Oil & Gas Safety API 2350

7/25/2019 Oil & Gas Safety API 2350

1/41

10/01/2013

Products Solutions Services

API 2350 4th

edition- how to apply on your site?

Overfill protection for storage tanks in petroleum facilities

Aboveground storage tanks

Only a safe plant is

economical

Slide 1 Ngo Consult AG Sales Support


2/41

10/01/2013

API2350 - how to apply on your site?

Overfilling occurs every 3300 filling operations

Ngo Consult AG Sales SupportSlide 2

According to Marsh Ltd. (2011) in the USA overfilling of atmospheric

storage tanks occurs once in every 3300 filling operations.


3/41

10/01/2013


API 2350 3rd edition (2005) independence required !!!

overfill protection for storage tanks in petroleum facilities

C.1.2 []overflow protection systems shall be independentof any tank gauging device or system. []

A.5.3 [] independent level switches must be installed for

single and two-stage level detector systems. [...]

[ ] Tanks equipped with a high-level detection device thatis independent of any tank gauging equipment. []



4/41

10/01/2013


API 2350 4th

edition (2012) Categories

ATG

Display

ATG

Alarm

Control center

LAHH

Alarm

ATG Receipt

Category 1

Category 2

Category 3

Receipt



5/41

10/01/2013

Receipt


API 2350 4th


ATG

Display

ATG

Alarm

Control center

LAHH

Alarm

ATG Receipt

Category 1

Category 2

Category 3


Fully attended

(min. 1h at the start + min. 1h after theend + periodically visual check on site)

Be aware: no manual hand dipping duringproduct receipt and until at least 30 min

after a product receipt!


6/41

10/01/2013


API 2350 4th


ATG

Display

ATG

Alarm

Control center

LAHH

Alarm

ATG Receipt

Category 1

Category 2

Category 3

Receipt


Semi-attended(min. 30 min at the start + min. 30 min after the end)


7/41

10/01/2013

Receipt


API 2350 4th


ATG

Display

ATG

Alarm

Control center

LAHH

Alarm

ATG Receipt

Category 1

Category 2

Category 3

Unattended (ATG and independent level alarm high-highsensor)



8/41

10/01/2013


Typically Category 1 tank only 1 transfer at one time


Category 1 Category 2 Category 3

Typically 1transfer at onetime

Multiple tankscan be filledsimultaneously

Multiple tankscan be filledsimultaneously


9/41

10/01/2013


API 2350 4

th


ATG

Display

ATG

Alarm

Control center

LAHH

Alarm

ATG Receipt

Category 1

Category 2

Category 3

Receipt



10/41

10/01/2013


Definition of AOPS and MOPS

AOPS: An overfill prevention system not requiring the intervention of

operating personnel to function

MOPS: Manual overfill prevention system that depends on the

interaction of operating personnel to terminate the receipt. A person

physically turning a valve or pushing a button that remotely closes a

valve or turns off a pump are both manual operations. In MOPS, the

alerts and alarms provide the operating personnel with information

only.

AOPS can be added to all three categories



11/41

10/01/2013


If necessary, add AOPS on all categories

ATG

Display

ATGAlarm

Control center

LAHHAlarm

ATG Receipt

Category 1

Category 2

Category 3

AOPS

Receipt


Logic Solver

Logic Solver

AOPS

Logic Solver

AOPS


12/41

10/01/2013


Overfill prevention is best achieved by use of AOPS

Section 4.1.1. of API2350

Prevention of tank overfills is best achieved by: A) Awareness of available tank capacity and inventory;

B) Careful monitoring and control of product movement;

C) Use of reliable instrumentation, sensors and systems; and

D) use of automatic overfill prevention systems (AOPS)where deemed

appropriate by a risk assessment and risk-based analysis.



13/41

10/01/2013

API 2350 (2012) independence of AOPS from the ATG

AOPS: to use automated overfill prevention system (instrument,

sensor, logic solvers and final element) you should follow Annex A

(existing site). Annex A is clearly requesting independence from the ATG.

Annex A states, that sensors with self testing diagnostic features

are preferred.




14/41

10/01/2013

API 2350 4th edition (2012): Annex A, which is normative

Annex A provides good practices for implementation of an automated

overfill prevention system (AOPS) for existing tank systems.

Annex A.3 Independence

The term independent means that theAOPS shall be separate from

any device or method used to measure, calculate or monitor tank

receipts.

The independent AOPS shall be designed and installed such that no

fault in the ATG gauging and monitoring system is capable of causing a

fault in the AOPS.

Annex A.4.2 Sensors

Sensors with self testing diagnostic features are preferred for all AOPS

tank level detection applications




15/41

10/01/2013


Competition: 2 in 1 feature?

Competitor claims to have two redundant electronic boards in one

radar/device, but they are still using the same/one antenna.

This is not allowed by API2350 for an AOPS

What happens, if moisture/water is in the electronic compartment

or having water built-up in the antenna?

What happens, if the radar beam is not reflected (e.g. liquid is

boiling, obstacles in the radar beam)?

What happens, if cables breaks?



16/41

10/01/2013


2 in 1 feature? Homogenous vs. diverse redundancy

Would you allow yourchild to do bungeejumping with redundant

ropes?

I prefer diverse redundancy(rope and net)I prefer diverse redundancy(rope and net) not API2350 request



17/41

10/01/2013


High-High tank response time

The high-high tank response time is the period of time required to

terminate the receipt of flow to a tank in response to reaching the

high-high tank level in order not to reach the critical high level.

Minimum High-High Tank (HH) Level Response Time(if not calculated)

Category Time in Minutes

1 45

2 30

3 15



18/41

10/01/2013


Different maximum working levels due to different

minimum level response time (if not calculated)

CH CH CH

HH

MW


Best tank capacity utilization

with AOPS



19/41

10/01/2013


Best capacity utilization with AOPS system.

CH CH CH

AOPS=HH

MW




20/41


21/41

10/01/2013

Simply reliable: Process safety from Endress+ Hauser

Layers of protection

Plant emergency response Emergency responselayer

Embankment Passive protection layer

Relief valve, rupture disk, F+Gsystem

Active protection layer

Safety instrumented system Emergency

Shutdown

Isolated protection layer

Trip level alarm

Alarm & operator intervention Wildprocess

Process control layer

Basic process control system or

DCS

Normal

process

Process control layer

Plant and process design Inherent safe plant

design

Mitiga

tion

Prevention

Slide 21 Ngo


22/41

10/01/2013


Overfill prevention process (OPP) in API2350 4th Edition

Overfill prevention process (OPP) consists of A) management system

B) risk assessment system

C) defining operational parameters

D) requirements for procedures

E) equipment systems



23/41

10/01/2013

Simulated Proof testing according API 2350

Proof testing of point-level sensor systems shall be conducted semi-

annually unless otherwise supported by technical justification (e.g.

PFDavg)

Proof testing ofAOPS components shall be conducted annually unless

otherwise supported by technical justification (e.g. PFDavg)

The testing should simulate an actual high liquid level situation as

realistically and as closely as possible; however, the test need not

require filling the tank above its maximum working level.




24/41

10/01/2013

Swivel plates for functional proof testing


External Swivel

plate for functionalproof testing

Swivel plate integrated in the

Endress+Hauser device forfunctional proof testing



25/41

10/01/2013

Free space radar SIL2 with reflector plate

Slide 25 Alain ENGELS

Floating Roof

oil

FMR51 (SIL2) DN100FMR51


26/41

10/01/2013

Total Olefins Antwerpen

2 different reflector types for different tanks heights

Alain ENGELSSlide 26

13m

20m

1000 mm version

700 mm version


27/41

10/01/2013


Proof testing without dismounting the device

Not necessary to interrupt or manipulate the production process for

partial proof test.

Recommendedproof testinterval

12 years 3 years 2 years

Slide 27 Ngo


28/41

10/01/2013


Wireless communication is not allowed


Annex A.3 Correct operation of the AOPS shall not require communications to or

from any location remote from the facility where the AOPS has been

installed. AOPS shall not rely on wireless communication to initiatediversion or termination of receipt.


29/41

10/01/2013


Key points of API 2350 4th Edition 2012:

Above ground storage tanks

Introduction of Tank Category 1, 2, 3

Differences between AOPS and MOPS

Independence of AOPS

AOPS for new sites follow ANSI/ISA 84.00.01-2004 (IEC 61511 modified)

Overfill Prevention Process

Proof testing

A HHLA sensor on a floating roof tank have to detect the oil, even if it

is above floating roof.

No wireless communication for AOPS



30/41

10/01/2013

Where can you get the complete standard API2350?

The standard itself is available for about 120 USD from the website of

API (www.api.org)




31/41

10/01/2013

Fixed roof solutions


Proof testing

Push button

activated test

generator High proof test

coverage

By proof test

simulation

Proof testcoverage

depends on

inspection depth

MountingFunctional Safety

TuningFork

Radar

Side Top

Topadjustable

Top

IEC 61508 design Proven in use

Suitable for SIL 2 / 3 Discrete output (relays)or 4..20 mA output

Proven in use Suitable for SIL 2/3 Internal redundancy (EOP)

Analogue output (4-20 mA) Switching in safetysystem or RMA422



32/41

10/01/2013

(External) floating roof failure scenarios


Damaged deck

May lead to lost and

deflected echo

depending on deck

position

Fails Safe

No Failure

Lost deck

May lead to someswitch pointdeviation (up to100 mm)

No failure

No failure

Snow cover

May lead to lost echo

Fails Safe

No Failure

FreespaceRadar

Tuning

Fork



33/41

10/01/2013


Buncefield report

Buncefield Report:http://www.buncefieldinvestigation.gov.uk

Slide 37 Ngo


34/41

10/01/2013

Improve safety with state of art technology - Liquiphant


Explosion and fire at Buncefield OilStorage Depot - Five companies toface prosecution

http://www.buncefieldinvestigation.gov.uk/press/b08002.htm

Failed !!!

Slide 38 Ngo


35/41

10/01/2013


Separation of process monitoring and safety function

Buncefield report, Volume 2, Annex 4, Recommendation 3, page 11

Slide 39 Ngo


36/41

10/01/2013

Level measurement in Oil & Gas

Tuning Fork with diagnostics

Slide 40 Ngo

L l O l & G


37/41

10/01/2013


Furthermore, Safety Integrity Level

Slide 41 Ngo

L l t i Oil & G


38/41

10/01/2013


Vibronic level switches: 300.000 pieces/year

Measuring Principle

Liquiphant in practice

Liquiphipant in safety

Oil detection in pipes/sump pits Leakage detection presentation

Click the blue box

Slide 42 Ngo



39/41

10/01/2013

Operation Independent of Medium Properties


changingmedia

foam

air bubbles

built-up

pressure andtemperature change

plantvibration

viscosity change

turbulences

suspension

electrical properties

Slide 43 Ngo

Safety in the process industry


40/41

10/01/2013

New: Liquiphant Fail Safe FTL 8x

Safety in the process industry

Liquiphant FailSafe FTL80/81/85

Nivotester FTL825

4..20mA +LIVE-Signal

SIL3 MIN/MAX

4..20mA +LIVE-SignalOptional

Liquiphant FailSafeFTL80/81/85

PLC

Safety function

420 mA output with life signal (every 3

seconds self checking procedure) SIL 3 capable in single device

min/max safety function

proof test simulation with push-button proof test interval can be extended up to

12 years !

Slide 44 Jana Kurzawa / Hai-Thuy Ngo

Risk

reduction:~48.000



41/41

10/01/2013

Thats it relax now it was not that difficult :-D

API2350 how to apply on your site?


Documents

Oil & Gas Safety API 2350