SPS PPS Verification Validation Strategy Tomasz Ladzinski for

SPS PPS Verification & Validation Strategy Tomasz Ladzinski for the SPS Project Team 11. 02. 2019 T. Ladzinski, edms #2086521 1

SPS PPS System Architecture Overview 11. 02. 2019 T. Ladzinski, edms #2086521 2

Installation Schedule 11. 02. 2019 T. Ladzinski, edms #2086521 3

Multi-Stage Testing Approach Access Point Test Protocol SPS 0 Software Unit Testing OCD Interfaces Testing Simulation Environment Preparation PAD Test @ PAD SPS 0 Test @ SPS 0 Functional Test Protocol Site Functional Test @ SPS 0 Wiring Testing Sites Site Equipment Reception Site Functional Test Zone Functional pre-Test All Zones Functional Tests DSO Test(s) PAD Reception Test @ Site Acceptance Test @ Site OKP Testing CCC Hardware Loop Testing 11. 02. 2019 T. Ladzinski, edms #2086521 4

Software Unit Testing • Prerequisites • Software component developed and tested by the contractor • Test report and documentation provided • Objectives • Verify the correct functioning of a software unit, trace safety signature if applicable. In particular: • Basic safety functions used for access point and site software • PAD controller software • Configuration of 3 rd party software components (e. g. NEDAP Server) Note: late testing may impact all following steps. Each modification must be tested and adequate subsequent tests performed (non-regression). • Who / When • BE/ICS project team with the contractor • Prior to all site tests and/or whenever a modification has been introduced 11. 02. 2019 T. Ladzinski, edms #2086521 5

OCD Interfaces Testing • Prerequisites • OCD interface module prepared and tested by the contractor • Objectives • Test each component of the OCD software • Validate completeness of the system, i. e. that no physical object (e. g. a door) has been missed • Validate that the components of the OCD are fit for use by operation (CCC, CSA, AWAKE CR) • Who / When • BE/ICS project team with the contractor, partly OP etc. • Each site view tested before the corresponding Site Functional Test @ SPS 0 • Additional domain specific views test sessions 11. 02. 2019 T. Ladzinski, edms #2086521 6

PAD Test @ SPS 0 • Prerequisites • PAD manufactured and FAT performed @ SAIMA • SPS 0 central infrastructure operational • Access Point Test Protocol • Objectives • Test the PAD unit before field installation • Check the correct functioning with the CERN services (NEDAP access control, Commend audio, Iris. ID biometry) • Who / When • BE/ICS project team with the contractor • 16 tests between delivery and site installation 11. 02. 2019 T. Ladzinski, edms #2086521 7

Site Functional Test @ SPS 0 • Prerequisites • • Site software prepared and tested by the contractor Simulator configured Site synoptic view integrated in OCD Site functional Test Protocol available • Objectives • Validate the correct development of the software for a given site • Test interactions with adjacent sites (2 max. ), if software already exists • Validate the corresponding HMI views & alarms • Who /When • BE/ICS project team with the contractor • 16 tests, no later than during the site EIS-a instrumentation phase 11. 02. 2019 T. Ladzinski, edms #2086521 8

Wiring Testing • Prerequisites • • Racks FAT performed @ Procon Racks and EIS-access installation on-site completed, labeling done, Site Functional Test @ SPS 0 done, NC cleared Cabling finished and EN/EL test reports provided • Objectives • Validate that each sensor/actuator signal is correctly connected to the system • If possible, validate the HMI activation and alarms transmission • Who / When • Contractor with supervisor • 16 tests, immediately following the installation period • Incremental tests if some equipment added at a later stage (e. g. doors in TT 20) 11. 02. 2019 T. Ladzinski, edms #2086521 9

PAD Acceptance Test @ Site • Prerequisites PAD Acceptance Test @ Site • PAD Test @ SPS 0 done (Test report available for on-site completion) , NCs cleared • PAD, MAD installed and adjacent grid works completed • Connection to power and Central/Supervision Layer PPS Infrastructure • Objectives • Test the access point before declaring fit for access control operation: • • • Access control with IMPACT; entrance/egress in general and restricted mode possible Audio connection to CSA functioning Correct video recording functioning MAD human detection and its override functioning Dysfunctional test in case of network and powering errors • Who / When • BE/ICS project team with the contractor • 16 tests, immediately after each access point installation 11. 02. 2019 T. Ladzinski, edms #2086521 10

Site Functional Test • Prerequisites • • Site Functional Test @ SPS 0 done, NC cleared Wiring Test done, NC cleared Access Point Reception done, NC cleared EIS-instrumentation works completed • Objectives • Validate the correct functioning of a site in all access modes. In particular test all the functions related to Search/Patrol • Validate the corresponding HMI views & alarms • Who /When • BE/ICS project team with the contractor • 16 tests, at the end of the testing phase • In order to carry out the test, it must be possible to have exclusive access to a site for 1 -2 days. 11. 02. 2019 T. Ladzinski, edms #2086521 11

Zone Functional (pre-)Test Zone Functional pre-Test • Prerequisites • Tests of all sites forming an interlocked zone completed and NC cleared • • • AWAKE: TAG 41 East Extraction: TAG 42 Ring: BA 1 -BA 6, TT 40(ex. ECX 4), ECA 5 North Transfer: BA 80 -BA 81 TCC 8 -ECN 3: TCC 8, ECN 3 West Extraction: TT 61, BA 7 • Corresponding EIS-beam interfaces installed • Objectives • Validate the correct functioning of a zone with hazard protection safety functions (i. e. proton beam hazard for all zones, laser and electron beam for AWAKE), including dysfunctional tests (hardware, network and powering failures). Note: central infrastructure will not be available in the CCC, so the OKP and cabled loop will be simulated, with the exception of local cabled loop for electron beam in AWAKE). • Who /When • BE/ICS project team, contractor, BE/OP, equipment groups • At least 6 tests, probably for AWAKE done twice (electron/laser in 2019, proton in 2020) • In order to carry out the test, it must be possible to have exclusive access to all sites forming a zone for 1 -2 days 11. 02. 2019 T. Ladzinski, edms #2086521 12

All Zones Functional Tests • Prerequisites • • All Zones Functional Tests OKP Testing Hardware Loop Testing Functional (pre-)Tests of all Zones done and NC cleared Central infrastructure transferred to CCC OKP installed and electrically tested Hardware loop elements installed and electrically tested Corresponding EIS-beam interfaces connected to the EIS-beam control systems operational Possible to remove the lock-out of the EIS-beam • Objectives • Validate the correct functioning of the system prior to individual system testing period • Who /When • BE/ICS project team, contractor, BE/OP, equipment groups, DSO • Target date: • May 2019 for AWAKE (laser & e-beam) • August 2020 for the SPS Complex • Exclusive access to all sites forming the SPS Complex for 7 consecutive days in August 2020 11. 02. 2019 T. Ladzinski, edms #2086521 13

ICS Team 11. 02. 2019 T. Ladzinski, edms #2086521 Hardware Loop Testing OKP Testing All Zones Functional Tests Zone Functional pre-Test Site Functional Test PAD Acceptance Test @ Site Wiring Testing Site Functional Test @ SPS 0 PAD Test @ SPS 0 OCD Interfaces Testing BE/OP DSO Test(s) Contractor Software Unit Testing Principal Involvement in Tests Equipment Groups DSO 14

Installation Schedule 11. 02. 2019 T. Ladzinski, edms #2086521 15

Critical Tests Q 1 -2 ‘ 19 TAG 41 PAD Acceptance Test @ Site TAG 42 PAD Acceptance Test @ Site 11. 02. 2019 TAG 42 Wiring Testing TAG 41 Site Functional Test @ SPS 0 TAG 41 Wiring Testing E-gun Hardware Loop Test AWAKE Zone Functional pre-Test TAG 41 Site Functional Test AWAKE DSO Test(s) TAG 42 Site Functional Test TAG 42 Site Functional T. Ladzinski, edms #2086521 Test @ SPS 0 16

Critical Tests 2020 BA 5/ECA 5 Site Functional Test RING Zone Functional pre-Test OKP Testing Hardware Loop Testing All Zones Functional Tests Central Infrastructure can be transferred to CCC when all the new access points are installed. Impossible to dismantle the CCC/CCR equipment when at least one old access point remains in operation. 11. 02. 2019 T. Ladzinski, edms #2086521 17

Conclusions • Operation input at the stage of testing HMI interfaces and the functional tests of sites throughout LS 2 • For each of the six interlocked zones a test of safety functions with interfaces to EIS-beam and help of OP is foreseen • Two big validation periods involving OP: • May 2019 for TAG 41 specific hazards, prior to giving the system to the AWAKE team (laser, electron beam tests); • August 2020 for the SPS Complex and test with operational EIS-beam with no access to 3 rd parties during an entire week. • It’s tough, resources are being re-allocated, but the installation is on schedule so far, so should be the tests! 11. 02. 2019 T. Ladzinski, edms #2086521 18

Project Lead Planning, Contract, Overall System Functioning PL: T. Ladzinski DPL: M. Munoz Functional Safety V&V Nuclear Safety Plan & Documentation, Risk Analysis Validation, SIF Specification, FAT/SAT coordination & preparation of maintenance phase Establish V & V Plan with the contractor, AP & Site Test procedures, Test organization & NC follow-up WPL: E. Sanchez B. Fernandez B. Morand JF. Juget L. Pereira WPL: P. Ninin B. Fernandez F. Valentini B. Morand L. Hammouti ASSYSTEM System Arch. EDMS structure, Contract deliverables validation, follow up documentation plan WPL: E. Sanchez P. Ninin 11. 02. 2019 Completion of Interface Control Document, Follow up with equipment groups WPL: F. Havart B. Morand WPL: M. Munoz IT Aspects Operation Interfaces TIM views, OKP, interfaces for CCC, CSA, ACR QA EIS-b/m PLC architecture & Hardware Loop, DMC detection WPL: F. Havart M. Rafalski L. Pereira C. Wetton Interfacing with CERN Services & Experts for Network, DB, Bio, Nedap, Audio, Video, SSM WPL: T. Hakulinen M. Rafalski D. Vaxelaire G. Godineau P. Gaviglio T. Riesco Electrical Aspects Sectorisation Completion, Revision, Validation WPL: S. Di Luca V. Rios Site Installation Preparatory work: lockout, transport, monitoring external envelope. On-site supervision: dismantling, installation, NC follow-up. WPL: V. Rios D. Vaxelaire Cabling and powering requests, EIS interfacing WPL: D. Vaxelaire V. Rios SPS Project Organigram T. Ladzinski 05. 02. 2019 EDMS #2086522 T. Ladzinski, edms #2086521 19