Safety: A Tale of 2 Applications

Two applications show how control system safety can be implemented using new machine technologies for less overall cost.

By Hank Hogan for February 4, 2008

When done correctly, safety systems can be fun– or at least can make sure what’s amusing doesn’t turn tragic. A look at two case histories shows how integrating safety and control systems can cut costs while improving safety and reliability. The two examples are literally and figuratively from opposite ends of the earth. However,they do have something in common: the need for safe, yet cost-effective automated operations.

Case 1: Fun, games, NFPA 160 While safety is a serious business, it also is important in the lighter side of things. A case in point is a recent, well received ride unveiled in a large amusement park in Tennessee. Safety programmable logic controllers (PLCs) and the associated human machine interface (HMI) from


help ensure that people experience a thrill with minimal risk.

Safety precautions for this flaming roller coaster are many; read about the application and an applicable safety standard you may not have considered.

Achieving that was a challenge and required careful design, says Bob Hartline, vice president of systems engineering for

Entech Creative Industries

. The Orlando, FL-based company creates and builds brand destinations for the retail, theme park, entertainment and museum industries.In the case of the new ride, on the surface it seemed simple. “It’s a roller coaster,” says Hartline.But, as is often the case in the amusement industry, every new ride has to top the old ones and offer something different. In this case, the ride designers came up with a hot idea. After climbing, the roller coaster cars briefly stop and then there’s a flame burst that seems dangerous but actually isn’t. The cars travel on, and the flame burst repeats for the next set of riders, as little as 30 seconds later.During peak season, the ride runs for up to 12 hours, with as many as eight people in each load. Hartline notes that the small group of spectators subjects the ride to

NFPA 160

, the standard that governs flame effects in front of an audience.Pulling off the special effects safely involves doing the same thing every time. That consistency extends to the flame burst, which is produced by three burners. Each has to be extremely reliable. “It has to do the exact same thing every time. It can never burn a flame longer or hotter than it did before,” says Hartline. Flames, before and after To ensure consistency, safety related monitoring and control begins long before the flames come on. In fact, the process starts when the natural gas that powers the burners enters the building. Sensors monitor the gas pressure, guarding against low or high pressure. Other sensors check for the same conditions when the gas enters the room where the burners sit.Burners are checked to ensure they’re not in a faulted state so are ready for the show. Pilot lights for each burner are verified to be on and successful ignition is also verified when the main burner lights.Aside from ensuring the right amount of hydrocarbons ignites, the safety control system also oversees ventilation. A large exhaust fan quickly pulls the flame byproducts out of the room so subsequent spectators won’t have a problem. Hartline notes that the system checks for safe operation in multiple ways. “We monitor the drive that runs the fan, and we also have an air flow sensor that tells us if air is being pushed out the duct.”For additional safety, sensors also monitor oxygen levels. This measurement guards against depletion due to flame byproducts or an accumulation of unburned gas. It also ensures that the other systems are operating and not producing false readings.Since the ride is mechanical, it requires periodic maintenance. Doors that lead to the burners are interlocked so no one can access the system while the burners are active. There are also manual e-stops (emergency stop buttons) at various locations, says Hartline. Bringing up the system every morning requires checking the burners; technicians must engage buttons at various locations as the checklist is completed.There are about 100 I/O points in the system, which Hartline characterizes as fairly busy. In designing such a system, he had to account for possible mechanical failures as well as ill-advised actions from riders, operators, and maintenance personnel.Use of safety PLC technology helps. In the past, Hartline would have had to build a system with redundant PLCs, with each checking on the status of the others. Such an approach would have been more complex than a single box solution; and proving the safety of the entire system would have been his requirement.That’s no longer the case, with third-party certification of the safety PLC, which has built in redundancy. All of this makes Hartline’s job easier, since he only has to prove “one piece of software that I wrote and my design.” A Google search gives more information about a flaming roller coaster .

Case 2: Construct a can safely On the other side of the world, safety control systems help play a key role in increasing productivity of a can production plant while increasing worker safety. A global packaging company based in Abbotsford, Australia,

Amcor Ltd

. makes aluminum cans in a facility in the Sydney suburb of Revesby in New South Wales, Australia.The Amcor Beverage Cans site is equipped to produce nearly 2.5 million cans a day in a draw and wall iron process. This involves forming a shallow cup, stretching the cup’s walls to form an open-ended can, and then getting it ready to put on a lid or closure. The process involves a can-shaped ram bodymaker, a trimming machine, and other moving equipment.In the past, each of the plant’s 11 bodymaker and trimming machine pairs had its own PLC interlocked with a separate hard-wired safety control system. A second PLC at each pair handled related high-speed control applications.Company management wanted to upgrade the system for safety reasons. According to Amcor beverage cans engineering manager, Chris Hilton, an upgrade offered an opportunity to improve upon the control function. “Our legacy control system had served us well over the years, but we needed a more user-friendly system with advanced diagnostic and troubleshooting capabilities,” he says.A complicating factor was that any upgrade had to minimize impact to existing production. With this production schedule requirements and resource constraints, neither the design nor installation process could be a prolonged one.Working with local system integrator IGR Consulting, Amcor is in the process of replacing its old system with GuardLogix controllers from Rockwell Automation . The speed of the new platform eliminates need for a second PLC.In addition, in the old system access to the 11 bodymakers and trimmers was secured by three hard-wired pneumatic guarding systems, each with a series of relays and pneumatic switches. On occasion, the switches would fail in the open position, creating a false alarm and shutting down the system. For either false or real alarms, a technician had to inspect each machine-guard in the group to locate the breach. New system: faster, easier troubleshooting In the new system, this function is handled by safety switches and devices wired back to local I/O module, which is connected to the controllers via a


Safety communications network. This approach allows an immediate pinpointing of a tripped switch. “Troubleshooting false alarms and product jams is much easier,” says Hilton. “Our response time is quicker and downtime is minimized.”Because the control solution is integrated, there’s no need to duplicate safety and standard inputs. Thus, there’s less wiring and fewer I/O connections. Other savings arise from use of local machine-mounted I/O modules and one communications network. These help minimize wiring and streamline installation.Hilton says the new approach has programming advantages, since standard and safety control system code could be developed concurrently. “That was a real time saver.”Plans call for this site-wide safety and control upgrade to be complete by mid-2008. Currently, the project is on schedule.

For more information, visit:

More about machine safety Related Control Engineering articles include:

Safe, Quick Jam Clearing: Interlocked barrier guards

provide an alternative to lengthy lockout/tagout procedures for woodcutting machinery.

Preparing for Networked Safety: Machine safety networks

… You’ve heard plenty of talk. Now, what do you do about them?

Blurring the Lines Between Automation and Safety: Real-world applications

show that integration of automation and safety systems can deliver cost savings, greater productivity, and even increased safety. Links to prior safety articles provided.