Thomas Otto
Departmental Safety Officer, Technology Department, CERN
Future Circular Collider Study
Thomas Otto
FCC Week, Berlin, 1 June 2017
FCC Safety Strategy for the CDR
1
Contents
•
•
Scope of Safety in the Conceptual Design Report
Hazard Register
Implementation of a Hazard Register for the FCC
“Standard Best Practice”
Safety Design
Performance-Based Safety Design
•
Conclusions
•
•
•
•
Future Circular Collider Study
Thomas Otto
FCC Week, Berlin, 1 June 2017
FCC Safety Strategy for the CDR
2
FCC Conceptual Design Report
•
The CDR has the purpose of demonstrating the viability of
the planned facility in terms of
•
Accelerator technology
• Detector technology
• Infrastructure (tunnel, transport, services…)
• and Safety (incl. environmental protection)
Future Circular Collider Study
Thomas Otto
FCC Week, Berlin, 1 June 2017
FCC Safety Strategy for the CDR
3
Safety accompanies development
CDR
TDR
• Conceptual Safety Study
• Hazard Register
• Standard best practice – directives, standards, guidelines
• Identify cases for risk assessment
• Proposal of conceptual approaches for risk-control
• Technical Safety Study
• Specific Risk Assessments
• Prescriptive solutions: strictly rule-based
• Performance-based: tailor-made solutions to meet safety objectives
• Proposal of detailed technical solutions for risk-control
Future Circular Collider Study
Thomas Otto
FCC Week, Berlin, 1 June 2017
FCC Safety Strategy for the CDR
4
Hazard Register
Hazard is the potential of a substance, activity or process to cause harm
(accident or illness)
Risk is a combined measure of the likelihood (probability) of harm and
the severity of its consequences
FCC Hazard Register:
Systematic collection of Hazards in the FCC facilities during different
phases of its lifetime
No assessment of probability or severity
Future Circular Collider Study
Thomas Otto
FCC Week, Berlin, 1 June 2017
FCC Safety Strategy for the CDR
5
Hazard Register
Systematic collection of Hazards, ordered by:
• Technology
•
•
•
•
•
•
•
S.c. magnets
N.c. magnets
Cryogenics
Vacuum
Powering
Transport
… others
Future Circular Collider Study
Thomas Otto
FCC Week, Berlin, 1 June 2017
• Project Phase
•
•
•
•
•
•
•
•
Construction
Service Installation
Accelerator installation
Commissioning
Operation
Technical Stop
Long Shut-down
Dismantling
FCC Safety Strategy for the CDR
• Location in the facility
•
•
•
•
•
•
Surface
Shaft
Long Straight Section
Arc Tunnel
Caverns
… others
6
Hazard Register based on …
Breakdown of the planned facility
Phase
Location
Technology
Powering
Future Circular Collider Study
Thomas Otto
FCC Week, Berlin, 1 June 2017
Item
Transformer
Process
Maintenance
FCC Safety Strategy for the CDR
Activity /
Equipment /
Substance
Hazard
Work at height
Fall from height
7
Hazard Register based on …
Structured list of
potential hazards
• at workplaces
• during autonomous
operation
≈100 characterised
hazards
Future Circular Collider Study
Thomas Otto
FCC Week, Berlin, 1 June 2017
A1
A2
B1
B2
B3
B4
B5
B6
B7
C1
C2
C3
C4
C5
External Hazard to Facility
Hazard to the Environment
Physical Hazards
Radiation, ionising
Radiation, non-ionising
Noxious Substances
Fire Hazards
Mechanical Hazards
Electrical Hazards
Working Environment
Physiological Constraints
Unexpected events
Organisation
Psychological Constraints
FCC Safety Strategy for the CDR
Activation of ground
Additional Traffic
Noise (Environment)
Release of pollutants: air
Release of pollutants: solid
Release of pollutants: water
Release of radioactive liquid
Release of radioactive solid
Release of radioactivity by air
Dangerous surface
Fall of object from height
Fluid under presure
Uncontrolled object in
motion
Unprotected element in
movement
8
Filling the database
Technology
Item
Process
Compressor
Activity/
Equipment
Substance
Hazard
Heat xchange
Supply Line
Operation
Pressure vessel
Cold burns
Helium
Cryogenics
ODH
Cryostat
Welding
Return Line
Maintenance
Welding torch
Hot surface
Ignition source
UV radiation
Location
Future Circular Collider Study
Thomas Otto
FCC Week, Berlin, 1 June 2017
FCC Safety Strategy for the CDR
Phase
Flammable gas
Combustible
Material
9
Implementation
•
•
•
Numerous technologies, locations, phases, items and
processes in particle accelerator project as FCC
Spreadsheets quickly overcharged
Use of a relational database
•
Scales with complexity of the project
• Incremental iteration during project lifecycle
• Overall coherence of data assured
• Use of queries to highlight risks
Future Circular Collider Study
Thomas Otto
FCC Week, Berlin, 1 June 2017
FCC Safety Strategy for the CDR
10
Representation in relational database
Technology
Future Circular Collider Study
Thomas Otto
FCC Week, Berlin, 1 June 2017
Item
Process
FCC Safety Strategy for the CDR
Act./Equip./Subst.
Hazard
11
Flexibility of Database Approach
•
Capability for specific reports in database approach
e.g. extraction of hazard register for selected criteria:
•
•
•
Many processes are universal and hazards need to be identified only once
•
•
•
•
What hazards during commissioning in arc tunnel ?
Under which circumstances does a fire hazard appear (simultaneous use of flammable
substance and ignition source, at the same location)
Transport of heavy objects
Powering an electrical device
Supplying cooling water
The same equipment and substances are used over and over again
•
•
Power tools, brazing and welding kits…
Alcohol, acetone…
Future Circular Collider Study
Thomas Otto
FCC Week, Berlin, 1 June 2017
FCC Safety Strategy for the CDR
12
Exploiting the relations between data
Technology
Item
Process
Compressor
Activity/
Equipment
Substance
Hazard
Heat xchange
Supply Line
Operation
Pressure vessel
Cold burns
Helium
Cryogenics
ODH
Cryostat
Welding
Return Line
Maintenance
Welding torch
Hot surface
Ignition source
UV radiation
Tunnel
Future Circular Collider Study
Thomas Otto
FCC Week, Berlin, 1 June 2017
FCC Safety Strategy for the CDR
ShutDown
Flammable gas
Combustible
Material
13
Status 1
•
•
•
•
•
•
Hazard list completed
Identification of Technologies, Location and Phases completed
Interviews with Stakeholders of the Technologies to identify the facility breakdown
structure in progress
Assignment of Process and Hazards in Progress
Reviews with stakeholders planned
Production of Particular Hazard Reports for Location / Phase planned
Future Circular Collider Study
Thomas Otto
FCC Week, Berlin, 1 June 2017
FCC Safety Strategy for the CDR
14
What next ?
•
“Standard Best Practice” are preventive measures rendering
a hazard inoffensive
•
Decide if S.B.P. is applicable to the specific circumstances of
the hazard (location !)
•
Assess risk in the other cases
Future Circular Collider Study
Thomas Otto
FCC Week, Berlin, 1 June 2017
FCC Safety Strategy for the CDR
15
Standard Best Practice
Technology
Item
Process
Compressor
Activity/
Equipment
Substance
Hazard
S.B.P.
Heat xchange
Supply Line
Operation
Pressure vessel
Cold burns
Helium
ODH
Cryostat
Cryogenics
Welding
Return Line
Maintenance
Welding torch
Hot surface
Ignition source
UV radiation
Tunnel
Future Circular Collider Study
Thomas Otto
FCC Week, Berlin, 1 June 2017
ShutDown
FCC Safety Strategy for the CDR
Flammable gas
Self-rescue mask
Gloves
Extinguisher
Protection mask
Combustible
Material
16
Sources of Standard Best Practice
•
For the conformity of items:
•
•
For the use of substances
•
•
EU directives, Int’l standards, Industry guidelines
Material Safety Data Sheets
For the conduct of activities:
•
Practical guides from prevention organisms
• Return of experience
•
CERN needs to define accepted sources of Standard Best
Practice
Future Circular Collider Study
Thomas Otto
FCC Week, Berlin, 1 June 2017
FCC Safety Strategy for the CDR
17
Status 2
•
•
Hazard list completed
Identification of Technologies, Location and Phases completed
Interviews with Stakeholders of the Technologies to identify the facility breakdown
structure in progress
Assignment of Process and Hazards in progress
Reviews with stakeholders planned
Production of Particular Hazard Reports for Location / Phase planned
•
Identification of Standard Best Practice in progress
•
•
•
•
Future Circular Collider Study
Thomas Otto
FCC Week, Berlin, 1 June 2017
FCC Safety Strategy for the CDR
18
Thomas Otto, TE DSO
Risk Assessment
•
In the case where Standard Best Practice is
•
not available (e.g. innovative, non-standard technologies)
• not applicable (e.g. in underground environments)
• too simplistic (e.g. combined hazards of different nature)
•
the risk of a process must be assessed
•
Estimation of the probability / frequency
• Estimation of the consequences
Future Circular Collider Study
Thomas Otto
FCC Week, Berlin, 1 June 2017
FCC Safety Strategy for the CDR
19
Safety design
The process is designed with the aim of lowering the risk rating
Risk Assessment
Process
Risk
Safety design
Future Circular Collider Study
Thomas Otto
FCC Week, Berlin, 1 June 2017
FCC Safety Strategy for the CDR
20
Prescriptive Safety Design
•
Example from Fire Safety:
•
“
The length of the escape
path in a room with two
exits must not be longer
than 35 metres.
The exits must be situated
at the extremities of the
room
Application in a 8 km long accelerator tunnel ?
Future Circular Collider Study
Thomas Otto
FCC Week, Berlin, 1 June 2017
FCC Safety Strategy for the CDR
21
Performance-based Safety Design
Objective
Performance Criterion
Test Fire
Trial Design
Evaluate
Future Circular Collider Study
Thomas Otto
FCC Week, Berlin, 1 June 2017
In case of fire, no loss of human life
Nobody exposed to dangerous CO conc.
location of ignition source, combustible material,
power of heat release
building structure, occupation frequency,
safety devices (alarms)
Does trial design meet performance criteria ?
Yes: adopt trial design
No: improve trial design
FCC Safety Strategy for the CDR
22
Example of Performance based design:
Arc Tunnel Layout
Tunnel Diameter
Distance of Fire Compartment Walls
determine, in case of fire or cryogenic spill:
- spread of smoke, noxious or cryogenic gases
- evacuation path
- Safety of occupants in case of fire
Choices for these 2 parameters can be compared
in a Performance Based Safety Design Approach
Future Circular Collider Study
Thomas Otto
FCC Week, Berlin, 1 June 2017
FCC Safety Strategy for the CDR
23
Application Areas of Performance Based Design
Fire
Objective
Cryogenic release
No loss of human life
Performance criteria
Test Scenario
Trial design
Radiation Protection
No dose exceeding limit
Low temperature
Low CO conc.
Sufficiently high
temperature
Sufficient oxygen conc.
Low radiation dose rate
Fire with specified heat
and smoke output
Helium release with
specified mass flow
Beam loss with specified
intensity
Building structure with escape paths
Shielding walls
Evaluation methods
Qualitative
Analytical
Numerical
Future Circular Collider Study
Thomas Otto
FCC Week, Berlin, 1 June 2017
Experience-based estimation by professional
Zone model
Equilibrium model
Computational fluid dynamics
FCC Safety Strategy for the CDR
Moyer formula
Monte-Carlo radiation
transport
24
Status 3
•
•
•
•
•
•
•
•
•
Hazard list completed
Identification of Technologies, Location and Phases completed
Interviews with Stakeholders of the Technologies to identify the facility breakdown
structure in progress
Assignment of Process and Hazards in progress
Reviews with stakeholders planned
Production of Particular Hazard Reports for Location / Phase planned
Identification of Standard Best Practice in progress
Identification of cases for Performance-based Safety Design in progress
Qualitative Evaluation of Trial Designs planned
Future Circular Collider Study
Thomas Otto
FCC Week, Berlin, 1 June 2017
FCC Safety Strategy for the CDR
25
Conclusion
•
•
The scope of Safety in the Conceptual Design Report:
•
•
•
Hazard Register: overview of hazards in the facility
Identification of Standard Best Practice where available
Qualitative Performance-Based Design Studies where necessary to define the
envelope of the facility, for example tunnel layout
•
Technical risk assessments and performance-based designs are reserved for
the Technical Design Report
Thanks for assistance and time for discussions go to
•
Johannes Gutleber (ATS); Delphine Letant-Delrieux, Francesca Viggiano (TE);
Saverio La Mendola, André Henriques, Markus Widorski (HSE)
Future Circular Collider Study
Thomas Otto
FCC Week, Berlin, 1 June 2017
FCC Safety Strategy for the CDR
26