MPS - Commissioning Plans

SNS Integrated Control System

MPS - Commissioning Plans

1. Quick MPS System Overview

2. Run Permit System

3. Fast Protect Auto Reset

4. Fast Protect Latched

5. High QA (Hard Wired) MPS System


MPS Design Assumptions

Four layers of protection!» High QA (Hardware) PLC» Hardware / Software (Fast Protect System)» Software (Run Permit System)

Machine Protection System is not a “Safety Class” or “Safety Significant” System.

SNS will be built and commissioned in Phases, MPS must accommodate this schedule, (Flexible and Reliable).

Reliability – The Machine Protection System must inhibit the beam when required. It must fail in a SAFE state.

Availability – The machine availability should be as high as possible. The MPS must be easy to configure and have a “friendly” operator interface. False trips must be minimized.


MPS - Layered Protection

PersonelProtection

System

Fast ProtectLatched

Fast ProtectAuto Reset

Run Permit

Incr

easi

ng

QA

Hard Wired and PLCapplication

3 MHz carrier linkKEY Bypassing

Jumper Bypassing

8 MHz carrier linkSoftware bypassSoftware Trips

EPICS ApplicationSoftware

EPICS Channel AccessInputs

Loss MonitorsRF Status

Machine Mode

Valve StatusPower Supply StatusSystem Level Inputs

Chipmunks,Doors, etc.

AC Breakers in frontend electronics &power supplies

65 KV supplyRFQ Power Supply

RFQ DriveLEBT Chopper

MPS FPAR, FPLTiming System

ProtectionSystem

Shutdownmechanism

SystemDescription

System Inputs

TargetProtection

SystemHard Wired

Target Sensors

TemperatureFlow

AC Breakers

No

n S

afet

y C

lass

Sys

tem

sS

afe

tyS

ign

ific

an

tS

afet

yC

lass

Hard WiredPermit

KEY BypassingPower Supply Shunts

PPS InputsBergoz MPCT

Front End PSHardwire interlocks


MPS Commissioning (Verification, systems checked previously without beam, Commissioning and testing)

Run Permit System (1 second)» Verifies IOC configuration and beam line equipment status.» MPS masking, Beam Power limit verification

Fast Protect Auto Reset (20 microseconds)» Beam Loss Monitors» Beam Current Monitors

Fast Protect Latched System (20 microseconds)» Power Supply status, RF, Kicker status» System cooling status (Collimators, dumps, etc)» Etc.

High QA MPS (~ 33 msec)» Magnetic Field limit(s) verification» Beam Diagnostics verification, calibration, testing


MPS Fast Protect System Layout

RING

RFQDrive

HEBT

Ldump

SRF

CCL

DTL

65 kV

RFQHVPPS

MPS Inputs

MPS Inputs

MPS InputsMPS Inputs

MPS Inputs

MPS Inputs

MPS Inputs

MPSMaster

Machinemode

RING

RTBT

Xdump

MPS Inputs

MPS Inputs

MPS Inputs

Idump

RTBT

Target

Fa

st

Pro

tec

tIn

pu

ts

FrontEnd

LINAC RING RTBT

Fa

st

Pro

tec

tIn

pu

ts

Fa

st

Pro

tec

tIn

pu

ts

Fa

st

Pro

tec

tIn

pu

ts

Target

LEBTChopper

RFQDrive

Fa

st

Pro

tec

tIn

pu

ts

Fa

ult

Be

am

Pe

rmit

Inp

uts

FrontEnd

LINAC RING RTBT Target

Ion Source65 Kv PS

RFQPower Supply

Fa

ult

Be

am

Pe

rmit

Inp

uts

Be

am

Pe

rmit

Inp

uts

Be

am

Pe

rmit

Inp

uts

Be

am

Pe

rmit

Inp

uts

ExtractionKickersFault

EventSystem

"ABORT"

5.6 us 5.8 us 8.2 us 8.2 us

27.3 us

MEBTMPS Inputs

RFQ

LEBT

Src

MPS Inputs

MPS Inputs

MPS Inputs

0.8 us

MPS Inputs

MPS Inputs


MPS Shutoff Equipment

Hard Wire Protect» RF drive to RFQ Power Supply interlocks» 65 KV Power Supply Interlocks

Fast Protect – Auto Reset» RF drive to RFQ» LEBT Chopper

Fast Protect - Latched» 65 KV Power supply» RFQ Power Supply

Run Permit» Fast Protect - Latched» Fast Protect - Auto Reset

( Time Line Decoder (un-schedule all beam) )


MPS - Fast Protect Inputs

FPARRFHV PS I Wire Harp BLM LLRF Kick Dmp/TgtVac Total BLM

Mon.Scan. Coll InputsSRC 2 23 1 0 0 0 1 0 0 3 30 0

D-Plate 3 32 1 10 2 0 6 0 2 18 74 5

L_dmp 19 181 1 40 0 0 96 0 1 21 359 129

I_Dmp 1 32 1 11 2 2 2 0 2 2 55 33

Ring 2 143 1 2 2 2 4 8 2 2 168 87

E_Dmp 0 31 1 2 2 2 0 14 2 2 56 21

TGT 0 25 1 3 2 2 0 0 2 2 37 24

Total 27 467 7 68 10 8 109 22 11 50 779 299

Fast Protect Latched Inputs - ALL Correctors - LLRF

• LLRF Inputs could be auto reset (FPAR)• ~50% of corrector supplies will not initially be MPS inputs

• HEBT 12/18, RING 12/126, RTBT 12/19• BLM’s could be Latched, as determined during commissioning


Bypassing MPS Inputs

Allow easy bypass (Software Masking)» Different rules for commissioning and operations

» Commissioning, FPAR devices can be masked

» Commissioning, FPL – subset of Quads and correctors can be masked, all dipoles and rest of quads need ASD Radiation safety approval.

» Commissioning team – ASD-RS should agree on list before commissioning.

Easy OPI for verifying, changing software MASK.

MODE masks are defined by ASD-RS, not easily changed.



Run Permit System – Tasks

Machine Mode Setup» Machine Mode (Dump) and Beam Mode (Power, Width restrictions)

Selection (From High QA System)» Longitudinal pulse profile verification and selection» Verifies machine setup before changing mode

Schedules Machine Sequence» Keeps Beam, RF, Modulator gates in sync» Schedules Pulse Profiles at requested rate» Calculates / verifies table checksums (pulse to pulse)

Operator Interface to MPS» Control and Status Displays» Software Masking of inputs / Trip limit Controls

Hardware configuration verification» SNL task scans IOC hardware configuration for verification


Run Permit System – Mode Definitions

Machine Modes» Ion Source

» D-Plate

» Linac Dump

» Injection Dump

» Ring

» Extraction Dump

» Target

Beam Modes» Beam Off

» Diagnostics (10 usec)



» Full Pulse Width (1 msec)

» Low Power (7.5 kW)

» Medium Power (200 kW)

» Full Power (2 MW)

Machine mode selected by Key switch in control room, Beam Mode selected by Key or software. Switches read by High QA MPS system.


RPS – Operating Envelope Calculations

Safe Operating Reqion

0.1

1

10

100

0 200 400 600 800 1000

# of turns injected

Bea

m in

ject

ion

Rat

e

7.5 kW envelope

200 kW envelope

2 MW envelope

60 Hertz

Safe Operation

Wire Scanners


User Beam Profile Request

CP

UE

PS

VME

Tim

ing

EP

S

LEBTChopper

PhysicsApplication

Event linkEncoder

SystemSequencer

Control Room

RTDLMaster

DiagnosticsIOC's

UserProfile,

Raterequest

User ID

PV_List_ModeTimeout

Time Window

ControlsIOC's

Control SystemNetwork

SynchronousData

TimingDistribution

System

DiagnosticsIOC's

CP

UE

PS

VME

Tim

ing

EP

S

ControlsIOC's

WireScannerRequest


MPS Top Level Screen


Run Permit System – Operator Interface


Typical Top Level Screens

Global Software Mask Status Display BLM Trip Point Display Time / Fault display line

» Post Mortem playback, Loss verses RF, etc

Time Line Recorder» Timing system faults, missing events, extra events, etc

PPS Status, Beam line readiness, etc Fault by system, Fault by area Beam Profile scheduling, Rate requests, etc.

Requests for specific displays seen elsewhere appreciated, a quick hand sketch is useful.



Fast Protect – Auto Reset

ALARA – Pulse Width Modulation, Tuning Aid

Concentrates Permit Inputs

Beamline Inputs Bypassed by Mode

Inhibits carrier link to disable Beam

Typical Inputs:» Loss Monitors

» Time Line Recorder (Noise detected on Event Link)

» Differential current monitors

Auto resets for next beam pulse, Latches to FAULT state after N trips in M pulses

Auto mask sets(MODE MASK) (Wire Scanners)» Mode allows WS to be bypassed, SW Mask bypasses WS input


SNS BLM SYSTEM DESIGN CRITERIA

•Upper end signal: (Fast Protect Auto Reset)– Maximum beam loss of 1 % at a single location

–35-50 kHz signal BW

–Beam interrupt via MPS based on integrated loss during pulse ( 10 μsec response)

•Lower end signal: (Beam Loss Accounting System) –Set by 1 W/m requirement for maintenance

–Must resolve 1% of 1 W/m but at BW of < 1 Hz

–Warning only after extended period of loss (1 minute)

–(Saeed Assadi, MPS FDR slides)


BLM-- Specification:

Fast Loss: (Determine thresholds during commissioning)1)10 µsec Detect-to-Beam Inhibit time.2) Programmable threshold, each detector, level changes/macro-pulse3) Each detector maskable (eliminate bad channels, permit studies resulting in higher than normal losses) Single output line/analog crate

Long-term: (Calibration Studies)1) Low level loss: "Soft" alarm through network or2) Programmable threshold, each detector,3) Each detector maskable (eliminate bad channels, permit studies resulting in higher than normal losses) Single output line/analog crate

Local Data Storage:"Flight-Recorder Mode, 60 (1-second) records of "Detailed Losses" for each detector. Available for read-back on beam abort.In-Situ System check: On-line check of all detectors, connections and electronicsby cycling HV Off/On.


BLM AFE Configuration


Beam and Loss Display (Simulated data II)


LINAC Dose Rate:

** Data is provided by Franz X Gallmeier.


LINAC Dose Rate (Simulated data) Distance along LINAC

Tim

e


Beam Loss Monitors (Commissioning)

Verify BLM Operation (Part of BLM / Diagnostics commissioning plans)

MPS» Measure (Verify) Integration Times (1 % Loss) » Determine Trip Point Limits for each BLM» Determine Radiation Dose Calibration» Calibrate losses in units of W/m» Verify Masking Capabilities (Software masks)» Verify Wire Scanner Masks (BLM Mode masks)

BLM Accounting» Calibrate low loss measurements

– Change vacuum by order(s) of magnitude?

See Saeed’s slides from Ring commissioning meeting in Dec and slides from MPS FDR:

» http://www.sns.gov/projectinfo/ics/192/1923/1923.html


Commissioning activities

Select device and mask (or desensitize) adjacent devices

Loose beam, verify time response» Log MPS input fault time» Log Front end shutdown time» Verify response time with diagnostics:

– Current monitors, analog signal, scope mode

– Fast Loss Monitor(s)

– BPM Power (Amplitude)

Verify Loss mechanism (Change vacuum, monitor response)

Determine appropriate trip levels for commissioning, operations» Poor vacuum conditions, Energy changes, Tune changes (Instabilities)

Calibrate differential current monitors vs. Beam loss monitors

Identify, Eliminate(minimize) sources of false trips» Beam noise (50 amps @ 1MHz), Kicker noise, etc.


Conclusions:

1) SNS expects to maintain losses below 1Watt/meter over most of the Accelerator in order to allow hands-on maintenance. As such the BLM system will play a major roll in commissioning.

2) Important loss mechanisms include gas stripping, magnetic stripping and Halo generation from “mismatches”. We hope to use the BLM system to confirm the models and set the limits for the BLM-to-MPS trip levels.

3) Loss Monitor system will provide signals to the MSP system which are not modifiable by software (a layer of protection).

4) HARPS and specialized edge loss detection diagnostics are under studies but not included in the base-line systems yet.



Fast Protect - Latched System

Concentrates Permit Inputs

Latches carrier link in FAULT state to disable beam

Input bypassing allowed with Jumper, Key or PLC

Beam line inputs bypassed by machine mode (event link)

Equipment maintained in locked racks

Documentation control of changes

System verification after changes

When MPS inputs need bypassing for beam studies, Software masking will be available as required. (Masking some devices will need the approval from Radiation safety committee)


Fast Protect - Latched Inputs

Power supply status (Fault when PS is not ON)

Valve Status (Fault when valve is not OPEN)

LLRF RF Status (Fault when PS is not Enabled)

Target Status» Response should be faster than target shutdown signal.» Time Stamp verifies MPS ACTED FIRST

Dump Status (Fault when all dump sensor not OK)

Loss monitors (High QA chipmunks)

Timing System Status» Ring RF required for IDMP, RING, EDPM, and target modes» Local Oscillator allowed for LDMP, D-plate, and Ion Source modes

PPS Input» PPS search status will latch off beam


Vacuum Level – MPS trip levels

Vacuum Level RequirementsSystem Design Conditioning Operational(1) Document

Trip TripFE 5x10-7 1x10-6 5x10-6 Front End Systems SRDDTL 1x10-7 1x10-6 1x10-6 Linac Systems SRDCCL 5x10-8 1x10-6 5x10-7 Linac Systems SRDSCL 1x10-9 1x10-6 1x10-8 Vacuum System Interrupts (2)Coupler 1x10-8 1x10-6 1x10-7 Vacuum System Interrupts (3)HEBT 5x10-8 1x10-6 5x10-7 Ring and Transfer lines (4)Ring 1x10-9 1x10-6 1x10-8 Ring and Transfer linesRTBT 1x10-8 1x10-6 1x10-7 Ring and Transfer lines (1) Actual trip points can vary and will be set during commissioning.(2) Gate valves close if vacuum > 1x10-9 longer than 3600 seconds or > 10-6 ASAP.(3) Inhibit RF and Beam if pressure >10-8 for 10 seconds, 10-7 for 1 second, or 10-6 ASAP.(4) Estimated losses due to H- stripping (50% H ~10-19 cm2/atom, 50% Oxygen, Nitrogen ~10-18 cm2/atom) is 0.3 nA/m at 5x10-8 Torr.

Vacuum Status – Valve closures operate trip defined below. Integrated vacuum levels produce EPICS Alarms, which could shut off the beam (MPS). MPS trips on VALVE Closure.



Injection Kickers

Extraction Kickers

Ring RF

Current monitors

HARP – Backup to HQA-MPS

SEM» Possible backup to HARP

Beam Position Monitors» Beam off target/dump violation



EPICS Alarm Inputs» EPICS Alarms for any PV can trigger latched input on a board level or

input signal level.

MPS Verification Software» SNL program verifies jumper settings, Latches beam off in case of

discrepancy.

Beam Loss Accounting» Integrated loss sets Alarm, could trip beam

Beam Current Accounting



Injection Kicker

2 Horizontal, 2 Vertical pairs, 8 power supplies

Power supply status inputs to MPS-FPL

Each kicker in a pair should be matched

Fault on unmatched waveforms ?» Run Loss studies on unmatched waveforms.

» Sensitivity studies on painting schemes

2 kHz comparators for Reference and Shunt


Injection Foil

Foil Failure» Beam Loss Monitors

» HARPS

» Integrating Current Monitor

» Peak Current Monitor

» Foil Video monitor

Foil Motion » Low power mode required? (LANSCE allows)

» LVDT – Motion range available

» Limit Switches

Foil Position» Use Mode Mask to allow beam for BLANK foil position or

Phosphorous screen in place


Ring RF MPS Considerations

RF Power Supply

RF Cavity Field Error Signals

Reflected Power

RF Phase Error monitoring

RF – Beam phase monitoring?

RF Power Ramping (Amplitude modulation?)

Commissioning studies to determine acceptable losses verses RF parameters.


Ring Collimator MPS Inputs

Temperature sensors

Water Flow

Normal loss monitors? (Dynamic range OK?)

Motion – (Drop to lower beam power?)

Motion out of range (LVDT’s?)

Limit Switches


Extraction Kicker

“Fast and Slow” Kicker protection will be combined to give MPS one Fault output. (Charging supply status, Kicker Charged, Thyratron supply OK, Filament supply status, temp, flow, etc.)

One MPS signal per kicker. » Allow Operations to mask one kicker out. EPICS App. Does not allow more

than one kicker to be masked

Kicker System needs 3 pulses from timing system, Start charge, Stop Charge, and Extract.

False firing – Abort ASAP or synchronous with beam gap.

Storage mode: If kickers are used to abort beam in storage mode additional timing signals are required, charging current goes through kicker magnets (1/e ~1sec), and kickers would need to be masked during storage.



High QA MPS Dump, TGT, Window

HQA – Time response, 32 msec (12 msec measured )» Latched in PLC

» Does not rely on Software

Machine Can Take Two Full Pulses

High QA configuration Controls» Hardware normally inaccessible

» System Verification, routine testing

» Documentation trail

» Operational procedures

Redundancy –1 PLC, double up on sensors, use MPS-FPL for redundancy

Redundant shutdown devices


Control Net Layout

P PS E NTRY

IonSource

LDMP

IDMP

RING

EDMP

TGT

MPSPLC

PPS

ZO

NE

Sta

tus

65 KVPSRFQ-RFRFQ-PS

Plasma-RF

Control Net - Flex IO Redundant Network - Fast Diagnostics

D-Plate

Avg. IPWmon

Harp

Imon

ImonMachine ModeBeam Mode

SelectKey switch


High QA PPS Inputs and Selection Switches

Personnel Protection System» Linac zone» HEBT Zone» Ring Zone» RTBT Zone» Target Zone

Machine Mode Selection» Ion Source» D-Plate» L_DMP» I_DMP» RING» E_DMP» TGT

Beam Mode Selection» 7.5 kW» 200 kW» 2 MW» 10 μsec» 50 μsec» 100 μsec» 1 msec


High QA Dump, Target PLC Remote Inputs

Target (or Dump) Status» Pressure, Temperature» Flow, Vacuum status

Power supply current monitor’s» Current and Voltage window comparators» Quads – Hi window, Dipoles, Hi and Off windows.» Steering corrector’s – Window (RTBT only)

HARP Status, P-P Permit Signal (Target only, Baseline)

Beam Current Monitor (Not in baseline, Hardware not chosen)» Co-Injection (Pulse-to-Pulse Species Modulation) ?» P-P Pulse Width verification» Beam Power, Integrated Beam Current

Beam Loss Monitor (2 per current monitor)


Injection Dump inputs

Beam LossMonitor

BeamCurrentMonitor

QuadCurrentWindow

Comparator

WireScanner

InjectionDumpStatus

FastValve

HarpSEM


Target MPS Inputs


Power Supply Window monitors

Quad (Dipole) Magnet current compared with upper and lower limits, set in PLC Code. Limits determined by Accelerator Physics group. Magnet voltage used as redundant sensor.

Commissioning:

1. With any input beam characteristics, quads limit peak current density at window and dump(tgt) below charge density threshold.

2. Upper and lower limits allow tunability from lowest LINAC energy to highest energy.

3. Beam size (density) verified by Wire Scanners and HARPS.


Power Supply Setting’s – Linac Dump (Data from Deepak)

Nominal 5e-3 limit A/m^2

Quad # Gradient Quad settingTransmission from window to dump

Max Current Density A/m^2

T/m out/inQuad 12 2.61431 5547/5610 9.93E-04

5% up 5547/5610 9.67E-045% down 5547/5610 9.34E-0410% up 5549/5610 9.72E-0410% down 5546/5610 9.02E-04

Quad 13/11 1.93365 5% up 5590/5610 9.67E-045% down 5547/5610 9.54E-0410% up 5546/5610 9.76E-0410%down 5547/5610 9.37E-04

Quad 14/15 3.03287 10% up 5546/5610 8.96E-0410% down 5547/5610 9.36E-0420%up 5546/5610 8.17E-0420% down 5548/5610 9.93E-04

Quad 16/17 3.10172 20% up 5545/5610 8.29E-0450% up 5541/5610 6.54E-0450% down 5549/5610 1.33E-04

Current Density at Linac dump


Power Supply Setting’s – Linac Dump Window (Data from Deepak)

Current density at windowNormal 5610/5610 8.40E-02Quad 16/17 3.10172 10% up 5610/5610 1.06E-01

10% down 5610/5610 6.01E-02Quad 14/15 3.03287 10% up 5610/5610 7.18E-02

10% down 5610/5610 9.58E-0220% up 5610/5610 5.97E-0220% down 5610/5610 9.14E-02

quad 12 2.61431 20% up 5610/5610 1.40E-0120% down 5610/5610 3.77E-02

Quqd 13/11 1.93265 20% up 5610/5610 7.26E-0220% down 5610/5610 7.40E-02

Problem in this case was percent of beam outside allowable area on dump)


Harp Commissioning

Target Harp can not operate 1 Yr. Pulse to Pulse

Target Harp is not retractable and is connected to window

Harp will probably survive a few months.

Operating Philosophy» Install set of redundant, retractable HARPS 180º upstream

» Commission retractable HARPs with Window HARP

» Set comparator limits on Optics

» Once a year, verify system HARPS


Beam Current Monitor

Beam Power on Target (Dump) measurement

Target has maximum charge on target spec

Current monitor used to normalize Harp and WS

Current monitor problems:» Droop (L_DMP, I_DMP)

– Use baseline correction for toroids

» False signals with beam spray– Use Beam Loss Monitors (2) to monitor loss on toroid core.

» Baseline monitors use software– Purchase Bergoz PDCCT or equivalent

Documents

MPS - Commissioning Plans