Machine Protection A Future Safety System B Todd

Machine Protection – A Future Safety System? B. Todd ISSC 2010 August 2010 Thanks to : TE/MPE/MI, CERN Machine Protection Panel, et al 0 v 3

CERN Founded in 1954 Funded by the European Union 20 Member States …most of the EU… 580 Institutes World Wide 2500 Staff 8000 Visiting Scientists 8 Observer States and Organisations …Japan, Russia, USA… 35 Non-Member States …Australia, Canada, New Zealand… Conseil Européen pour la Recherche Nucléaire European Centre for Nuclear Research Pure Science – Particle Physics 1. Pushing the boundaries of research, physics beyond the standard model. 2. Advancing frontiers of technology. 3. Forming collaborations through science 4. Educating the scientists and engineers of tomorrow benjamin. todd@cern. ch Machine Protection – A Future Safety System?

CERN We use the world’s largest and most complex scientific instruments to study the basic constituents of matter. These instruments are particle accelerators and detectors. Accelerators boost beams of particles to high energies before they are made to collide with each other or with stationary targets. Detectors observe and record the results of these collisions. Our flag-ship project is the Large Hadron Collider… benjamin. todd@cern. ch Machine Protection – A Future Safety System? 4

CERN Accelerator Complex CERN Lake Geneva Airport CERN LAB 2 (France) CERN LAB 1 (Switzerland) benjamin. todd@cern. ch Machine Protection – A Future Safety System?

CERN Accelerator Complex CERN Lake Geneva Large Hadron Collider (LHC) Geneva Airport CERN LAB 2 (France) Super Proton Synchrotron (SPS) CERN LAB 1 (Switzerland) benjamin. todd@cern. ch Machine Protection – A Future Safety System? Proton Synchrotron (PS)

CERN benjamin. todd@cern. ch The Large Hadron Collider Machine Protection – A Future Safety System?

The Large Hadron Collider

CERN Accelerator Complex CERN Beam Dumping Systems Large Hadron Collider (LHC) ~ 9 km ~ 5. 5 miles Beam-2 Transfer Line (TI 8) Super Proton Synchrotron (SPS) Beam-1 Transfer Line (TI 2) 150 m underground, 100 us for one turn, 1 e 12 protons / injection benjamin. todd@cern. ch CERN, the LHC and Machine Protection – A Future Safety System? 9 of 23

CERN Accelerator Complex CMS LHC-b ALICE ATLAS benjamin. todd@cern. ch Machine Protection – A Future Safety System? CERN

CERN benjamin. todd@cern. ch ATLAS – A Toroidal LHC Apparatu. S Machine Protection – A Future Safety System? 11

CERN benjamin. todd@cern. ch ATLAS – A Toroidal LHC Apparatu. S Machine Protection – A Future Safety System? 12

ATLAS CERN benjamin. todd@cern. ch Machine Protection – A Future Safety System? 13

Why the LHC? CERN material costs of the LHC and experiments ≈$4 billion The Higgs Boson Gravity is such a weak force – can it be explained? Dark Matter / Energy 96% of mass in the universe is unaccounted for Do Weakly Interacting Massive Particles (WIMPs) account for this? Beyond the Standard Model String Theory / Super Symmetry / Super String Theory / A Theory of Everything? We need some clues! collide two beams… high intensity = more ‘events’ high energy = more massive particles possible LHC Beam Intensity = 3 x 1014 p LHC Energy = 7 Te. V [11] benjamin. todd@cern. ch Machine Protection – A Future Safety System? 14

Collisions CERN ~109 proton-proton collisions per second Massive amounts of data generated – all must be processed new particles are rare – only a few events per day benjamin. todd@cern. ch Machine Protection – A Future Safety System? [3] 15

Technological Challenges CERN …To see the rarest events… LHC needs high luminosity of 1034 [cm-2 s-1] 3 x 1014 p per beam Collisions generate Peta. Bytes of data Per year … to get 7 Te. V operation… LHC needs 8. 3 Tesla dipole fields with circumference of 27 kms (16. 5 miles) … to get 8. 3 Tesla … LHC needs super-conducting magnets <2°K (-271°C) with an operational current of ≈13 k. A cooled in super fluid helium maintained in a vacuum two orders of magnitude higher than others World’s largest machine 1 ppm 10 x less pressure than on moon surface Stored energy per beam is 360 MJ Stored energy in the magnet circuits is 9 GJ A magnet will QUENCH with milli. Joule deposited energy [11] benjamin. todd@cern. ch Machine Protection – A Future Safety System? 16

CERN Technological Challenges Kinetic Energy of 200 m Train at 155 km/h ≈ 360 MJ Stored energy per beam is 360 MJ Stored energy in the magnet circuits is 9 GJ [11] benjamin. todd@cern. ch Machine Protection – A Future Safety System? 17

CERN Technological Challenges Kinetic Energy of 200 m Train at 155 km/h ≈ 360 MJ Stored energy per beam is 360 MJ Stored energy in the magnet circuits is 9 GJ Kinetic Energy of Aircraft Carrier at 50 km/h ≈ 9 GJ [11] benjamin. todd@cern. ch Machine Protection – A Future Safety System? 18

Protection Function CERN Beam Protection: Beam Energy Beam Dump 100 x energy of TEVATRON 0. 000005% of beam lost into a magnet = quench 0. 005% beam lost into magnet = damage Failure in protection – complete loss of LHC is possible Powering Protection: Magnet Energy Emergency Discharge 10 -20 x energy per magnet of TEVATRON magnet quenched = hours downtime many magnets quenched = days downtime magnet damaged = $1 million, months downtime many magnets damaged = many millions, many months downtime (few spares) benjamin. todd@cern. ch Machine Protection – A Future Safety System? 19

Protection Function CERN Beam Protection: Beam Dump Beam Energy 100 x energy of TEVATRON 0. 000005% of beam lost into a magnet = quench 0. 005% beam lost into magnet = damage Failure in protection – complete loss of LHC is possible Concrete Shielding Beam is ‘painted’ diameter 35 cm 8 m long absorber Graphite = 800°C benjamin. todd@cern. ch Machine Protection – A Future Safety System? 20

Protection Function CERN Beam Protection: Beam Dump Beam Energy 100 x energy of TEVATRON 0. 000005% of beam lost into a magnet = quench 0. 005% beam lost into magnet = damage Failure in protection – complete loss of LHC is possible To protect against fastest failure modes benjamin. todd@cern. ch ≈ 400 µs over 27 km Machine Protection – A Future Safety System? 21

LHC Equipment and Control System CERN Vacuum Example: • maintain correct pressure Plant Systems: Fulfill operational requirements Vacuum Pressure benjamin. todd@cern. ch Machine Protection – A Future Safety System? Vacuum Pump Speed Control [11] 22

LHC Equipment and Control System CERN Vacuum Example: • maintain correct pressure • bad pressure = close valves Vacuum Pressure Vacuum Valve Actuator Vacuum Pressure Vacuum Pump Speed Control Plant Protection: Ensure plant stays within limits Plant Systems: Fulfill operational requirements benjamin. todd@cern. ch Machine Protection – A Future Safety System? [11] 23

LHC Equipment and Control System CERN Vacuum Pressure Vacuum Valve Actuator Plant Systems: Ensure plant stays within limits Fulfill operational requirements • Sensors, Actuators and Process may be combined • No rules regarding combination • Must meet functional requirement benjamin. todd@cern. ch Machine Protection – A Future Safety System? Vacuum Pump Speed Control [11] 24

LHC Equipment and Control System CERN Personnel Safety System: People in perimeter – stop machine Access doors • cannot be merged with plants • Must meet legal requirement Beam absorbers personnel safe but machine at risk [11] benjamin. todd@cern. ch Machine Protection – A Future Safety System? 25

LHC Equipment and Control System CERN Machine Protection System: Prevent damage to machine Prevent undue stress to components • No rules regarding implementation • Must meet functional requirement [11] benjamin. todd@cern. ch Machine Protection – A Future Safety System? 26

LHC Equipment and Control System CERN Machine Protection System: Prevent damage to machine Prevent undue stress to components • No rules regarding implementation • Must meet functional requirement powering protection closely coupled to powering plant [11] benjamin. todd@cern. ch Machine Protection – A Future Safety System? 27

LHC Equipment and Control System CERN Personnel Safety System: Machine Protection System: danger exists – extract energy danger will exist – extract energy Plant Systems: [11] benjamin. todd@cern. ch Machine Protection – A Future Safety System? 28

LHC Equipment and Control System CERN Personnel Safety System: Machine Protection System: danger exists – extract energy danger will exist – extract energy Beam protection inputs from • Safety system • Plant systems • Dedicated sensors Plant Systems: [11] benjamin. todd@cern. ch Machine Protection – A Future Safety System? 29

CERN Developing the Machine Protection System Why am I here? … machine protection ≠ safety But… cost of protection system failure is enormous LHC is (just) the first machine with these energy risks High Energy Physics community has to learn to deal with the challenges System-safety ideas, concepts and approaches have to be absorbed by CERN • LHC is its own prototype: • systems involved protection are unique certain technologies used have never been tried on this scale before I can argue that the MPS is fit for purpose My mission: rigorous development of machine protection as if it were a safety system But: can our argument-based approach be accepted by system-safety? benjamin. todd@cern. ch Machine Protection – A Future Safety System? 30

CERN Developing the Machine Protection System CERN’s machine protection system development process… could this ever be considered as a safety-system? prior knowledge • • • assumptions • simulations • failure cases solutions for every failure case • testing Implementation • • verification It took more than ten years to address all of the issues for the LHC… And we’re still learning… benjamin. todd@cern. ch Machine Protection – A Future Safety System? 31

The Machine Protection System Today CERN Powering Protection benjamin. todd@cern. ch Beam Protection Machine Protection – A Future Safety System? 32

CERN benjamin. todd@cern. ch The Machine Protection System Today Machine Protection – A Future Safety System? 33

CERN 1994 2002 2005 2007 2008 2009 The Story So Far 2010 LEP CERN approves LHC project Decommissioning of the LEP machine benjamin. todd@cern. ch Machine Protection – A Future Safety System? 2011 2012 2013

CERN 1994 LEP 2002 2005 2007 2008 2009 2010 2011 2012 Install magnets CERN approves LHC project preparation, installation, alignment and interconnection of magnets benjamin. todd@cern. ch Machine Protection – A Future Safety System? 2013

CERN 1994 LEP CERN approves LHC project 2002 2005 2007 2008 2009 2010 Install magnets September 10 th first circulating beam established in LHC benjamin. todd@cern. ch Machine Protection – A Future Safety System? 2011 2012 2013

CERN 1994 LEP CERN approves LHC project 2002 2005 2007 2008 2009 2010 2011 Install magnets September 10 th first circulating beam September 18 th first lesson learned Interconnection failure – damaged magnets and helium leak benjamin. todd@cern. ch Machine Protection – A Future Safety System? 2012 2013

CERN Magnet Protection Magnet Interconnect benjamin. todd@cern. ch Machine Protection – A Future Safety System? 38

Ideal 13 k. A Connection Scheme CERN Superconducting Cable Tin – Silver Foils Cross Section View Longditudinal View – filled with Solder Copper Stabiliser benjamin. todd@cern. ch Superconducting Cable Machine Protection – A Future Safety System?

CERN benjamin. todd@cern. ch Observed Interconnections Machine Protection – A Future Safety System?

CERN benjamin. todd@cern. ch Magnet Protection Machine Protection – A Future Safety System? 41

CERN Incident location Dipole Bus bar benjamin. todd@cern. ch Machine Protection – A Future Safety System?

The Story So Far CERN 1994 LEP CERN approves LHC project 2002 2005 2007 2008 2009 Install magnets September 10 th first circulating beam 2010 2011 2012 3. 5 Te. V Repair 7. 0 Te. V Upgrade September 18 th first lesson learned November 30 th 1. 18 Te. V November 23 rd 450 Ge. V November 20 th second startup benjamin. todd@cern. ch Machine Protection – A Future Safety System? 2013

CERN 1994 LEP CERN approves LHC project 2002 2005 2007 2008 2009 Install magnets September 10 th first circulating beam 2010 2011 2012 3. 5 Te. V Repair 7. 0 Te. V Upgrade September 18 th first lesson learned November 30 th 1. 18 Te. V November 23 rd 450 Ge. V November 20 th second startup benjamin. todd@cern. ch Machine Protection – A Future Safety System? 2013

CERN The Future – Linear Accelerators CLIC – Compacy LInear Collider ILC – International Linear Collider LHC results = electron / positron collider required for detailed study CERN is designing CLIC machine protection Various Institutes designing ILC machine protection Only one of these likely to be built – depends on what LHC discovers • logical next step for physics • specification to be finished circa 2015 • > $10 Billion machines • 30 -50 km long • beam energy densities 1000 x higher than previous e-e+ machines • beam energy 10000 x above component damage limit benjamin. todd@cern. ch Machine Protection – A Future Safety System? 45

CERN Large Hadron Collider (LHC) Compact Linear Collider (CLIC) benjamin. todd@cern. ch Machine Protection – A Future Safety System?

The Future – ITER CERN ITER – International Thermonuclear Experimental Reactor many synergies with LHC challenges CERN is consulting on the design of the ITER Machine Protection… • • • first steps of 50 -year plan prove / disprove fusion feasibility for commercialisation > $10 Billion machine > 100 GJ of stored magnetic energy 500 MW of fusion for 1000 seconds vs state-of-the-art: 16 MW of fusion for 1 second (Joint European Torus) Tritium – Deuterium Fusion [11] benjamin. todd@cern. ch Machine Protection – A Future Safety System? 47

The Future – ITER CERN ITER – International Thermonuclear Experimental Reactor many synergies with LHC challenges CERN is consulting on the design of the ITER Machine Protection… • • • first steps of 50 -year plan prove / disprove fusion feasibility for commercialisation > $10 Billion machine > 100 GJ of stored magnetic energy 500 MW of fusion for 1000 seconds vs current record: 16 MW of fusion for 1 second (Joint European Torus) Tritium – Deuterium Fusion [11] benjamin. todd@cern. ch Machine Protection – A Future Safety System? 48

CERN The Future – ITER – International Thermonuclear Experimental Reactor Safety– prevent Tritium release Protection– protect the reactor Plant– protect the sub-systems [11] benjamin. todd@cern. ch Machine Protection – A Future Safety System? 49

CERN The Future – ITER – International Thermonuclear Experimental Reactor Safety– prevent Tritium release Protection– protect the reactor Plant– protect the sub-systems [11] benjamin. todd@cern. ch Machine Protection – A Future Safety System? 50

CERN The Future – ITER – International Thermonuclear Experimental Reactor Safety– prevent Tritium release Protection– protect the reactor Plant– protect the sub-systems [11] benjamin. todd@cern. ch Machine Protection – A Future Safety System? 51

CERN The Future – ITER – International Thermonuclear Experimental Reactor Safety– prevent Tritium release Protection– protect the reactor Plant– protect the sub-systems Initial study: Machine protection can veto plant protection • Shutdown in sequence • Sacrifice one to save another [11] benjamin. todd@cern. ch Machine Protection – A Future Safety System? 52

CERN The Future – ITER – International Thermonuclear Experimental Reactor Safety– prevent Tritium release Protection– protect the reactor Plant– protect the sub-systems Initial study: Machine protection can veto plant protection • Shutdown in sequence • Sacrifice one to save another Or delay plant protection? [11] benjamin. todd@cern. ch Machine Protection – A Future Safety System? 53

An Outlook CERN LHC is its own prototype, a unique machine, ≈30 years in the making • • key protection systems involved are one-of-a-kind LHC is the first machine with such massive built-in destruction potential • cost of failure is extreme we have used an argument based approach to address the issues we’ve had positive and negative experiences Could stake-holders demand some “compliance” from us to insure their investment? My mission: rigorous development of machine protection as if it were a safety system. Keep the deep-thinking approach, incorporate system-safety techniques Future machines: bigger, more powerful, more challenging protection already crucial, even in first design drafts Ultimate goal: certification. Wishful thinking? High Energy Physics community has to learn to deal with the challenges “Machine Protection – A Future Safety System? ” – an open question to your community benjamin. todd@cern. ch Machine Protection – A Future Safety System? 54

CERN Fin Thank you for your attention benjamin. todd@cern. ch Machine Protection – A Future Safety System? 55