Promoting Excellence in Process Automation - Control Engineering

Descargas (393 KB)

Standard Automation Methodology Improves Operations and Prevents Incidents by Enabling the Sharing of Best Practices Among Operators


A.N. Vennavelli, Associate Research Engineer at FRI;
A.Y. Ogundeji, Associate Research Engineer at FRI;
and M. R. Resetarits, Technical Director at FRI.

Fractionation Research Inc. (FRI) has been studying distillation and distillation equipment for almost 60 years on behalf of its 70 members, each of whom pay an annual subscription fee for services. FRI possesses two industrial-size distillation columns (Figure 1) which are located on the Oklahoma State University campus in Stillwater, Okla.

Typically one of the following three binary separation tests is run within those two columns:

  • p- and o-xylenes from 75 mm Hga to atmospheric pressure
  • cyclohexane and n-heptane near atmospheric pressure
  • isobutane and n-butane from 100 psia to 500 psia.
Figure 1: These columns are used by FRI to test
Figure 1: These columns are used by FRI to test
and study distillation on behalf of
member companies.

During test runs, the trays and packings within the columns are subjected to a very wide range of liquid/vapor and mass transfer regimes. All of the runs are logged at steady-state conditions, but steady state is maintained only long enough to collect the relevant data. The process conditions are then modified for the next test. Tests conducted include start-up, transitions within and between various modes of operations, flooding, un-flooding, setpoint changes and shutdowns.

Unsteady state procedures at the FRI distillation units are now implemented semi-automatically using a solution called modular procedural automation (MPA). MPA was first pioneered by Yokogawa, and it was initially based on ISA88 principles. It's now being deployed using the guidelines under consideration in the ISA-106 working group. MPA is a methodology that can be implemented with virtually any modern automation system, and it is effective across a wide range of processes and industries.

As implemented by FRI using Yokogawa hardware and software, MPA provides specific on-screen instructions and information for our control room operators and technicians in areas listed in Table 1.

Table 1: MPA On-Screen Operator Instructions and Information

  1. 1. Step-by-step listing of the procedure
  2. Prompting regarding next steps
  3. Warnings regarding next steps, if applicable
  4. Actual opening and closing of valves, changes in controller setpoints and other important events
  5. History of completed steps
  6. Status monitoring of process changes

By having our operators follow these instructions and use the supplied information, MPA has produced safer operations at our test facility. Based on our experience, we believe that an MPA or similar solution might have prevented some of the largest chemical plant accidents of the last decade, as we'll detail later in this article.

Implementing MPA

During 2011, the FRI control room was augmented with a data historian and MPA supervisory software supplied by Yokogawa. These tools were loaded onto the existing Yokogawa DCS, which has been in place for several years. Figure 2 depicts our control system architecture.

The historian, which collects data every second and stores it in a database, has allowed FRI to analyze unsteady data and data from operating modes other than total reflux. FRI engineers, with assistance from Yokogawa, have used the MPA software to build and execute electronic, semi-automated procedures for star-ups, transitions and shutdowns.

Semi-automated procedures based on operational experience were initially implemented using MPA, but none of the procedure algorithms were completely satisfactory when first tested in the control room. Some of the algorithms required additional process checks, some a faster or slower rate of execution, and some others needed increased flexibility.

Figure 2: This is a typical control system architecture
Figure 2: This is a typical control system architecture for a
Yokogawa-based automation system that can control
and monitor the operation of distillation columns.

To improve these procedures, the MPA software was run in parallel with actual operations, but in an offline mode. The procedures were then adjusted to closely mimic operators' actions. This step allowed the system to pass validation tests, and at the same time, increased operator understanding and trust.

FRI's best board operators were in the control room during these trial runs, and their experience was used to modify and improve the initial MPA instructions. Our aim was to use MPA to capture the knowledge of our best operators, so that this knowledge could then be used by other operators to reproduce our best practices time after time.

Specifically, our best operating procedures were captured and disseminated to other operators via various software screens. Figure 3, for example, is a screen that the FRI board operators now see during start-ups. The left pane of the screen shows the macro start-up steps. The lower right portion shows the current micro step. The upper-right pane shows the steps that were already completed. The software allows the operator/engineer to override certain steps in the procedure if such a need should arise.

FRI's board operators are well-trained, but we find that different operators can start, change and shutdown operations in various ways. All of our operators are encouraged to fully understand the units and their operation and to think on their own. But with MPA, there is now a uniformity of starts, changes and stops. This yields improved operations, while still allowing operators to act independently if unforeseen conditions should arise.

MPA Goals at FRI

As implemented at FRI, manpower reduction is not one of the goals of the MPA methodology. In too many global control rooms, manpower reductions have already occurred, and many senior technicians have retired over the last ten years. We believe that experienced operators are a valuable asset, and thus we use MPA to assist, not eliminate, our operators. This assistance is provided by using MPA to share best practices among our operators, allowing the present generation of technicians to learn from our best operators even after they have retired.

We find that our operators appreciate the assistance provided by our MPA software. It helps them to corroborate their judgments and decisions regarding next steps. Our operators say that using MPA is "like having our best operator alongside them in the control room all of the time."

Figure 3: This screen shot depicts a semi-automated start-u
Figure 3: This screen shot depicts a semi-automated start-up procedure.

We feel that the MPA methodology might prevent future accidents at FRI and elsewhere. To verify this contention, we examined how MPA might have been used to prevent past accidents.

Could MPA Have Averted These Accidents?

The U.S. Chemical Safety Board was formed in 1998 to study major accidents, write reports and produce instructional videos. For several years, FRI has used those videos as focal points for our safety meetings.

At these meetings, one or two CSB videos are typically shown, and the attending engineers and technicians then determine relevance to the FRI operations. After discussion, a list of FRI-related action items is created, with documentation and follow-up to assure that lessons learned are correctly applied.

There were three CSB videos where we concluded that the MPA methodology might have prevented accidents: T2 Laboratories, BP Texas City and Sterigenics.

T2 Laboratories

T2 Laboratories was located in Jacksonville, Fla. T2 produced MCMT, a gasoline additive. The primary production step was an exothermic reaction in a 2500-gal. reactor that included a water jacket. In 2007, the water supply failed, and a runaway reaction resulted. At some point, the pressure build-up caused the relief valve to blow, but the relief system was too undersized and the reactor exploded.

Details regarding the accident can be found in a CSB video (Reference 1) or the associated report (Reference 2). The video describes a lone board operator who did not know what to do when the water jacket water supply failed. He called off-site engineers for help, and they rushed to the plant, but reached it too late.

If the T2 control room had used an MPA solution, the following would have been possible:

  1. Prompts could have been provided to the board operator regarding the back-up water supply.
  2. Corrective action steps for this type of a condition could have been programmed as screen prompts or as automated flow rate and valve changes.
  3. The software could have set off evacuation alarms.

The knowledge of the plant's most-experienced people could have been provided to the board operator via MPA, particularly as temperature excursions had occurred with the reactor before. The previous excursions could have been studied using an historian, and the lessons learned could have been implemented within MPA and made available to the operator.

BP Texas City Isomerization Unit

Details regarding this accident can be found in a CSB video (Reference 3) or the associated report (Reference 4). This accident was similar to the T2 Laboratories incident in that a very large burden seemed to fall upon a single operator. Regarding BP Texas City, the report stated, "Restructuring following the merger resulted in a significant loss of people, expertise and experience." In retrospect, some of that experience could have been captured using MPA and then made available to the operator.

The BP accident occurred in 2005 in an isomerization unit. When the lone operator came on shift, he had just a single line of input in the log book from the previous operator: "Starting up the Isom Unit." Unfortunately, the supervisor of the newly arrived operator had been called out of the control room for an extended period to attend to a family emergency.

The newly arrived operator needed to continue to start the isomerization unit and control two other units, all with virtually no input and assistance. Due to a malfunctioning liquid level alarm, he had no idea whether he was starting with six feet or 175 feet of liquid in the bottom of the raffinate splitter tower. The truth proved to be closer to the latter, and the tower overflowed into the blow-down drum, and the hot gasoline then overflowed and ignited.

If the BP control room had used MPA, the following would have been possible:

  1. The newly arrived operator would have had on-screen information regarding all of the steps that the previous shifts had taken, including the exact times of those steps.
  2. A safety warning could have been provided on-screen regarding the over-flowing of the raffinate splitter tower (which had already happened a few times in the past).
  3. Out-of-date procedures would have been necessarily updated for the sake of the programming of the new software.
  4. The MPA software could have shut the unit down in time to avoid the explosion. If MPA had been correctly implemented, the lone operator of the three units would not have been alone.

Sterigenics Oxidizer Accident

This accident was described in a CSB video (Reference 5) and in the associated report (Reference 6). This accident did not occur because an operator was alone, but because a standardized procedure was not obeyed, and because the operators did not understand the ramifications of diverting from that procedure.

The Sterigenics plant was located in Ontario, Calif. Medical equipment was sterilized in large chambers using ethylene oxide gas. Subsequent to the sterilization, according to procedure, the ethylene oxide gas was purged from the chambers using a three-step process. On the day of the accident, one of those steps was purposely skipped. As a result, a concentrated ethylene oxide gas stream was sent to the oxidizer, and the chamber exploded.

If the Sterigenics control room had used MPA, the software could have provided a message to the operators along these lines, "If Step 2 is skipped, a concentrated ethylene oxide gas stream will flow to the oxidizer and an explosion might result." Upon seeing this message, the operators may very well have taken corrective action.

With MPA, Operators Are Never Alone

Regardless of the reasons, the control rooms of the western world do not seem to be as well-manned as those of 20 or 40 years ago. To address this situation, MPA can be used to transfer the knowledge and experience of the best remaining operators, engineers and technicians to new operators. This makes new operators more effective and efficient. When MPA is correctly implemented, no operator needs to start, run or stop an operating unit alone.


  1. Explosion at T2 Laboratories, Disc 2, #4, U.S. Chemical Safety and Hazard Investigation Board, Safety videos 2005-2010.
  2. U.S. Chemical Safety and Hazard Investigation Board, Investigation Report (
  3. Anatomy of a Disaster, Disc 1, #5, U.S. Chemical Safety and Hazard Investigation Board, Safety videos 2005-2010.
  4. U.S. Chemical Safety and Hazard Investigation Board, Investigation Report (
  5. Ethylene Oxide Explosion at Sterigenics, Disc 1, #12, U.S. Chemical Safety and Hazard Investigation Board, Safety videos 2005-2010.
  6. U.S. Chemical Safety and Hazard Investigation Board, Investigation Report (

Copyright © 2004-2013 Control Global All rights reserved
P: 630-467-1300 | 555 West Pierce Rd., Suite 301, Itasca, IL 60143


  • Petroquímica

    Las necesidades de las empresas petroquímicas son muy diversas. Para salir adelante en el mercado altamente competitivo de hoy, los productores se esfuerzan por mejorar la calidad y la productividad. Yokogawa ofrece soluciones a su medida para estas necesidades con base en su larga y amplia experiencia en este campo.

    Leer Más
  • Productos a base de químicos

    Yokogawa ha estado sirviendo al mercado de productos químicos a granel globalmente y ha obtenido reconocimiento como líder en este mercado. Con productos, soluciones y especialización en la industria, Yokogawa entiende su mercado y las necesidades de producción y trabajará con usted para proporcionarle una solución confiable y rentable durante el ciclo de vida de su planta. 

    Leer Más
  • Química

    Las plantas químicas dependen de procesos de producción continua y por lotes, cada una de los cuales impone diferentes exigencias para un sistema de control. Un proceso continuo exige un sistema de control robusto y estable que no falle y provoque el cierre de una línea de producción, mientras que en un proceso por lotes el énfasis se centra en tener un sistema de control que permita una gran flexibilidad para realizar ajustes a fórmulas, procedimientos y otros elementos. Ambos tipos de sistemas necesitan ser administrados en el historial de calidad del producto disponible, así como tener la capacidad de ejecutar operaciones no rutinarias. Con el respaldo de su extenso portafolio de productos, un equipo de experimentados ingenieros en sistemas y una red global de ventas y servicio, Yokogawa ofrece una solución para cada proceso productivo.

    Leer Más
  • Refinación

    En el siempre cambiante mercado, las refinerías no solo son vistas como unidades de procesamiento de crudo, sino también como centros de beneficios. Al mismo tiempo, hay una clara conciencia de la necesidad de la seguridad en este tipo de instalaciones. Una solución de la producción total que abarca la planificación, programación, administración y control es necesaria para lograr los objetivos a largo plazo para la rentabilidad, la eficiencia y la protección del medio ambiente. Con años de experiencia en el campo de la automatización, Yokogawa puede traer soluciones totales accesibles para mejorar la operatividad y un mundo más limpio.

    Leer Más
  • Transporte, distribución y comercialización de petróleo y gas

    La industria de la refinación, comercialización y distribución de petróleo y gas ha estado enfrentando un número cada vez mayor de retos en años recientes. Entre ellos, las características cambiantes de la materia prima a procesar, el envejecimiento de las instalaciones y los equipos de procesos, el creciente costo de la energía, la falta de operadores de planta capacitados que puedan operar una refinería de manera segura y eficiente y los requisitos constantemente cambiantes del mercado y de los clientes.

    Con el paso de los años, Yokogawa ha formado alianzas con muchas compañías de refinación, comercialización y distribución para proveer soluciones industriales enfocadas en resolver estos retos y problemas. Las soluciones VigilantPlant de Yokogawa han ayudado a los propietarios de plantas a alcanzar una máxima rentabilidad y seguridad sostenible dentro de sus plantas.

    Leer Más

Have Questions?

Contact a Yokogawa Expert to learn how we can help you solve your challenges.