BI BL Student meeting 27052013 Reliability analysis of the Input Monitor in the BLEDP From The new BLM system for the injector complex BI DAY 2012 William Viganò Overview The circuit ID: 276292
Download Presentation The PPT/PDF document "Vegard Joa Moseng" is the property of its rightful owner. Permission is granted to download and print the materials on this web site for personal, non-commercial use only, and to display it on your personal computer provided you do not modify the materials and that you retain all copyright notices contained in the materials. By downloading content from our website, you accept the terms of this agreement.
Slide1
Vegard Joa Moseng BI - BL
Student meeting 27.05.2013Reliability analysis of the Input Monitor in the BLEDPSlide2
From «The new BLM system for the injector complex» BI DAY 2012 – William Viganò
Overview:Slide3
The circuit:Slide4
Measurement Methods
The input monitoring system has two different measurement levels. One is the Fully Differential Frequency Converter (FDFC) which measures detector output currents from 10pA to 30mA. In this measurement method, the ADC is attached to the diff. output of an integrator in the input monitor.The other is the Direct ADC Acquisition (DADC) which measure detector output currents from 80uA to 200mA. The ADC is attached to an input resistor on which the voltage drop is measured.
OperationThe input monitor is responsible for processing the information by the monitors, into a value that is usable for the FPGA and its algorithms.
About the
Input Monitor
circuit Slide5
Criticality
For each detector connected to the BLEDP, there is one input monitor circuit and one ADC. There is therefore 8 input monitor and ADC circuits per BLEDP.The input monitor and the ADC is critical for the operation of both the measurement methods, and is thus critical for one channel in the BLEDP. Therefore, the loss of an ADC is equivalent to the loss of a detector. The Input Monitor and the ADC have two main
failure modes that affect the operation of the BLEDP; complete failure (no output), and
erroneous output (from either internal failures or erroneous inputs). Detection
As a part of the new acquisition system, an improved connectivity check is planned to be implemented which is capable of frequently testing the entire detector supply chain. This should therefore be able to detect a erroneous output by it’s reference current. This will however not indicate explicitly that the ADC is giving erroneous outputs but it will be sufficient for a false dump to take place and the changing of the BLEDP card, and thus maintaining the operation of the machines without there being a blind failure.
Integration in the systemSlide6
The block arrangementTo simplify the analyses and to make it easier for the readers to identify important information, the report is constructed in blocks rather than components. For the blocks, the important failure modes for the individual components have been added to make sure all components have been evaluated
and that the crucial information is preserved in the report. The blocks are (FM = Failure modes – 117 in total): Digital potentiometer block (5 FM)
Saturation monitoring block (17 FM)Stop function
block (4 FM)Switch FDFC / DADC to ADC block (
4 FM
)
Buffer
amplifier block (
14 FM
)
Voltage reference
generator block (
7
FM
)
Comparators block (
13
FM
)
Flip-Flop block (
9
FM
)
Offset current and detector input block (9 FM)Switch FDFC - DADC to Input Switch (4 FM)Input switch block (4 FM)Fully differential integrator block (12 FM)Power supply for digital potentiometer block (4 FM)Input voltage filtering block (3 FM)Other filtering blocks (8 FM)
Block systemSlide7
MTTF: The
value is for a single circuit. For the BLEDP the card will have 8 Input Monitor and ADC circuits, which means that the overall MTTF for the BLEDP will be a weighted average of all the circuits. Failure rate (1x Input Monitor): 2.757E-06MTTF in hours: 3.627E+5
MTTF in years: ~41 yearsSeverity ranking
1. No effect: Non-critical failure such as filtering. 2. Maintenance
: Failure in redundant components and other failures that allow for continued operation but should be fixed as soon as possible.
3. False dump
: Failures that causes loss of critical functionality and/or safety, will cause the system to abort (dump the beam).
4. Blind failure
: Failures where you are unable to detect erroneous information, or where you have no protection when you expect to have .
Reliability analysisSlide8
Risk Priority Numbers
Total:
Severity = 351Occurrence = 1Detection = 1
RPN = (3x1x1)117 = 351Slide9
CommentsA total of
117 failure modes for random failures in the Input monitor circuit will cause a failure inconsistent with a good operation and in most cases these will cause the beam to be dumped in the next possible dump site. However, the individual probability of the failures are so low that they are considered highly unlikely. Satisfactory detection is also implemented, meaning there are no failures that will manifest as a blind failure. Given the overall low probability and reliability focused design, no special action is warranted.