Construction of the New Safety Interlock
System for SPring-8 Accelerator
C. Saji, H. Hanaki, S. Hashimoto, Y. Hashimoto, M. Kago,K. Kawata,T. Masuda, T. Matsushita, S. Miyamoto, T. Nagaoka, N. Nariyama,
H. Ohkuma, K. Soutome, S. Suzuki, M. Takao, R. Tanaka, M. Toko,
Y. Tsuzuki, A. Yamashita, H. Yonehara
Japan Synchrotron Radiation Research Institute(JASRI/SPring-8)

15th Apr., 2010, O-45
The 7th international Workshop on Accelerator Operations

Contents• Motivation• Introduction• Accelerator• Accelerator Safety Interlock System• Requirement• New conceptual design• Construction• Summary

O-45: Construction of the New Safety Interlock System for SPring-8 Accelerator

2Motivation• Current safety interlock system for SPring-8 accelerator
has complicated safety logic and equipment components.
•Problems:• Take many cost (person, time) for safety inspection• Very difficult to expand the system
for additional accelerator
etc..
• Construction of new safety system is difficult• Tight schedule for short shutdown time
• Should continue accelerator operation
between each construction
etc..
But…
• We will change conceptual design of safety system .

O-45: Construction of the New Safety Interlock System for SPring-8 Accelerator3

- Accelerator components
Linac(Li)
Synchrotron Booster(Sy)Storage Ring(SR)NewSUBARU storage ring(NS)- Non-accelerator area:
L3 beam-transport (L3)

SPring-8:

Introduction

Electron beam
8-GeV Storage RingSyNSSR
L3
Li© RIKEN/JASRI
O-45: Construction of the New Safety Interlock System for SPring-8 Accelerator

4

- New Accelerator, XFEL/SPring-8:

Introduction

XFEL• Under construction• 8-GeV LINAC•will start operation on 2011

© RIKEN/JASRI
O-45: Construction of the New Safety Interlock System for SPring-8 Accelerator

5Introduction- New Accelerator, XFEL/SPring-8:

XFEL

XSBTSR
Plan: SPring-8 – XFEL
combined operation© RIKEN/JASRI
O-45: Construction of the New Safety Interlock System for SPring-8 Accelerator

6Accelerator Components- Five access controlled areas:
Linac(Li)
Synchrotron Booster(Sy)Storage Ring(SR)L3 beam-transport (L3)
NewSUBARU storage ring(NS)NSAccelerator/non-accelerator
NS-RFarea

Li- Division of area:
Beam shutters

L3Gun/RF

GUN

Li-RF
Sy-RFSy

Beam shutter- Beam generation/acceleration:- One electron gun (GUN)- Four acceleration RFs.

SRSR-RF

SPring-8 Accelerator Components
O-45: Construction of the New Safety Interlock System for SPring-8 Accelerator

7Various Accelerator Operations (1)- Beam transportation route: Bending Magnets(BM)Accelerator/non-accelerator NS
area
Bending Magnet
off
L3on
Li

Sy

SR injection operation

Possible to enter NS machine tunnel

SR
SPring-8 Accelerator Components

O-45: Construction of the New Safety Interlock System for SPring-8 Accelerator

8

Various Accelerator Operations (2)Accelerator/non-accelerator NS
area
Bending Magnet
off

NS injection operation

L3on

LiSy

Possible to enter SR machine tunnel

SR
SPring-8 Accelerator Components

O-45: Construction of the New Safety Interlock System for SPring-8 Accelerator

9Various Accelerator Operations (3)Accelerator/non-accelerator NSarea
Bending Magnet

SR/NS injection
switching operation

off

L3

on

Destination is switchedby changing
one Bending Magnet status

Li

Sy

This BM is ON
 Transport to SR
SR
SPring-8 Accelerator Components
O-45: Construction of the New Safety Interlock System for SPring-8 Accelerator

10Various Accelerator Operations (3)Accelerator/non-accelerator NSarea
Bending Magnet

SR/NS injection
switching operation

offL3

on

Feature of Operation:

LiSwitch a destination frequently:
Automatically switching every 20sec.

Top-up operation:
continual injection

SyThis BM is OFF
 Transport to NSSR

Complex operation is possible

SPring-8 Accelerator Components

O-45: Construction of the New Safety Interlock System for SPring-8 Accelerator

11

Accelerator Safety Interlock System
Safety Interlock System (= Personnel Safety System)
Purpose:Protect persons from radiation hazard
induced by electron beams and synchrotron radiation
Basic Function:• Monitoring safety equipment:
radiation monitor etc..
• Access control:
manage permission for enteringradiation-controlled areas• Control electron beam :manage permission of GUN and RF
as safety conditions
System:• Programmable Logic Controller (PLC)based system
Accelerator safety interlock system• Consist of several PLC systems
Main racks
O-45: Construction of the New Safety Interlock System for SPring-8 Accelerator

12Current Accelerator Safety Interlock System (1)Accelerator Area
Interlock system:

Acc. area interlock system
NSFive acc. areas
managed by
NS-RF
Four area interlock systems

L3Interlock
SystemL3
GUN

Li

Li-RFNSInterlock
System NS-RFLi-Sy GUN
Interlock Li-RFSystem

Sy-RFSy-RFSySRSR-RF

SPring-8 Accelerator Components

SRInterlockSystem SR-RF
Permissions

O-45: Construction of the New Safety Interlock System for SPring-8 Accelerator

13Current Accelerator Safety Interlock System (2)Operation ModeInterlock System:

Status of safety equipment(HW)managecombination of areas

ModeInterlock
System

Li-SyInterlock
SystemGUN

NSInterlock
SystemNS-RF

Li-RFSy-RF• Area system
information integrated toPermissions
MODE interlock system• MODE judges safety of area
combination and give
permissions.
Operation Modemanagement
systemSRInterlock
SystemL3Interlock
SystemSR-RF
Current Accelerator Safety Interlock System

Complicated safety LogicLower independency of acc. areas Hard to maintain, modify andtroubleshootO-45: Construction of the New Safety Interlock System for SPring-8 Accelerator

14

Current Accelerator Safety Interlock System (3)The number of Operation mode (MODE)
At the beginning (1997~),
Accelerator components wereLi, Sy and SR.
• The number of MODE has increased asaccelerator upgrade• L3 beam-transport added• NS storage-ring added• Topup operation started• Destination switching operation started
The number of MODEs drasticallyincreased• Complicated operation• Very difficult to upgrade system(for additional accelerator)
Safety interlock has MODEs explicitly

List of operation mode (part)• READY Mode
• L2 Mode• Sy-injection Mode
• SR-injection Mode
• SR-storage Mode
• L3 Mode• Topup Mode
• NS-injection Mode
• NS-storage Mode
• Sy・NS-injection Mode
• SR・NS-injection Mode
• Topup・NS-injection Mode
• L2 + Sy-storage Mode
• L2 + Sy-storage + SR-storage Mode
• L2 + Sy-storage + NS-storage Mode
• L2 + Sy-storage + SR-storage + NS-storage Mode
• Sy-injection + SR-storage + NS-storage Mode
• Topup + NS-storage Mode
• NS-injection + Sy-storage + SR-storage Mode
• SR-storage + NS-storage Mode
• L3 + Sy-storage Mode
• L3 + Sy-storage + SR-storage Mode
:Around:
60 modes:O-45: Construction of the New Safety Interlock System for SPring-8 Accelerator

15

Requirements for new system• Easy maintenance
Many MODEs  internal safety inspection(twice in a year)~20 person x 5 days x 2 times• Easy modification
Local modification can affects all of system.
• Simple/easy operation
Many MODEs and complicated safety logic
can cause operation mistake• High extendibility
NSSP8L3LiSyPlan: SPring-8 and XFEL
Combined operationXFELSR~60 MODEs  ~120 MODEs?? for additional accelerator.

Need new conceptual design
O-45: Construction of the New Safety Interlock System for SPring-8 Accelerator

16

New conceptual design
A change of safety Interlock conceptual design
affects to various division.
need cooperation of several division

New task force formed:• Experts in each division was gathered,
Accelerator Interlock system
Accelerator operation
Safety officeand discussed various issue (2005 ~)New Conceptual design

Area management system
O-45: Construction of the New Safety Interlock System for SPring-8 Accelerator

17

New accelerator safety interlock system
Area management system:• ~60 MODEs  0 MODE
• Safety inspection:
expected 5days  3days

GUN

Status of safety equipment
Permissions

LiGUNInterlock
SystemInterlock
SystemSyInterlock
SystemSRInterlock
System

Li-RF

Sy-RF

SR-RF

L3Interlock
SystemNSInterlock
SystemNS-RF• Acc. area managed by Independent system.
 Li-Sy system divided to three system (GUN, Li, Sy)• Permissions (GUN/RF) managed by independent system.
• Acc. area system only communicates with GUN system.
• Communication signal will be one way direction
from acc. system to GUN system.
O-45: Construction of the New Safety Interlock System for SPring-8 Accelerator

18

New accelerator safety interlock system
Area management system:GUN

Status of safety equipment
Permissions

LiGUNInterlock
SystemInterlock
SystemSyInterlock
SystemSRInterlock
System

Li-RF

Sy-RF

SR-RF

L3Interlock
SystemNSInterlock
SystemNS-RF

AdditionalACC.
(XFEL)
RF• easy to expand for an additional accelerator
O-45: Construction of the New Safety Interlock System for SPring-8 Accelerator

19

Construction (1)What should we do:Construction•Make/settle additional safety equipment•Make new safety logic and their software for PLCs
(for 6 systems)•Status monitoring/display system•Wiring/Re-wiring (Signal/Power/Network)•Rack replacement

For starting accelerator operation•Internal safety inspection.
•Official safety inspection (with external inspectors)
 should be passed- Many things to do(SPring-8 has large and many facilities)
O-45: Construction of the New Safety Interlock System for SPring-8 Accelerator

20

Construction (2)(e.g. 2008FY)

Typical Schedule of Accelerator Operation

2008

2009

Winter shutdown

Summershutdown

Operation
Shutdown
Possible to construct- Short shutdown period- a few chance (twice in a year) Construction is difficult
for tight schedule
O-45: Construction of the New Safety Interlock System for SPring-8 Accelerator

21Construction schedule in the past and future
2007：
Summer
WinterCurrent
safetylogicrunning

We are here

•New equipment developed•New rack developed

2008：
Summer
Winter•Wiring/Re-wiring performed

2009：
Summer
Winter•Two racks replaced

Many modification alreadydone in this 3 years.
Continue acc. operation.
Keep current safety logic•Status monitoring/display systemdeveloped/setup• New equipment developed•Wiring/Re-wiring performed•New equipment
developed/setup•Additional rack developed

New safety logic
software developed

O-45: Construction of the New Safety Interlock System for SPring-8 Accelerator

22

Construction schedule in the past and future
2007：
Summer
WinterCurrentsafetylogicrunning

2008：
Summer
Winter•Wiring/Re-wiring performed

2009：
Summer
Winter•Two racks replaced

2010：
Summer• Replace Main two rack and final wiring• Remove MODE system• Install new safety logic, safety inspections

We are hereNewsafetylogic•New equipment developed•New rack developed

Many modification alreadydone in this 3 years.
Keep current safety logic
Continue acc. operation.

•Status monitoring/display systemdeveloped/setup• New equipment developed•Wiring/Re-wiring performed•New equipment
developed/setup•Additional rack developed

New safety logic
software developed

O-45: Construction of the New Safety Interlock System for SPring-8 Accelerator

23

New Control Panel

Items already prepared

Status display

New equipment

Old

New

Rack replacement

O-45: Construction of the New Safety Interlock System for SPring-8 Accelerator

24

Rack replacement (1) – Motivation Motivation:
Li-Sy
GUN Interlock
Li-RF Systemseparation

Sy-RF

LiGUNInterlock
SystemInterlock
SystemGUN

Li-RFSyInterlock
SystemSy-RFCurrent system:

New system:

PLC system:• Li-Sy (one system)
Signal Cable/terminal-block:• Mixture of Li, Sy, GUN

PLC system:• GUN, Li, Sy (3 system)
Signal Cable/terminal-block:• Independent of Li, Sy, GUN
What to do:• More rack space• Replace and rewiring• Cables• Terminal blocks

O-45: Construction of the New Safety Interlock System for SPring-8 Accelerator

25

Rack replacement (2) – ProcedureNew safety logic

Current safety logic
DIO module~2009~2009 Summer

We are here

PLCGUN

Li-Sy

Terminalblock~2010 Summer

LiRemovedSy

Li-Sy
Old rack
External cable

InstalledNew rack

• New rack
prepared• Additional
2 PLC space• Reassign
PLC module

External cablerewired

Li-Sy
Mixture of GUN, Li, SyGUNLiSy• 2 PLCs added• Only modules reassigned• Quickly modification• New safety logic• 3 step procedure has done
• This procedure has been
applied to many
modification.

O-45: Construction of the New Safety Interlock System for SPring-8 Accelerator

26

Simulator

Motivation:

Efficient and precise confirmation ofsafety logic programs in a local environment
System: PLCs and PC
Programmatically control PLC signal (put/get)We are testing new safety logic.
PLC
(1)

PLC
(2)

PLC
(3)

VirtualVirtualVirtualInterface(1)

Interface(2)

Interface(3)putcommands:--------

PLC(x)

VirtualInterface(x)

get status:- door: close- emergency button: push

- door status: close/open- permission: normal/alert

Bridged signal(PLC-PLC)

Simulator (PC)O-45: Construction of the New Safety Interlock System for SPring-8 Accelerator

27

Summary• Current accelerator safety interlock system is complicated.
• Difficult to upgrade interlock system for additional
accelerator area.
• New conceptual design was settled on.
 based on Area management system• A part of construction was already finalized with keeping
current safety logic.

• New system will be ready in this end of September andoperation will be started.
 also ready for expand of an additional accelerator area.

O-45: Construction of the New Safety Interlock System for SPring-8 Accelerator

28

Supplement

O-45: Construction of the New Safety Interlock System for SPring-8 Accelerator

29

- Accelerator components for SPring-8:

Introduction© RIKEN/JASRI
O-45: Construction of the New Safety Interlock System for SPring-8 Accelerator

30InterlockSystem
Mode

CoveredArea-Related Permission

Li-Sy

Li, Sy

L3SR
NS

L3SR
NS

GUN, Li-RF, Sy-RF,SR-RF
GUN, NS-RF
GUN, SR-RF, Sy-RF
GUN, NS-RF

GUN, Li-RF, Sy-RF,
SR-RF, NS-RF

Covered area and related permission ofCurrent Accelerator Safety Interlock SystemInterlock
System
Gun
Li
Sy
L3SR
NS

Covered
Area
LiSy
L3SR
NS

RelatedPermission
GUN
GUN, Li-RF
GUN, Sy-RF
GUN
GUN, SR-RF
GUN, NS-RF

Covered area and related permission of
New Accelerator Safety Interlock System(Covered areas and related permissions is
independently managed by each interlock systems)

O-45: Construction of the New Safety Interlock System for SPring-8 Accelerator

31

エリア管理（１）ー エリア・インターロックシステム ー
扉リミットSW
PK
非常停止
退避確認
システムキー

エリア・インターロックシステム
閉鎖条件
（運転中）

RF許可

GUN許可
（エリア）

安全機器

BL Abort
DCCT
etc…

（RF系）

安全機器
（GUN系）

放射線モニタetc..

基本の構成・動作は全エリア同様

RF許可：
GUN許可（エリア）：

RF運転許可（蓄積可能）
エリアへの入射許可

運転モード選択不要

O-45: Construction of the New Safety Interlock System for SPring-8 Accelerator32

エリア管理（２）ー GUN・インターロックシステム ー

切離し：エリアへ入射不可能な状態（「上流：シャッター：閉」 かつ「上流：偏向電磁石：非励磁」）

エリア

Shutter
BM
ビーム方向

切離し

GUNインターロックシステム
ORGUN許可（エリア）エリア

切離しGUN許可

ORAND

GUN許可
（エリア）

エリア

全エリアより「切離し」または「GUN許可（エリア）」を受け、GUN許可となる

切離しOR

GUN許可
（エリア）

O-45: Construction of the New Safety Interlock System for SPring-8 Accelerator

運転モード選択不要
33

Accelerator Safety Interlock System (3)Operation mode(MODE)• For accelerator operation , appropriate
MODE should be selected.
• Several MODEs can be selected• A MODE including combination of someareas

str: storage
inj: injection

Ready
L1

L3

L2

• MODE transition procedure is complicated.

Modeoff

Sy-strNS-strSy-injSR-strSR-injTopup(SR)NS-inj

SR/NS injection
modeOperation mode transition(Red region shows Mode with switching a34
destination)
O-45: Construction of the New Safety Interlock System for SPring-8
Accelerator