P02-02 - Alarm Engineering - V8.1 - S0915 - EN
P02-02 - Alarm Engineering - V8.1 - S0915 - EN
P02-02 - Alarm Engineering - V8.1 - S0915 - EN
PA Module P02-02
SIMATIC PCS 7 – Alarm Engineering
Unrestricted for Educational and R&D Facilities. © Siemens AG 2015. All Rights Reserved.
SCE Training Curriculum | PA Modul P02-02, Edition 09/2015 | Digital Factory, DF FA
Please note that these trainer packages may be replaced with subsequent packages.
An overview of the available SCE packages is provided at: siemens.com/sce/tp
Continuing education
For regional Siemens SCE continuing education, contact your regional SCE contact partner.
siemens.com/sce/contact
Note on Usage
The training curriculum for the integrated automation solution Totally Integrated Automation (TIA) was
prepared for the program "Siemens Automation Cooperates with Education (SCE)“ specifically for training
purposes at public educational and R&D facilities. Siemens AG is not liable for the contents.
This document may only be used for initial training on Siemens products/systems. This means it may be
copied entirely or partially and handed to trainees for use within the scope of their training. Passing on or
copying this document and communicating its contents is permitted within public training and continuing
education facilities for training purposes.
Exceptions require written permission by Siemens AG. Contact person: Roland Scheuerer
[email protected].
Violators are subject to damages. All rights including translation rights are reserved, particularly in the
event a patent is granted or a utility model or design is registered.
Usage for industrial customer courses is explicitly not permitted. We do not agree to the commercial
utilization of these documents.
We would like to thank the Technical University Dresden, particularly Prof. Dr. Leon Urbas and Annett
Krause, MS, as well as the Michael Dziallas Engineering Corporation and those who provided support in
preparing this SCE training document.
Unrestricted for Educational and R&D Facilities. © Siemens AG 2015. All Rights Reserved. 2
P02-02_Alarm Engineering_V8.1_S0915_EN.docx
SCE Training Curriculum | PA Modul P02-02, Edition 09/2015 | Digital Factory, DF FA
ALARM ENGINEERING
TRAINING OBJECTIVE
In this module, the students are familiarized with the fundamentals of an alarm system.
They understand the purpose and the areas of application of alarm and signaling systems,
and they know the requirements for such systems resulting from this. They are familiarized
with the possibilities of representation, and interactions with messages and alarms. This
enables the students to design a suitable and useable alarm management in PCS 7.
THEORY IN BRIEF
Alarm systems play an extremely important role in modern process control concepts for the
economic operation of process plants. Designed ergonomically, they inform the operating
personnel specifically if there are unintended deviations of the process state from a defined
normal state (refer also to the chapter Functional Safety). Alarm systems make it possible
for the operator to localize the cause of the malfunction directly, and to adjust the process
control strategy through suitable intervention in a way that, despite the fault, either
specification-conforming products continue to be manufactured, or the process is stabilized
in a way that the fault causes minimal production outage.
The control system PCS 7 includes a number of technical resources for implementing an
alarm system. The palette ranges from function blocks for generating messages, icons for
representing alarm states, group alarms along the plant hierarchy to components for
representing and managing messages in lists (refer to Figure 1).
By following a number of design rules for specifying message texts and assigning priorities,
a very efficient alarm system can be implemented that meets all the requirements of the
national and international standards and guidelines currently valid.
Unrestricted for Educational and R&D Facilities. © Siemens AG 2015. All Rights Reserved. 3
P02-02_Alarm Engineering_V8.1_S0915_EN.docx
SCE Training Curriculum | PA Modul P02-02, Edition 09/2015 | Digital Factory, DF FA
THEORY
ALARM SYSTEMS
Through the consistent use of modern process control engineering, process plants are
highly automated and optimized regarding safety. For this reason, the operator of such a
plant monitors a largely automated process that requires operations only if, because of a
fault of the process or of the plant, manual intervention is necessary. The objective of such
manual intervention is always to take the process back to the normal state (refer also to the
chapter ‘Functional Safety’) before the automatic protection equipment is activated.
Since in general, protection equipment takes the monitored technical facility to a safe state,
this usually causes a loss in product quality, production delays or even the standstill of the
entire production. This has a considerable negative effect on the economic efficiency of the
plant. For that reason, the possibility that an impermissible fault activates the protection
equipment has to be detected early so that it can be prevented through suitable manual
intervention. In addition, the operator has to be informed of protection equipment being
activated so that he can monitor the consequences.
The alarm system is the central interface between the operator and the monitored process,
and makes available all setups for managing messages and alarms in the control system
[2]. The alarm system makes it possible for the operator to detect deviations from specified
conditions within the range of the intended operation early, and to specifically counteract it.
Figure 2 shows the four phases of interaction between the operator and the alarm system
of the process control system.
Alarm system of
Generation DCS
Operator Process
action Representation
plant
Assessment
Operator
This means the alarm system has to provide the operator with the capability and the
opportunity to respond suitably to a signaled event. To attain this, the system has to meet a
number of requirements. Messages and alarms have to be represented clearly,
transparently and consistently.
The operator has to be supported in the situation-oriented evaluation of a message or an
alarm as well as in the selection of suitable intervention. To this end, a suitable action
prompt has to be provided, depending on the process state.
Unrestricted for Educational and R&D Facilities. © Siemens AG 2015. All Rights Reserved. 4
P02-02_Alarm Engineering_V8.1_S0915_EN.docx
SCE Training Curriculum | PA Modul P02-02, Edition 09/2015 | Digital Factory, DF FA
To prevent the operator from being overburdened, the number as well as the frequency of
messages and alarms has to be minimized. In addition, the operator’s workload should be
kept as low as possible when messages and alarms occur. Beyond this, the operator can
be supported in his work with suitable tools for documenting and evaluating messages and
alarms.
When designing an alarm system, the performance capability limits of the future operators
have to be taken into account. The totality of the tasks that an alarm system requires of an
operator to be performed must not exceed human performance limits either for short
periods of time nor continuously.
On the one hand, a sudden rise in the number of alarms or of the alarm rate can cause the
operator to be briefly overloaded (alarm shower). It has to be taken into account here that
on the average, an operator cannot process, as a maximum, more than 7 items of
information at the same time (7±2 rule).
On the other hand, a continuously high workload can cause the operator to be permanently
overloaded through a constant high number of arriving alarms. This leads to an increasing
drop of the operator’s performance and reliability.
An alarm system has to be designed that utilizes the characteristic features of human
perception and takes their limits into account. Important alarms have to be emphasized to
be noticed quickly. Events that occur rarely have to be presented in a special manner to
draw the attention of the user. Important information should be presented redundantly to
facilitate it being noticed. Moreover, several sense channels should be addressed for
transmitting information (for example, using acoustical warning signals).
Only if an alarm system meets these requirements can it actually support the operator in
his tasks: to monitor and control the plant.
Unrestricted for Educational and R&D Facilities. © Siemens AG 2015. All Rights Reserved. 5
P02-02_Alarm Engineering_V8.1_S0915_EN.docx
SCE Training Curriculum | PA Modul P02-02, Edition 09/2015 | Digital Factory, DF FA
– Instructional: The alarm provides suitable action instructions to solve the problem
that occurred
– Focusing: The alarm guides the attention to the most important problems
Alarms should always be used purpose-oriented. We should clarify what is monitored,
how it is done and when an alarm is triggered. Furthermore, we have to define how the
operator can react to the alarm. Based on these criteria, alarms can be subdivided into a
variety of alarm types (refer to [3]). The most important types are:
– Absolute alarm: The alarm is generated when a specified limit is exceeded or
dropped below.
– Time delayed alarm: The alarm is generated when the alarm criterion for a specified
time span is met.
– Process alarm: The control system itself generates an alarm that requires immediate
operator reaction.
To make appropriate alarm processing possible for the operator of a plant, alarms that
occur have to be suitably managed by the alarm system. Alarm management supports all
phases of interaction between the operator and the alarm system of the process control
system.
Unrestricted for Educational and R&D Facilities. © Siemens AG 2015. All Rights Reserved. 6
P02-02_Alarm Engineering_V8.1_S0915_EN.docx
SCE Training Curriculum | PA Modul P02-02, Edition 09/2015 | Digital Factory, DF FA
Generation
Messages and alarms are generated process-oriented in the devices of the control system
equipment of the plant. Generation may be linked to certain conditions (for example, timing
conditions, and hysteresis) and is carried out always with time-synchronous stamping.
When defining messages and alarms, the operator’s reaction time has to be taken into
account. After a message or an alarm occurred, the operator has to have sufficient time to
remove the indicated problem before the next alarm is triggered.
This can be easily illustrated using the overflow protection of a reactor as an example.
Corresponding to the inflow rate of the reactor, a defined time elapses between the
overflow indication and the corresponding overflow alarm. If the operator’s counter
measures don’t take effect in time, the indication is not useful to the operator since the
alarm and the automated protection function are triggered in any case.
Prioritization
Large process plants have a considerable number of alarm sources available that in turn
can trigger different types of alarms. To keep this diversity controllable for the operator, it is
advisable to structure the alarm system. A suitable method for this is alarm prioritization.
This refers to the unambiguous classification of all alarms of an alarm system according to
their importance and urgency [2]. If several alarms are accumulating, a processing
sequence can be suggested to the operator based on alarm priorities.
Priority
delay in
Shutdown Off spec
production
Priority
To this end -as shown in Figure 1- a prioritization matrix can be set up. It depends on
the requirements of the respective process plant and is usually used for the entire plant.
Corresponding to this matrix, each individual alarm is assigned a priority (static
prioritization).
Alternatively, alarms can also be prioritized depending on the current plant situation and
the combination of other queued alarms (dynamic prioritization). Usually, alarms are
marked by color regarding their priority.
Unrestricted for Educational and R&D Facilities. © Siemens AG 2015. All Rights Reserved. 7
P02-02_Alarm Engineering_V8.1_S0915_EN.docx
SCE Training Curriculum | PA Modul P02-02, Edition 09/2015 | Digital Factory, DF FA
Prioritization is designed in a way that the long term average alarm rate for each operator
station in normal operation is not more than one alarm every ten minutes [2]. For that
reason, useful priority distribution is the aim. For example:
– 5% Priority High
– 15 % Priority Medium
– 80 % Priority Low
The reduction of operator load resulting from this avoids overload consequences and
ensures necessary time spans for monitoring and controlling [2].
Representation
The representation of alarms is of essential importance to the usability of an alarm system.
The representations below have proven themselves in practice and have prevailed [2]:
– Area overview of alarms: Arrangement of the alarms in an overall view that cannot
be covered up (also called common status display). The alarms are arranged in a
way that they can be assigned directly to the corresponding plant units. Using
corresponding jump functions, the assigned process and plant displays are directly
accessible.
– Representing alarms using an alarm list: Arranging the queued alarms in list
form. The list can be sorted and filtered in many ways. Often, jump functions are
provided to the assigned process and plant displays in this representation also.
– Alarm representation in schematic flow diagrams : Alarms are signaled
through saturated colors (preferably red or yellow) of the corresponding symbols in the
process and plant display.
– Initial message system: If alarms accumulate, the system determines the primary
alarm and filters out the subsequent alarms resulting from it. For the operator, this
decreases the number of alarms he has to process.
Often, the graphic representations are supplemented by optical or acoustical signal
transmitters. They inform the operator in addition of an occurring alarm.
The operator has to acknowledge alarms and messages that occurred; i.e., he documents
that he took notice of the state change,
Evaluation
In order to evaluate an alarm or a message, the operator has to be able to interpret the
current process and plant state correctly. He is assisted in doing this by the types of
representation just discussed, by suitable message texts and alarm descriptions as well as
suitable tools for pre-processing larger alarm volumes.
Operator Intervention
After the operator has evaluated the state of the plant and the consequences, he has to
decide what to do appropriate to the situation, and implement it. This takes place within the
control system but outside the alarm system. For that reason it is extremely helpful to the
operator if he can jump from the alarm system directly to the corresponding screen where
the necessary action can be taken. Often, alarm systems provide corresponding jump
functions. In addition, decisions regarding operator action are supported with help texts that
are assigned to the different alarms.
Unrestricted for Educational and R&D Facilities. © Siemens AG 2015. All Rights Reserved. 8
P02-02_Alarm Engineering_V8.1_S0915_EN.docx
SCE Training Curriculum | PA Modul P02-02, Edition 09/2015 | Digital Factory, DF FA
LITERATURE
[1] VDI/VDE 3699 (Ed. 2014-01): Process control using display screens
[2] NAMUR NA 102 (Ed. 2008-10): Alarm Management.
[3] EEMUA 191 (Ed. 2013, Edition 3): Alarm Systems.
[4] SIEMENS (2015): Process Control System PCS7: Engineering System (V8.1).
A5E32712311-AC. (http://support.automation.siemens.com/WW/view/en/90663380)
Unrestricted for Educational and R&D Facilities. © Siemens AG 2015. All Rights Reserved. 9
P02-02_Alarm Engineering_V8.1_S0915_EN.docx
SCE Training Curriculum | PA Modul P02-02, Edition 09/2015 | Digital Factory, DF FA
TRAINING OBJECTIVE
In this chapter, the students
– Learn to integrate monitoring and alarm blocks in the CFC
– Become familiarized with the WinCC message system
– Learn representing alarms and warnings in the operator system (OS)
– Are familiarized with the WinCC Graphics Designer.
These instructions are based on‚PCS7_SCE_0201_Ueb_R1305_en.zip‘.
PROGRAMMING
1. To program level monitoring, we first open the existing CFC A1T2L001 for the level of
reactor A1T2R001.
Unrestricted for Educational and R&D Facilities. © Siemens AG 2015. All Rights Reserved. 10
P02-02_Alarm Engineering_V8.1_S0915_EN.docx
SCE Training Curriculum | PA Modul P02-02, Edition 09/2015 | Digital Factory, DF FA
2. From the folder ‘Monitor’ of the PCS 7 Advanced Process Library V81 in the
library catalog, enter the block MonAnS and interconnect it as shown. ( Libraries
PCS 7 AP Library V81 Blocks+Templates/Blocks Monitor MonAnS)
!
Note: The block MonAnS is used to monitor a measured value (analog signal) for the
limit pairs:
– Warning limit (high/low)
– Alarm limit (high/low)
Unrestricted for Educational and R&D Facilities. © Siemens AG 2015. All Rights Reserved. 11
P02-02_Alarm Engineering_V8.1_S0915_EN.docx
SCE Training Curriculum | PA Modul P02-02, Edition 09/2015 | Digital Factory, DF FA
3. In the block properties, the connections shown for setting the upper and lower
alarm/warning limits are made visible.
( PV_AH_Lim PV_WH_Lim PV_WL_Lim PV_AL_Lim Visible(Invisible))
4. At the connections that are now visible, the warning and alarm limits shown are set
and the value of connection PV_Unit is set to ‘1040‘. It specifies the unit that is
displayed on the screen of the OS or in the faceplate. An excerpt from Siemens
documentation for possible units is also shown below.
Unrestricted for Educational and R&D Facilities. © Siemens AG 2015. All Rights Reserved. 12
P02-02_Alarm Engineering_V8.1_S0915_EN.docx
SCE Training Curriculum | PA Modul P02-02, Edition 09/2015 | Digital Factory, DF FA
Number of
Block Catalog/Folder
connectors
Libraries/PCS 7 AP Library V81/
MonAnS
Blocks+Templates\Blocks/Monitor
Unrestricted for Educational and R&D Facilities. © Siemens AG 2015. All Rights Reserved. 13
P02-02_Alarm Engineering_V8.1_S0915_EN.docx
SCE Training Curriculum | PA Modul P02-02, Edition 09/2015 | Digital Factory, DF FA
5. To compile and download AS and OS at the same time, highlight the project in the
component view of the SIMATIC Manager. Then select for the PLC 'Compile and
Download‘.
6. Next–as shown here–select the objects for compiling and start the process as you
learned in the previous chapters. ( Start)
Unrestricted for Educational and R&D Facilities. © Siemens AG 2015. All Rights Reserved. 14
P02-02_Alarm Engineering_V8.1_S0915_EN.docx
SCE Training Curriculum | PA Modul P02-02, Edition 09/2015 | Digital Factory, DF FA
7. After the successful compilation, open the OS. ( OS(1) Open Object)
Unrestricted for Educational and R&D Facilities. © Siemens AG 2015. All Rights Reserved. 15
P02-02_Alarm Engineering_V8.1_S0915_EN.docx
SCE Training Curriculum | PA Modul P02-02, Edition 09/2015 | Digital Factory, DF FA
9. In this picture, the block symbol for the MonAnS block ‘A1T2L001’ was set up through
the compilation run. Position it to the right of the reactor and save the picture.
( A1T2L001 )
Unrestricted for Educational and R&D Facilities. © Siemens AG 2015. All Rights Reserved. 16
P02-02_Alarm Engineering_V8.1_S0915_EN.docx
SCE Training Curriculum | PA Modul P02-02, Edition 09/2015 | Digital Factory, DF FA
11. In this picture, drag an IO field from the smart object of the object palette to display the
level of reactor A1T2R001. Then, open its variable selection. ( Object palette
Unrestricted for Educational and R&D Facilities. © Siemens AG 2015. All Rights Reserved. 17
P02-02_Alarm Engineering_V8.1_S0915_EN.docx
SCE Training Curriculum | PA Modul P02-02, Edition 09/2015 | Digital Factory, DF FA
12. Within the variable selection, select as data source the ES variables. In the left window
you will then see the hierarchy of your project. Here you can easily locate your
MonAnS block. To display it in the IO field, select the connection ‘PV#Value’.
13. This variable is now displayed in the configuration dialog. After the following changes,
accept this configuration.
Unrestricted for Educational and R&D Facilities. © Siemens AG 2015. All Rights Reserved. 18
P02-02_Alarm Engineering_V8.1_S0915_EN.docx
SCE Training Curriculum | PA Modul P02-02, Edition 09/2015 | Digital Factory, DF FA
14. At Properties of the IO field, the output format is set for 4 digits before the comma
(period) without decimal places. ( Properties Output/Input Output Format
9999 OK)
15. The following attributes for the font are selected. ( Properties Font X-
Alignment: Centered Y-Alignment: centered)
Unrestricted for Educational and R&D Facilities. © Siemens AG 2015. All Rights Reserved. 19
P02-02_Alarm Engineering_V8.1_S0915_EN.docx
SCE Training Curriculum | PA Modul P02-02, Edition 09/2015 | Digital Factory, DF FA
16. To better interpret the value in runtime, enter a tooltip text. ( Properties
Miscellaneous Tooltip Text: Level of Reactor R001 Close)
17. Next, position the I/O field under Reactor A1T2R001 and add two static texts ‘Level‘
and ‘ml‘. ( Object Palette Static Text)
Unrestricted for Educational and R&D Facilities. © Siemens AG 2015. All Rights Reserved. 20
P02-02_Alarm Engineering_V8.1_S0915_EN.docx
SCE Training Curriculum | PA Modul P02-02, Edition 09/2015 | Digital Factory, DF FA
18. Below the educt tank A1T1B003, we want to display with a text list whether this tank is
empty. After we dragged the display from the object palette into the picture, open its
variable selection. ( Standard Palette Smart Objects TextList )
19. Within the variable selection, select this time as data source ‘STEP 7 Symbol Server’.
In the window to the left, the symbols of the S7 program are displayed. Select input.
I70.5 ‘A1.T1.A1T1L003.LSA-.SA-’. ( STEP 7 Symbol Server S7 Program(1)
Symbols I70.5 ‘A1.T1.A1T1L003.LSA-.SA-’ OK)
Unrestricted for Educational and R&D Facilities. © Siemens AG 2015. All Rights Reserved. 21
P02-02_Alarm Engineering_V8.1_S0915_EN.docx
SCE Training Curriculum | PA Modul P02-02, Edition 09/2015 | Digital Factory, DF FA
20. This variable is then displayed in the configuration dialog. After the following changes,
accept the configuration.
( Update: Upon Change Field Type: Output OK)
21. Next, we set the representation of the font in the properties of the text list.
( Properties Font X-Alignment: Centered Y-Alignment: Centered)
22. The texts are assigned to the values of the variable in the Properties also.
( Properties Output/Input Assignments)
Unrestricted for Educational and R&D Facilities. © Siemens AG 2015. All Rights Reserved. 22
P02-02_Alarm Engineering_V8.1_S0915_EN.docx
SCE Training Curriculum | PA Modul P02-02, Edition 09/2015 | Digital Factory, DF FA
23. To the value 0 we assign the indication ‘empty’ and to the value 1 the indication ‘OK’.
( Range type: Single Value Value range: 0 Text: empty Change Range
type: Single Value Value range: 1 Text: OK Append OK Close)
24. You will need exactly such a text list once more for a textual display below the product
tank A1T3B001. It indicates whether the tank is full. The text list we already generated
is now highlighted and duplicated. ( Duplicate)
Unrestricted for Educational and R&D Facilities. © Siemens AG 2015. All Rights Reserved. 23
P02-02_Alarm Engineering_V8.1_S0915_EN.docx
SCE Training Curriculum | PA Modul P02-02, Edition 09/2015 | Digital Factory, DF FA
25. For product tank A1T3B001, select input I70.6 ‘A1.T3.A1T3L001.LSA+.SA+’. ( STEP
7 Symbol Server S7 Program(1) Symbols I70.6 ‘A1.T3.A1T3L001.LSA+.SA+’
OK)
26. Now, the assignment is changed for the attributes: To the value 0 we assign the
indication ‘OK’ and to the value 1 the indication ‘Full’. ( Range type: Single Value
Value range: 0 Text: OK Change Range type: Single Value Value range: 1
Text: Full Change OK)
Unrestricted for Educational and R&D Facilities. © Siemens AG 2015. All Rights Reserved. 24
P02-02_Alarm Engineering_V8.1_S0915_EN.docx
SCE Training Curriculum | PA Modul P02-02, Edition 09/2015 | Digital Factory, DF FA
27. We now position the second text list below the product tank A1T3B001 and save the
picture. ( Save)
28. An illustration follows that shows how a warning is represented in runtime. In the
message line, the warning or alarm that occurred last but has not been acknowledged
appears. If the operator wants to switch directly to the picture where the alarm or
warning was triggered, he can do this in two ways:
– With the button Loop in Alarm in the message line
– By clicking on the fault indicator in the display hierarchy ( )
Unrestricted for Educational and R&D Facilities. © Siemens AG 2015. All Rights Reserved. 25
P02-02_Alarm Engineering_V8.1_S0915_EN.docx
SCE Training Curriculum | PA Modul P02-02, Edition 09/2015 | Digital Factory, DF FA
29. In the picture ‘T2_Reaction’, a display of the warning is provided in the block icon. By
clicking on the block icon, additional information is displayed in the faceplate for the
MonAnS block regarding the cause of the warning. Here, messages requiring
acknowledgement can be acknowledged or limits can be adapted.
30. By clicking on the button Alarm System in the message line, all queued messages
are displayed. ( )
Unrestricted for Educational and R&D Facilities. © Siemens AG 2015. All Rights Reserved. 26
P02-02_Alarm Engineering_V8.1_S0915_EN.docx
SCE Training Curriculum | PA Modul P02-02, Edition 09/2015 | Digital Factory, DF FA
EXERCISES
In the exercises we apply what we learned in the Theory section and in the Step by Step
Instructions. We are using and expanding on the existing multi-project from the step by
step instructions (PCS7_SCE_0202_R1504_en.zip).
In the step by step instructions, only the alarm for a level of only one reactor was
implemented. In the exercise, we are completing the alarm configuration of the level for
reactor R002 as well as implementing the alarms and warnings of temperature overrange
for both reactors. Finally, we are adding to the overview picture the missing displays.
TASKS
The tasks below are based on the step by step instructions. For each task, the
corresponding steps of the instructions can be used as an aid.
1. Implement alarm generation also for the level of the second reactor. To this end, insert
the block MonAnS in the CFC A1T2L002, assign a name and parameters to it. After
compilation, position the block in the operator screen ‘T2_Reaction.pdl‘.
2. Next, in the overview display ‘A1_multipurpose_plant.pdl’ insert an I/O field for the
level of reactor A1T2R002 and visualize the current reactor level.
3. Design alarms for the temperatures of the two reactors analogous to the levels. The
temperature warning is to be triggered at 55°C and the alarm at 60°C. No additional
monitor blocks are needed to design the temperature warnings and alarms since the
PidConL blocks include this functionality. The connections for the warning limits and
the alarm limits have the same name there as for the MonAnS blocks.
4. Now, set up I/O fields for the temperature below the level in the overflow display.
5. Finally, add the missing text lists for all elements.
Unrestricted for Educational and R&D Facilities. © Siemens AG 2015. All Rights Reserved. 27
P02-02_Alarm Engineering_V8.1_S0915_EN.docx