79 / 101
Local Fuel plc - Shoreham Oil Terminal
Safety Instrument System Functional Safety Assessment Stage 5
P & I Design Ltd
DOCUMENT NO: LF364100_RPT
2 Reed Street, Thornaby, UK, TS17 7AF
ISSUE: B DATE: 07.06.2016
Tel: + 44 (0)1642 617444
PAGE 30 OF 51
Fax: + 44 (0)1642 616447
www.pidesign.co.ukTank 1:
Sensor – Drexelbrook Intellipoint – Tag Number – LE 01
Trip Amplifier – Pepperl & Fuchs KFD2 – Tag Number – LS 01
Safety Relay – PILZ PNOZ-S2 – Tag Number – R252
Tank 2:
Sensor – Drexelbrook Intellipoint – Tag Number – LE 02
Trip Amplifier – Pepperl & Fuchs KFD2 – Tag Number – LS 02
Safety Relay – PILZ PNOZ-S2 – Tag Number – R292
Tank 3:
Sensor – Drexelbrook Intellipoint – Tag Number – LE 03
Trip Amplifier – Pepperl & Fuchs KFD2 – Tag Number – LS 03
Safety Relay – PILZ PNOZ-S2 – Tag Number – R332
Tank 4:
Sensor – Drexelbrook Intellipoint – Tag Number – LE 04
Trip Amplifier – Pepperl & Fuchs KFD2 – Tag Number – LS 04
Safety Relay – PILZ PNOZ-S2 – Tag Number – R372
The final element wiring comprises a 24Vdc feed fed from XV162 Rotork actuator into Tank
1 Safety Relay which has two positively guided contacts per output, the safety function utilises
channel three of the relay. The output from this relay is then fed in series through the safety
relays of Tank 2, 3 and 4 all having two positively guided contacts , the output from Tank 4
safety relay is fed back to the ESD circuit of the Rotork actuator.
Each of the safety relays, R252. R292, R332 and R372 require resetting following de-
energisation, this is achieved by a reset pushbutton operating onto a relay R805. This ensures
that following an activation the system cannot re-open any valve without firstly all level
sensors being in their normal mode.
The final element sub-system comprises of an isolator switch located in the field then to the
rotork actuator. This isolator isolates the mains supply to the valve.
Gasoline Pipeline:
Isolator – Tag Number – HS162
Rotork Actuator and Ball Valve – XV162
There is no facility for overriding the system and it is noted that any spurious trip or sensor
fault will result in total shutdown of all four tanks as any sensor activation or fault shuts down
the common import valve.
In addition to the shutdown facility of the logic solver with regard to the common pipeline
valve, the logic solver has future enhancement built into by the previous owners in order to
provide for closing of a tankside inlet valve and return flow from the VRU. In addition the
logic solver provides for closing the tankside export valve and VRU feed valve on activation
of the ESD.
It is felt that it would be unpractical to remove this enhancement, in line with the current
operating methods of Local Fuel, however, it is felt that a simplified overview drawing