HIPS

Protection
System

The Modern Approach

Traditionally HP pipe work and vessels are

protected from over pressure by Pressure Relief
Valves
The draw back to this is that the entire asset
would have to be able to withstand full pressure
Valves would have to be full flow
Large Vent / Flare
Cost implication
Environmental implication

The Modern Approach

It is better to prevent this occurrence than to

mitigate the consequence
Benefit in terms of design

Inherently more safe

Lower environmental impact
Specification of containment vessels
Implement thermal relief only

Technology to produce such a Protective System

exists

Topics For Discussion

Protective Systems

HIPS

SIS

Protective Systems

Any Item which, by means of its

functionality, protects Personnel,
Plant or Environment from risk of
exposure to Danger or Harm, can
be viewed as a protective device or
system

Protective Systems

This includes Instrument based

Protective systems

ESD, SCS, PES and includes,

Initiator, (PB, switch, Transmitter)
Solver, (logic, hard wire)
Final element, (relay, SOV, Valve)

More commonly called

IPF, (Instrument Protective

Function)

Protective Systems

Legislation makes requirements

upon operators to have inspection
and test schemes for protective
devices.
UK, Pressure Systems Regs
IEC 61508 Safety Standard

Protective Systems

The Pressure Systems Regs

Written Scheme of Inspection

all protective devices

Obviously included Instrumentation

Impact upon Maintenance

Routines
Frequency

Protective Systems

IEC 61508
Equipment Lifecycle
Pipe to Pipe

Includes Initiators, solvers, valves

Quantitative Safety Assessment

Independent Review

Protective Systems

Quantitative Safety Assessment

To Personnel, Environment, Plant

Factors
Consequence of risk
Frequency of exposure
Probability of unwanted occurrence

Outcome is a required Safety

Integrity Level, SIL

Equipment Lifecycle

The IEC standard requires that the

entire life cycle of a protective
system be considered.

Impact upon
Design
Operation
Maintenance

Equipment Lifecycle

Clearly the system must be

designed to offer the required level
of safety integrity
Assessment of required level of
protection
Assessment of required Safety
Integrity Level, SIL

SIL

Quantitative Risk assessment

methods are used to define the
required SIL level for a given
protective function
System is then designed to meet
or exceed this requirement
SIL expressed as a number 1 to 4

SIL

Clearly the system must be

designed to offer the required level
of safety integrity

This level of integrity must not be

compromised by ageing

SIL must be maintained throughout

the entire life of the equipment.

Equipment SIL
SIL is an expression of the integrity of the entire
function, i.e. Initiator to Final element
Its basis is in the Probability of Failure on
Demand, PFD

Safety
Integrity
Level

PFD
Average probability of failure to perform designed function on demand

> or = 10Exp-5 to < 10Exp-4

> or =10Exp-4 to < 10Exp-3

> or = 10Exp-3 to <10Exp-2

> or = 10Exp-2 to 10Exp -1

Equipment SIL

It can be seen that maintaining SIL

levels over the life cycle of a system
has an impact upon Maintenance
SIL

Required SIL Rating

TIME

Equipment SIL

The entire system must meet the

SIL requirement
This leads to designs becoming
segregated by technology
SIL 4 Hardwired, triplicated, etc.
SIL 3,2,1 Redundant, PLC etc

SIL 4 become HIPS

Other SIL become SIS

HIPS

HIPS is an Acronym which stands for,

HIGH INTEGRITY PROTECTION SYSTEM
Malampaya HIPS is for SIL 4 requirements only
Multiple voting initiator,
Redundant, fault tolerant logic solver,

Discrete logic

Multiple final element

Lower SIL requirements fulfilled by the SIS

SIS

SIS is an acronym which stands for

Safety Instrumented System
Malampaya SIS is for SIL 3,2, and 1
requirements.
Multiple voting initiator,
Redundant, fault tolerant logic solver,
Multiple final element

Level of input voting dependant upon SIL

Inter trip

HIPS

SIS

KEY SWITCH
MATRIX

HIPS SIL 4

SIS SIL 3,2,1

2oo3

1oo2 or 2oo2

Duplicated
Output

Triplicated
Input

Single or
double
Output

Single or
double
Input