Inst ToolsInst ToolsInst Tools
  • Courses
  • Automation
    • PLC
    • Control System
    • Safety System
    • Communication
    • Fire & Gas System
  • Instrumentation
    • Design
    • Pressure
    • Temperature
    • Flow
    • Level
    • Vibration
    • Analyzer
    • Control Valve
    • Switch
    • Calibration
    • Erection & Commissioning
  • Interview
    • Instrumentation
    • Electrical
    • Electronics
    • Practical
  • Q&A
    • Instrumentation
    • Control System
    • Electrical
    • Electronics
    • Analog Electronics
    • Digital Electronics
    • Power Electronics
    • Microprocessor
  • Request
Search
  • Books
  • Software
  • Projects
  • Process
  • Tools
  • Basics
  • Formula
  • Power Plant
  • Root Cause Analysis
  • Electrical Basics
  • Animation
  • Standards
  • 4-20 mA Course
  • Siemens PLC Course
Reading: Alarm and Trip Systems
Share
Font ResizerAa
Inst ToolsInst Tools
Font ResizerAa
  • Courses
  • Design
  • PLC
  • Interview
  • Control System
Search
  • Courses
  • Automation
    • PLC
    • Control System
    • Safety System
    • Communication
    • Fire & Gas System
  • Instrumentation
    • Design
    • Pressure
    • Temperature
    • Flow
    • Level
    • Vibration
    • Analyzer
    • Control Valve
    • Switch
    • Calibration
    • Erection & Commissioning
  • Interview
    • Instrumentation
    • Electrical
    • Electronics
    • Practical
  • Q&A
    • Instrumentation
    • Control System
    • Electrical
    • Electronics
    • Analog Electronics
    • Digital Electronics
    • Power Electronics
    • Microprocessor
  • Request
Follow US
All rights reserved. Reproduction in whole or in part without written permission is prohibited.
Inst Tools > Blog > Control Systems > Alarm and Trip Systems

Alarm and Trip Systems

Last updated: November 15, 2018 12:31 pm
Editorial Staff
Control Systems Guest Articles
4 Comments
Share
6 Min Read
SHARE

Alarm and Trip Systems

The purpose of an alarm system is to bring a malfunction to the attention of operators and maintenance personnel, whereas the purpose of a trip system is to shut down a system in an orderly fashion when a malfunction occurs, or to switch failed units over to standby units. The elements used in the process control system are the first warnings of a failure. This could show up as an inconsistency in a process parameter, or as a parameter going out of its set limits.

The sensors and instruments used in the alarm and trip system are the second line of defense, and must be totally separate from those used in the process control system. Alarm and trip system information and its implementation are given in ANSI/ISA-84.01-1996—Application of Safety Instrumented Systems for the Process Control Industry.

Safety Instrumented Systems

The alarm and trip system, or Safety Instrumented System (SIS), has its own sensors, logic, and control elements, so that under failure conditions, it will take the process to a safe state to protect the personnel, facility, and environment. To ensure full functionality of the SIS, it must be regularly tested. In an extreme situation, such as with deadly chemicals, a second or third SIS system with redundancy can be used in conjunction with the first SIS system, to ensure as close to 100% protection as possible.

The sensors in the SIS usually will be of a different type than those used for process control. The control devices are used to accurately sense varying levels in the measured variable, whereas the SIS sensor is used to sense a trip point, and will be a much more reliable, rugged, and high-reliability device. The use of redundancy in a system cannot be used as a justification for low reliability and inexpensive components.

The most commonly used high performance SIS system is the dual redundancy system, which consists of the main SIS with two redundant systems. In this case, a two-out-of-three logic monitoring system determines if a single monitor or the entire system has failed. If a single failure is detected, then the probability is that a sensor, its associated wiring, or logic has failed. If more than one failure is detected, then the indication is a system failure.

A two-out-of-three logic circuit is shown in Figure (a), and the truth table is shown in Figure (b). With correct operation, the inputs are normally low (0). If one input goes high (1), it would indicate a sensor failure, and the sensor failure output would go from 0 to 1 to give warning of a sensor failure, but the system failure output would remain at 0. If two or more inputs go high, it would indicate a system failure, and the system failure out put would go from 0 to 1, as shown.

In SIS systems failure analysis, the rate of component failure is as follows:

  • Logic, 8%;
  • Sensors, 42%;
  • Control devices, 50%.

Safe Failure of Alarm and Trip

No system is infallible, and failures are going to occur. A good philosophy is the fail-safe approach, where each valve will trip to a predetermined fail position when they are deenergized. Even with an uninterruptible power system, power wires can get cut, fuses can blow, or cables can break, cutting off power. In some cases, this approach is not feasible, and extra safeguards are necessary to maintain safety when the SIS fails.

There are typically three levels of safety, and the systems normally associated with the safety levels are:

Level 1 —Single sensor with a one-out-of-one logic detection and single final control.

Level 2 —More diagnostics than Level 1, plus redundancy for each stage.

Level 3 —Minimum of two systems with redundancy, or a two-out-of-three sensing system.

Two Out of Three Logic

Figure (a) Monitor and two-out-of-three failure indicator, and (b) truth table.

Components in an SIS system should be high-grade, with a high mean time between failures (MTBF). Relays were the preferred choice due to the capability of multiple contacts and isolation. However, semiconductor devices have an excellent MTBF, and they are replacing relay logic. A good design will take into account the integrity of all the components in an alarm system, as well as interactions between the components.

Testing of the alarm system is required on a regular basis to uncover faults or potential failures, which require corrective action. Testing is of prime importance in SIS applications. An SIS is designed to detect hazardous conditions, so it must be able to sense a malfunction of the logic, measuring device, and final alarms during testing. The requirements and testability of the SIS must be factored in at the system design stage.

Article Shared by :
V Manikanta
Don't Miss Our Updates
Be the first to get exclusive content straight to your email.
We promise not to spam you. You can unsubscribe at any time.
Invalid email address
You've successfully subscribed !

Continue Reading

What is a Network Connector? – Types of Connectors
30 Concerns for Process Control Systems Philosophy
What is Advanced Process Control (APC)?
DCS Program to Maintain Draft in Furnace
Process Control Loop Testing
What is a Patch Panel? Types and Uses in Networking
Share This Article
Facebook Whatsapp Whatsapp LinkedIn Copy Link
Share
4 Comments
  • George Ibraheem Yokhana says:
    January 29, 2019 at 5:42 pm

    Dear Mr V. Manikanta :thanks for your article just to remind u or consider it as new addition in the place where i was working as instrument maintenance engineer we have digital control system i.e using logic circuits to detect the signal from field sensors whether it is Alarm or Shut Down,

    so the design classified the type of shut down into two parts /First degree shut down and second degree, So the second degree means only Alarm with Buzzer but can be reset while first degree shut down is the real shut down for any reason such us High station pressure discharge or low suction pressure for one of the main pumps or sudden close for the main valve type MOV so on for any real type of shut down.

    Here for first degree the Alarm still produces Buzzer or the annunciation working till the maintenance team solve the problem and then the operator can do reset the Alarm.

    so kindly confirm this with the new DCS criteria but i;m sure all are the same despite the name first or second degree of shut down.

    /George Ibraheem -Instrument Engineer

    Reply
  • Arya Aghili-Ashtiani says:
    February 25, 2020 at 10:35 pm

    This text is from Chapter 17 of
    William C. Dunn, Introduction to Instrumentation, Sensors, and Process Control, Artech House, 2006.

    Reply
  • harish says:
    October 12, 2022 at 6:37 pm

    please check the connection on the fig (a) as AB is and gated twice instead of AC

    Reply
    • Israel P says:
      October 17, 2022 at 10:37 pm

      Very true, if A and C fail the system fault will not be triggered.

      Reply

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

Stay Connected

128.3kFollowersLike
69.1kFollowersFollow
210kSubscribersSubscribe
38kFollowersFollow

Categories

Explore More

Control Loops Objective Questions and Answers
What is Data Acquisition? – Elements and Components
Control Valve Split Range Example
Hardwired I/O and Serial I/O – Differences Explained
How a 4-20mA Transmitter Works?
What is a Surge Protection Device? – Principle, Types, Advantages
Concept of DCS in Industrial Automation
Transmitters 4-20mA Current Failure Alarm Limits

Keep Learning

DeltaV System Configuration Change and Download - 3

DeltaV System Configuration Changes and Download

Turbine Bypass System

Turbine Bypass System

Create a Project in LabVIEW

How to Create a Project in LabVIEW?

Instrumentation Earthing

Instrumentation Earthing

Key Facts About RS485 Industrial Network

Key Facts About RS485 Industrial Network

Basics of Anti-Surge Control System

What is Anti Surge System?

VPN for Control Engineers

How Important is VPN for Control Engineers?

How Engineers Effectively do Problem-solve and Troubleshoot

How Engineers Effectively do Problem-solve and Troubleshoot?

Learn More

PLC Data Logging and Transmission

Moving Data between PLCs – Siemens Basics – TSEND TRCV

Optimal Control Systems

The State Regulator Problem

PLC Program to Separate Different Size Objects

PLC Program to Separate Different Size Objects

How to Use the Shift and Rotate Instructions in PLC

How to Use the Shift and Rotate Instructions in PLC?

Transmitters 4-20mA Current Failure Alarm Limits

Transmitters 4-20mA Current Failure Alarm Limits

Establish Communication Between Two PLC Via PROFIBUS Protocol

Establish Communication Between Two PLC Via PROFIBUS Protocol

STL Programming - SET, RESET, ASSIGN

STL Programming – SET, RESET, ASSIGN

Inspection of Control Valves

Inspection and Test Requirement of Control Valves

Menu

  • About
  • Privacy Policy
  • Copyright

Quick Links

  • Learn PLC
  • Helping Hand
  • Part Time Job

YouTube Subscribe

Follow US
All rights reserved. Reproduction in whole or in part without written permission is prohibited.
Welcome Back!

Sign in to your account

Username or Email Address
Password

Lost your password?