JACoW is a publisher in Geneva, Switzerland that publishes the proceedings of accelerator conferences held around the world by an international collaboration of editors.
@inproceedings{luchetta:icalepcs2023-tupdp041,
author = {A.F. Luchetta and J.M. Arias and M. Battistella and S. Dal Bello and L. Grando and C. Labate and M.M. Moressa and F. Paolucci},
% author = {A.F. Luchetta and J.M. Arias and M. Battistella and S. Dal Bello and L. Grando and C. Labate and others},
% author = {A.F. Luchetta and others},
title = {{Safety System Final Design for the ITER Heating Neutral Beam Injector Test Bed}},
% booktitle = {Proc. ICALEPCS'23},
booktitle = {Proc. 19th Int. Conf. Accel. Large Exp. Phys. Control Syst. (ICALEPCS'23)},
eventdate = {2023-10-09/2023-10-13},
pages = {602--606},
paper = {TUPDP041},
language = {english},
keywords = {software, SCADA, hardware, PLC, neutral-beams},
venue = {Cape Town, South Africa},
series = {International Conference on Accelerator and Large Experimental Physics Control Systems},
number = {19},
publisher = {JACoW Publishing, Geneva, Switzerland},
month = {02},
year = {2024},
issn = {2226-0358},
isbn = {978-3-95450-238-7},
doi = {10.18429/JACoW-ICALEPCS2023-TUPDP041},
url = {https://jacow.org/icalepcs2023/papers/tupdp041.pdf},
abstract = {{MITICA, the prototype of the ITER heating neutral beam injector, will use an extensive computer-based safety system (MS) to provide occupational safety. The MS will integrate all personnel safety aspects. After a detailed risk analysis to identify the possible hazards and associated risks, we determined the safety instrumented functions (SIFs), needed to mitigate safety risks, and the associated Safety Integrity Levels (SIL), as prescribed in the IEC 61508 technical standard on functional safety of electrical/electronic/programmable electronic safety-related systems. Finally, we verified the SIFs versus the required SIL. We identified 53 SIFs, 3 of which allocated to SIL2, 23 to SIL1, and the others without SIL. Based on the system analysis, we defined the MS architecture, also considering the following design criteria: - Using IEC 61508 and IEC 61511 (Safety instrumented systems for the process industry) as guidelines; - Using system hardware to allow up to SIL3 SIFs; - Using certified software tools to allow programming up to SIL3 SIFs. The SIL3 requirement derives from the need to minimize the share of the hw/sw failure probability, thus allowing maximum share to sensors and actuators. The paper presents the requirements for the MITICA safety systems and the system design to meet them. Due to the required system reliability and availability, the hardware architecture is fully redundant. Given the requirement to choose proven solutions, the system implementation adopts industrial components. }},
}