Upload
dale
View
33
Download
0
Tags:
Embed Size (px)
DESCRIPTION
Risks due to UPS malfunctioning Impact on the Superconducting Circuit Protection System. Hugues Thiesen. Acknowledgments:K. Dahlerup -Petersen, R. Denz , A. Funken , J. Gomez, V. Montabonnet , D. Nisbet , M. Zerlauth and HCC team. Contents. UPS overview - PowerPoint PPT Presentation
Citation preview
Chamonix 2009 1
Risks due to UPS malfunctioningImpact on the Superconducting Circuit Protection System
Hugues Thiesen
Acknowledgments: K. Dahlerup-Petersen, R. Denz, A. Funken, J. Gomez, V. Montabonnet, D. Nisbet,M. Zerlauth and HCC team
2
Contents
UPS overview UPS for Superconducting Circuit Protection System (CPS) Impact of UPS malfunction Actual Situation Conclusions
Risk
s due
to U
PS m
alfu
nctio
ning
, H. T
hies
en, C
ham
onix
200
9
3
UPS overview
TI 2
T I 8
S P S
In je c tio n
In je c tio n
B e am d um p
Point 5
Point 4
Point 2
Point 3
Point 6
Point 7
Point 1Point 8
Total UPS systems for LHC: > 60 (8 MVA)Total UPS systems for CPS: > 28 (56 UPS units)
CPS (28)Cryo (12)RF (2)General (8)SR (16)
Risk
s due
to U
PS m
alfu
nctio
ning
, H. T
hies
en, C
ham
onix
200
9
4
Human Safety Access* Fire detection*, ODH* Radiation Monitor*, etc…
Beam Systems Beam Instrumentation BIC, FMCM Beam Dump System RF Vacuum, etc…
Technical Network, etc… Cryogenic System SC Circuit Protection System
Power Converters PIC Energy Extraction System (EE) CLQD, GQD and MPS
UPS overviewRi
sks d
ue to
UPS
mal
func
tioni
ng, H
. Thi
esen
, Cha
mon
ix 2
009
Standard Systems use in all CERNaccelerators
Specific Systems use in LHC
* = internal UPS
5
Particularities of Superconducting Circuits High current: up to 13 kA High energy stored: up to 1.4 GJ High current density: up to 1000A/mm2 High time constant: up to 400 sec (EE switches opened).
250 s (4 min) for RB to decrease the current from 13 kA to 1 kA800 s (14 min) for RQX to decrease the current from 7 kA to 1 kA
UPS for CPSRi
sks d
ue to
UPS
mal
func
tioni
ng, H
. Thi
esen
, Cha
mon
ix 2
009
Functionalities require for CPS Protect magnets Protect Current Leads Protect Bus-Bars Slow Abort the PCs in case of cryogenic warning Avoid to start without all systems fully operational Save data for analyzing
(UPS specification = 10 min. of autonomy)
6
UPS_1
UPS_2 EODEBD
Equip.
Risk
s due
to U
PS m
alfu
nctio
ning
, H. T
hies
en, C
ham
onix
200
9
UPS for CPS
UPS redundancy
Each UPS can deliver the requested power (10 min of autonomy) 2 orders of redundancy
If one UPS fails the load is supplied by the second UPS If the second UPS fails the load is supplied by the electrical network
Weak point = breakers (the number of breakers must be optimized and selectivity must be guaranteed)
Characteristics of UPS Network = Characteristics of General Network (see next slide)
F3a
Equip.F3b
Main Parameters of the LHC 400/230V Electrical Network Nominal values
Nominal voltage: 400/230 V ± 10 % Nominal frequency: 50 Hz ± 0.5 Hz THD: 5 % Voltage unbalance: 2 %
Transients Peak mains surges: 1200 V for 0.2 ms Mains over voltage: 50 % of Un for 10 ms Voltage drops: 50 % of Un for 100 ms
EDMS # 113154: Main Parameters Of The LHC 400/230V Distribution System (G. Fernqvist / J. Pedersen)
UPS for CPS
7
Risk
s due
to U
PS m
alfu
nctio
ning
, H. T
hies
en, C
ham
onix
200
9
Transients = Normal Operation
8
UPS connected to the PIC Software link for PPermit
"Not possible" to start in case of one UPS warning /fault Hardware link for Energy Extraction (Fast_Abort)
Fast abort in case of two UPS warnings/faults (eg. batteries mode)
UPS_2UPS_1
PIC Supervision
Risk
s due
to U
PS m
alfu
nctio
ning
, H. T
hies
en, C
ham
onix
200
9
UPS for CPS
PPermit
FastAbort
9
Risk
s due
to U
PS m
alfu
nctio
ning
, H. T
hies
en, C
ham
onix
200
9
C12L C34LR C12RIP8 IP7
UPS_UA83 UPS_RE82 UPS_RE78 UPS_UJ76
4 redundant UPS systems to protect 1 sector 1 UPS in UA => IT, IPQ and IPD 1 UPS in RE => C12L to C34L (77 MB and 24 MQ) 1 UPS in RE => C34R to C12R (77 MB and 24 MQ) 1 UPS in UJ => IT, IPQ and IPD
UPS for CPS
C2nC2n+1 C2n+1 C2n+1 C2n+1
C2n C2n C2n
10
Diagnostic malfunction Supervision malfunction Interlock malfunction Etc…
Power malfunction Degradation of the output voltage 1 phase loss 3 phases loss Partial network loss Etc…
As for any other systems, the UPS systems can malfunction
Interlock malfunction
Total Loss of the output power
Risk
s due
to U
PS m
alfu
nctio
ning
, H. T
hies
en, C
ham
onix
200
9
UPS for CPS
11
Impact of UPS malfunction
Interlock malfunction
UPS_2UPS_1
PIC Supervision
If the interlock system of one UPS does not work The PIC does not stop the powering if the second UPS stops working
(UPS system in by-pass).
Risk
s due
to U
PS m
alfu
nctio
ning
, H. T
hies
en, C
ham
onix
200
9
No action before loss of the UPS system output power
12
Risk
s due
to U
PS m
alfu
nctio
ning
, H. T
hies
en, C
ham
onix
200
9
QHPSCLQD GQDEEPICPC
SC Circuit Protection System Three protection systems
The Magnet Protection System (MQD + QHPS) The CL Protection System The Global Protection System
The Energy Extraction System The PIC The PC
Ref. M MQD
Impact of UPS malfunction
Power malfunction Cold PartWarm Part
13
Risk
s due
to U
PS m
alfu
nctio
ning
, H. T
hies
en, C
ham
onix
200
9
Impact on PC (1)
UPS for power converter Only DCCTs and FGC for high current power converters are on UPS (MB,
MQ, IPQ, IPD and IT). The power part is not supplied by UPS Gateway and computing network are on UPS to assure the control of
the PCs
PCFGC
CRGW
DCCT
FIPCCC Network
14
Risk
s due
to U
PS m
alfu
nctio
ning
, H. T
hies
en, C
ham
onix
200
9
Impact on PC (2)
PCFGC
CRGW
DCCT
FIPCCC Network
Loss of FGC and DCCT The power converter switches off The CR fires (not need power) PC PM data is lost The quench loop does not open (except if water failure)
Loss of GW After 10mn, all power converters connected on this GW switch off Their CR fire PC PM data is stored inside FGCs
Loss of Computing Network The control of the PC is lost (Only PC with PIC can be switched off). The 60A PCs can not be switched off
15
Risk
s due
to U
PS m
alfu
nctio
ning
, H. T
hies
en, C
ham
onix
200
9
Impact on EE system
ENCCC Network
Loss of EE system Electronic The Energy Extraction Switch opens The Quench Loop opens
The power converter switches off and its CR fires The EE system PM data is lost
Loss of communication with the CCC Nothing happens The EE system remains fully operational
16
Risk
s due
to U
PS m
alfu
nctio
ning
, H. T
hies
en, C
ham
onix
200
9
Impact on CLPS system
Loss of CLPS Electronic The Quench loop opens
The EE switch opens The power converter switches off and its CR fires
The CLPS PM data is lost Loss of the communication with the CCC
Nothing happens The CLPS remains fully operational
CLPSCCCNetwork
17
Risk
s due
to U
PS m
alfu
nctio
ning
, H. T
hies
en, C
ham
onix
200
9
Impact on GQPS system
Loss of GQPS Electronic The Quench loop opens
The EE switch opens The power converter switches off and its CR fires
The GQPS PM data is lost Loss of the communication with the CCC
Nothing happens The GQPS remains fully operational
CLPS GQPS Ref. M
CCC Network
18
Risk
s due
to U
PS m
alfu
nctio
ning
, H. T
hies
en, C
ham
onix
200
9
Impact on MQPS system (1)
MQPS Implemented only for the high current circuits (MB, MQ, IPQ, IPD and IT) For the IPQ, IPD and IT circuits, the MQPS protects also the busbars Single phase powering
QHPS The QHPS are not in the Quench Loop and can be only fired by the QD 4 QHPS per magnets and 1 is needed to protect correctly the magnet The QHPS are connected to the Power Permit
QD QHPSCCCNetwork
19
Risk
s due
to U
PS m
alfu
nctio
ning
, H. T
hies
en, C
ham
onix
200
9
Impact on MQPS system (2)
Loss of QD/QHPS (same single phase feeder) The Quench loop opens
The EE switch opens The power converter switches off and its CR fires
The MQPS PM data is lost To avoid a "sector quench" in case of UPS loss the QHPS are not fired. The
consequence is the magnet is not protected during the current decay. Loss of the communication with the CCC
Nothing happens The MQPS system remains fully operational
QD QHPSCCCNetwork
20
Risk
s due
to U
PS m
alfu
nctio
ning
, H. T
hies
en, C
ham
onix
200
9
Impact on PIC
PIC Level All HW interlock loops of this PIC open
All EE switches of concerned circuits open All power converters of concerned circuits switch off and their CR fire
The PIC PM data after the event is lost Loss of the communication with the CCC
Slow Abort after 30 seconds The currents of concerned circuits decays to 0 A
The PIC remains fully operational
PICCCCNetwork
21
Risk
s due
to U
PS m
alfu
nctio
ning
, H. T
hies
en, C
ham
onix
200
9
Resume
PC PIC EE CLQD GQD MPS*13kA ok ok ok ok ok nokIT ok ok - ok - nokIPQ/IPD ok ok - ok - nok600A-EE ok ok ok ok ok -600A-NoEE ok ok - ok ok -120A ok ok - ok - -60A ½ ok - - ok - -
Pb with MPS
No Issue
Issue with PC control
QHPSCLQD GQDEEPICPC Ref. M MQD
* To avoid a "sector quench" in case of UPS loss the QHPS are not fired.The consequence is the magnet is not protected during the current decay.
22
Risk
s due
to U
PS m
alfu
nctio
ning
, H. T
hies
en, C
ham
onix
200
9
Actual Situation
Tested UPS IST Devices IST
No tested Devices on UPS network (verification on going during AUG tests) UPS with theirs loads
23
Risk
s due
to U
PS m
alfu
nctio
ning
, H. T
hies
en, C
ham
onix
200
9
Conclusions
Conclusions UPS has not been tested with its load. Tests of UPS systems (with load)
are recommended. New devices will be installed on UPS network (nQPS system). "AUG
tests" in operational conditions are recommended. UPS is important for the LHC safety. Annual tests after each shut down
are recommended. High Current magnets are not protected in case of UPS powering
failure. This issue must be clarified by MPWG (to fire or not to fire?). QHPS are not interlocked. This issue must be clarified by MPWG
(software interlock could be implemented?). The PM files are lost in case of UPS powering failure. 10 min of UPS autonomy are not enough to protect correctly the RQX
circuits (1.8 kA after 10 min). 20 min of autonomy are recommended. What is the situation for the other systems?