN/LNF, Frascati, Italy
  • P. Valente
    INFN-Roma, Roma, Italy
 
  Personnel safety system for particle accelerator facility involves different devices to monitor gates, shielding doors, dosimetry stations, search and emergency buttons. In order to achieve the proper reliability, these systems are developed compliant with functional safety standards involving stable technologies like relays and, recently, PLC. This work will report benchmark of a new FPGA-based system, developed at INFN-LNF, from the design to the validation phase of the prototype currently operating inside the linac bunker of Dafne. In order to achieve the compliance with functional safety standard (IEC-61508), NCRP report 88 on "Radiation Alarms and Access Control Systems" and ANSI report 43 on "Radiation Safety for the Design and Operation of Particle Accelerator", this novel instrument has been designed capable of: devices monitoring in real-time, dual modular redundancy, fail-safe, fool-proof and multi-node architecture on optical link. The aim of this project is to illustrate the feasibility of FPGA technology in the field of personnel safety and develop a standard solution for other fields like the machine protection.  
slides icon Slides THCPR01 [2.928 MB]  
DOI • reference for this paper ※ https://doi.org/10.18429/JACoW-ICALEPCS2019-THCPR01  
About • paper received ※ 30 September 2019       paper accepted ※ 10 October 2019       issue date ※ 30 August 2020  
Export • reference for this paper using ※ BibTeX, ※ LaTeX, ※ Text/Word, ※ RIS, ※ EndNote (xml)  
 
THCPR02 Target Control and Protection Systems Lessons from SNS Operations 1623
 
  • D.L. Humphreys
    ORNL RAD, Oak Ridge, Tennessee, USA
 
  Funding: Work supported by the U.S. Department of Energy, Office of Science, Office of Basic Energy Sciences, under contract number DE-AC05-00OR22725.
The Spallation Neutron Source (SNS) at Oak Ridge National Laboratory has been in operations since 2006 and proposes a project to build a Second Target Station (STS) to effectively double potential scientific output. The SNS target controls operate in a harsh environment which includes high radiation, exposure to gaseous radionuclides, and activated liquid mercury and mercury vapor. These conditions necessitate protective interlocks and credited controls for protection functions to ensure proper response to off-normal conditions. In order to inform the design of target controls for the STS, we have examined lessons learned during SNS operations regarding the design and implementation of the control and protection systems for the first target station (FTS). This paper will examine various aspects of the performance of the target control and protection systems including reliability, maintainability and sustainability given the challenging environment created by 1.4 MW operations. Specific topics include distributed control of various target subsystems, response to loss of power, selection of nuclear grade instrumentation, and applying these lessons to the design for the STS project.
 
slides icon Slides THCPR02 [7.233 MB]  
DOI • reference for this paper ※ https://doi.org/10.18429/JACoW-ICALEPCS2019-THCPR02  
About • paper received ※ 01 October 2019       paper accepted ※ 09 October 2019       issue date ※ 30 August 2020  
Export • reference for this paper using ※ BibTeX, ※ LaTeX, ※ Text/Word, ※ RIS, ※ EndNote (xml)  
 
THCPR03 A Safety Rated FPGA Framework for Fast Safety Systems 1626
 
  • F. Tao, B.M. Bennett, D.G. Brown, J. Jones, M.W. Stettler
    SLAC, Menlo Park, California, USA
 
  In this paper, we will introduce a generic safety-rated FPGA design template. FMEDA analysis, hardware reliability modeling, firmware development, verification and validation will be described in details to demonstrate the IEC 61508 compliant development process. In this dual redundant design, each chain consists a FPGA chip from different manufacturers to minimize the potential common cause failures. Cross checks between FPGAs and end-to-end self-checks are performed to increase the diagnostic coverage and improve the reliability. Based on this safety FPGA template, an Average Current Monitor (ACM) system is developed at SLAC with the addition of a safety PLC for diagnostics and a HMI for user interface. The overall system is deployed as part of Beam Containment System (BCS) to limit the beam current with the target Safety Integrity Level (SIL) 2.  
DOI • reference for this paper ※ https://doi.org/10.18429/JACoW-ICALEPCS2019-THCPR03  
About • paper received ※ 01 October 2019       paper accepted ※ 08 October 2019       issue date ※ 30 August 2020  
Export • reference for this paper using ※ BibTeX, ※ LaTeX, ※ Text/Word, ※ RIS, ※ EndNote (xml)  
 
THCPR04 The European XFEL Beam Loss Monitor System 1630
 
  • T. Wamsat, T. Lensch
    DESY, Hamburg, Germany
 
  The European XFEL MTCA based Beam Loss Monitor (BLM) System is composed of about 470 BLMs, which are part of the Machine Protection System (MPS). The BLMs detect losses of the electron beam, in order to protect accelerator components from damage and excessive activation, in particular the undulators, since they are made of permanent magnets. Also each cold accelerating module is equipped with a BLM to measure the sudden onset of field emission (dark current) in cavities. In addition some BLMs are used as detectors for wire- scanners. Further firmware and server developments related to alarm generation and handling are ongoing. The BLM systems structure, the current status and the different possibilities to trigger alarms which stop the electron beam will be presented.  
slides icon Slides THCPR04 [7.156 MB]  
DOI • reference for this paper ※ https://doi.org/10.18429/JACoW-ICALEPCS2019-THCPR04  
About • paper received ※ 02 October 2019       paper accepted ※ 09 October 2019       issue date ※ 30 August 2020  
Export • reference for this paper using ※ BibTeX, ※ LaTeX, ※ Text/Word, ※ RIS, ※ EndNote (xml)  
 
THCPR05
Fast Machine Interlock System and Its Applications  
 
  • M. Liu, C.X. Yin
    SSRF, Shanghai, People’s Republic of China
  • E. Erjavec, U. Legat
    Cosylab, Ljubljana, Slovenia
 
  Funding: This work was supported by the Youth Innovation Promotion Association CAS [No. 2016238].
With various requirements of machine protection system for accelerator facilities gathered from different labs, we jointly developed the Machine Interlock System (MIS). MIS has different hardware modules, including monitor modules, interlock logic calculating modules and I/O modules with various interfaces. In a global MIS network, different MIS crates could be interlinked over fiber network. The hardware of MIS utilizes FPGA rather than PLC for instantiation of interlock control logic. Therefore, the response time of <5 µs is achieved over a global MIS network. Another advantage of using FPGA is that multiple interlock modes could be realized and switched without hardware or software modification. Due to the two advantages above, MIS could satisfy different requirements of large-scale accelerator facilities. This paper presents the introduction of MIS and implementations in Shanghai Advanced Proton Therapy Facility and China initiative Accelerator Driven System.
 
slides icon Slides THCPR05 [3.801 MB]  
Export • reference for this paper using ※ BibTeX, ※ LaTeX, ※ Text/Word, ※ RIS, ※ EndNote (xml)  
 
THCPR06 The ITk Common Monitoring and Interlock System 1634
 
  • S. Kersten, P. Kind, M. Wensing
    Bergische Universität Wuppertal, Wuppertal, Germany
  • C.W. Chen, J.-P. Martin, N.A. Starinski
    GPP, Montreal, Canada
  • S.H. Connell
    University of Johannesburg, Johannesburg, South Africa
  • D. Florez, C. Sandoval
    UAN, Bogotá D.C., Colombia
  • I. Mandić
    JSI, Ljubljana, Slovenia
  • P.W. Phillips
    STFC/RAL, Chilton, Didcot, Oxon, United Kingdom
  • E. Stanecka
    IFJ-PAN, Kraków, Poland
 
  For the upgrade of the LHC to the High Luminosity LHC the ATLAS detector will install a new all-silicon Inner Tracker (ITk). The innermost part is composed by pixel detectors, the outer part by strip detectors. All together ca. 28000 detector modules will be installed in the ITk volume. Although different technologies were chosen for the inner and outer part, both detectors share a lot of commonalities concerning their requirements. These are operation in the harsh radiation environment, the restricted space for services, and the high power density, which requires a high efficient cooling system. While the sub detectors have chosen different strategies to reduce their powering services, they share the same cooling system, CO2. The main risks for operation are heat ups and condensation, therefore a common detector control system is under development. It provides a detailed monitoring of the temperature, the radiation and the humidity in the tracker volume. Additionally an interlock system, a hardware based safety system, is designed to protect the sensitive detector elements against upcoming risks. The components of the ITk common monitoring and interlock system are presented.  
slides icon Slides THCPR06 [3.847 MB]  
DOI • reference for this paper ※ https://doi.org/10.18429/JACoW-ICALEPCS2019-THCPR06  
About • paper received ※ 30 September 2019       paper accepted ※ 10 October 2019       issue date ※ 30 August 2020  
Export • reference for this paper using ※ BibTeX, ※ LaTeX, ※ Text/Word, ※ RIS, ※ EndNote (xml)  
 
THCPR07 Electronics for LCLS-II Beam Containment System Loss Monitors 1641
 
  • R.A. Kadyrov, C.I. Clarke, A.S. Fisher, M. Petree, C. Yee
    SLAC, Menlo Park, California, USA
 
  LCLS-II is a new FEL which is under construction at SLAC National Accelerator Laboratory. Its superconducting electron linac is able to produce up to 1.2 MW of beam power. In event of electron beam loss, radiation levels can exceed allowed levels outside thin shielding originally built for a lower energy LCLS linac. Beam Containment System (BCS) loss monitors are employed to detect the radiation and shut-off the beam within 200 µs, limit the radiation dose in occupied areas and minimize damage to the equipment. sCVD single-crystal diamond particle detectors are used as Point Beam Loss Monitors (PBLM) to detect losses locally. Fiber optics is selected as Long Beam Loss Monitor (LBLM). PMT at downstream end of the LBLM detects light produced by Cherenkov radiation. LBLM provides continuous coverage along electron beam path from the gun to the dump. Unified set of electronics is designed to integrate the charge from PMT or sCVD, compare the loss with predefined threshold and generate the fault if the limit is breached. Continuous self-checking is implemented for both types of sensors. Challenges in electronics design, cable selection and self-checking implementation are discussed.  
slides icon Slides THCPR07 [1.204 MB]  
DOI • reference for this paper ※ https://doi.org/10.18429/JACoW-ICALEPCS2019-THCPR07  
About • paper received ※ 27 September 2019       paper accepted ※ 09 October 2019       issue date ※ 30 August 2020  
Export • reference for this paper using ※ BibTeX, ※ LaTeX, ※ Text/Word, ※ RIS, ※ EndNote (xml)  
 
THCPR08 SPIRAL2 Machine Protection System Status Report 1645
 
  • C.H. Patard, C. Berthe, F. Bucaille, G. Duteil, P. Gillette, E. Lécorché, G. Normand, J.-F. Rozé, Q. Tura
    GANIL, Caen, France
 
  The phase 1 of the SPIRAL2 facility, the extension project of the GANIL laboratory in Caen, France, is to be commissioned. The accelerator, composed of a normal conducting RFQ and a superconducting linac, is designed to accelerate high power deuteron and heavy ion beams up to 200 kW. A Machine Protection System (MPS) has been implemented to protect the accelerator from thermal damages for this very large range of beam intensities. This paper presents the solutions chosen for this system, composed of three subsystems: one dedicated to thermal protection which requires a PLC and a fast electronic system, a second one dedicated to enlarged safety protection, and a third safety subsystem dedicated to fast vacuum valve protection. Both of those subsystems work associated with a global EPICS-based control and HMI system, which gives the operation team global supervision of the accelerator and allows controlling sensor trigger thresholds, interlock system, beam initialization and power increase through the beam time structure. The MPS has been developed and is currently tested to be ready for the incoming SPIRAL2 commissioning.  
slides icon Slides THCPR08 [3.758 MB]  
DOI • reference for this paper ※ https://doi.org/10.18429/JACoW-ICALEPCS2019-THCPR08  
About • paper received ※ 24 September 2019       paper accepted ※ 11 October 2019       issue date ※ 30 August 2020  
Export • reference for this paper using ※ BibTeX, ※ LaTeX, ※ Text/Word, ※ RIS, ※ EndNote (xml)