ESS Beam Interlock System Angel Monera Martinez www

ESS Beam Interlock System Angel Monera Martinez www. europeanspallationsource. se

OVERVIEW • • • BIS FUNCTIONAL IDEA BIS ENVIRONMENT BIS TOP LEVEL REQUIREMENTS BIS HARDWARE ENVIRONMENT BIS SEPARATION FBIS SYSTEM – – – FBIS DIAGRAM FBIS FIRMWARE FBIS SOFTWARE FBIS OPERATIONS FBIS TEST FBIS PROBLEMS AND CHALLENGES • CONCLUSIONS 2

BIS FUNCTIONAL IDEA • COLLECT SYSTEM READINESS SIGNALS OR “BEAM_PERMIT” FROM MACHINE PROTECTION RELEVANT DEVICES (Vacuum, RF, BLM, etc). • DECIDE DEPENDING ON THE MACHINE STATE AND MASKING • STOP THE PROTON BEAM IF NEEDED. 3

BIS TOP LEVEL REQUIREMENTS • Fast Reaction Time: – 3 x 10 -6 s (in the front end/within the first 50 m of the LINAC) and 9 x 10 -6 s throughout the full length of the LINAC (600 m). • Highly dependable system: – Protection Integrity Level for the BIS is PIL 3, – Very high availability requirements (avoid false trips, ie no unnecessary stop of beam operation due to the BIS) • Ready to be installed end of 2017 (staged approach up until end of 2019) • PCL and FPGA compatibility 4

BIS HW ENVIRONMENT • The BIS HW will be installed in the ”Klystron Gallery” together with all other controls HW • 24 Rack-Blocks (with 36 racks each)/ waterproof, very stable temperature conditions (needed mainly for RF), however it’s a difficult set up for cabling and interconnections of rack blocks • Surrounded by – 150 klystrons (several MW) – 150 PS for pulsed magnets 5

BIS SEPARATION TARGET STATION LPS (Slow) VACUUM VALVES 2 oo 3 Current Loops voting System SBI Distributed. IO IO LPS (Fast) BI BI (Fast) Device Inputs ~500 Star topology FBI Block FBI Rack Concentrator <24 Concentrators (1 per rack block) Star topology Profinet (Optical Fiber) FBI Master SBI CPU Actuators 1 Master Per system 3 Actuator already known + 6 Under Study 6

BIS SEPARATION • SLOW and reliable BIS based on PLC that will collect all signals from Protection Functions (PF) with time requirements > 15 ms • FAST system based on FPGA tailor made for ESS for Time-critical signals. • Convergence at actuator level. 7

FAST Beam Interlock System (Based in Optical fiber)

FBI SYSTEM DIAGRAM BI BI LPS FBI_DIF FBI_M -Copper Links FBI_M Device Inputs ~300 RACK BLOCK Y RACK BLOCK X LPS 5 FBI_DIF per enclosure 8 copper inputs to 1 optical 1 per enclosure 5 Optical inputs 1 Output Master of Masters (Mo. M) 1 Master of Master 24 Optical Inputs 8 Outputs FBI_Actuator Interfaces x Actuator Interfaces 1 Optical Input + 1 Redundant, 1 output -Optical Links -Unknown SBIs Actuators X Actuators: Source, LEBT Chopper, MEBT Chopper and Timing 9

FBI SYSTEM - DETAILS • Start architecture • Based in FPGA with Serializers + Beam Permit in Data packets => Dynamic Permit (failsafe) • FBI_DIF concentrates/serializes signals into 1 optical link. • Each Master will process the Permit in each rack block • Mo. M Decide over the FBI system • Actuator Interface will – Translate the Beam Permit from Optical to x (whatever is needed) – Converge permits from FBI and SBI interlocks. 10

FBIS - HARDWARE PROPOSITION Timing FBI_DIF (Device Interface) FBI_M (Master) Timing FBI_Mo. M (Master of Masters) FBI_A (Actuator) 11

FBIs FIRMWARE (Master and Mo. M) • “SIMPLE” FIRMWARE – – – Pci-e Port Timing Receiver Memory Map One register per input / per function Secure write* Main algorithm • • Detect -> Register (Log) Process -> Register (Log) Decide -> Log Act –> Log – Event log with timestamp 12

FBIs FIRMWARE – ADDITIONAL FEATURES • • Glitch counters Link error counter Glitch filters (configurable time constant) Self diagnostics • Optical fiber Rx power comparator 13

BIS SOFTWARE – OPERATORS (EPICS 4) ESS BEAM INTERLOCK SYSTEM SOURCE LEBT MEBT DTL SPOKE S MED B SBIS ACT 1 ACT 2 HIGH B A 2 T TARGET FBIS ACT 3 ACT 4 ACT X BEAM ON/OFF BY BIS MASKING INFO 14

BIS SOFTWARE – EXPERT PANEL ESS BEAM INTERLOCK SYSTEM ENC 1 ENC 2 ENC 3 . . . . ENC 24 SBIS ACT 1 ACT 2 TARGET FBIS ACT 3 ACT 4 ACT X BEAM ON/OFF BY BIS MASKING INFO 15

FBIs SOFTWARE – TRIGGER EXAMPLE ESS BEAM INTERLOCK SYSTEM ENC 1 ENC 2 ENC 3 . . ENC 15 . . . ACT 2 TARGET FBIS SBIS ACT 1 ENC 24 ACT 3 ACT 4 ACT X BEAM OFF BY (FAST - ENCLOSURE 3 – INPUT 4 – BLM X) INPUT S 1/3 - VACUUM MASKED - INPUT F 15/7 – BLM MASKED 16

FBIs SOFTWARE – TRIGGER EXAMPLE ENCLOSURE X SLOW BEAM INTERLOCK VACUUM 1 DISABLE MAGNET 1 DISABLED VACUUM 2 MAGNET 2 DISABLED DISABLED FAST BEAM INTERLOCK BLM 1 LLRF 30 . . BLM 75 (3 H) . . BCM 10 BPM 5 17

FBI SYSTEM OPERATIONS • EXTERNAL SETTINGS (TBD) – GLITCHES THRESHOLD • Counter to determine when a channel has become problematic and need to be checked – RESETTING • Reset the FBIS when an internal problem has occurred – Masking • (Next Slide) 18

FBI SYSTEM OPERATIONS - MASKING • Selective Masking – Only certain Input can be Masked (Configured in hardware) • Safe Masking – Masking is allowed only for a certain/limited time (eg. 8 h) – Example: • Mask Master 2 – Input 7 for 4 h. • Mask Master 1 – Input 4 for 9999 h => ERROR!!! • Mask Master 7 – Input 5 for 1 h => ERROR Input can not be mask 19

BIS TEST / ACTUATOR TEST • Executed after planned maintenance periods • Check the integrity of the whole FBI system, and input devices connected. • Check also complete protection functions • Initiated by Timing System + Operators • ALL input systems and actuators should be tested 20

FBI SYSTEM PROBLEMS AND CHALLENGES • Mechanical design is challenging (Master of Master has a high number of inputs and outputs of high speed. • Firmware Protection Level is hard to measure. • Possible Increment in maintenance with respect copper based links 21

FBI CONCLUSIONS AND FUTURE WORK • Hardware will be simple. – No HW blind failures due to a single component failure. • Firmware Blind failures: To be seen… • Software/External control is very limited and always temporal. => hardly affect system protection. • System availability: To be seen • A lot of work still to be done – – – Proof of concept + Firmware Main Prototype Mechanics Commissioning plans Test bench + firmware + software Etc. etc. 22

• Backup Slides 23

Acronyms • • FBI : Fast Beam Interlock FBI_D : FBI Driver FBI_DIF : FBI Device Interface FBI_M : FBI Master FBI_Mo. M : FBI Master of Masters SBI : Slow Beam Interlock PSU : Power Supply Unit S/N: : Serial Number 24

BIS SEPARATION IDEAS 25

FBI - DANCING PERMIT • Based on the detection of a phase change of a signal generated by the FBI_DIF – No free oscillation – Delay can be set automatically – Test signal can by any one (even random) • (BAD) – Its more intrusive in the Device Electronics Firmware – Requires extra settings for the FBI_DIF 26