machine protection – issc 2010b. toddaugust 2010 thanks to : te/mpe/mi, cern machine protection...
TRANSCRIPT
Machine Protection –
ISSC 2010B. Todd August 2010
Thanks to : TE/MPE/MI, CERN Machine Protection Panel, et al
0v3
A Future Safety System?
CERN
[email protected] Machine Protection – A Future Safety System?
CERN
Founded in 1954Funded by the European Union
20 Member States
8 Observer States and Organisations
35 Non-Member States…Japan, Russia, USA…580 Institutes World Wide
2500 Staff8000 Visiting Scientists …Australia, Canada, New Zealand…
…most of the EU…
European Centre for Nuclear ResearchConseil Européen pour la Recherche Nucléaire
Pure Science – Particle Physics
1. Pushing the boundaries of research, physics beyond the standard model.2. Advancing frontiers of technology.
3. Forming collaborations through science4. Educating the scientists and engineers of tomorrow
CERN
[email protected] Machine Protection – A Future Safety System?
CERN
[email protected] Machine Protection – A Future Safety System? 4
We use the world’s largest and most complex scientific instruments to study the basic constituents of matter.
These instruments are particle accelerators and detectors. Accelerators boost beams of particles to high energies before they are
made to collide with each other or with stationary targets. Detectors observe and record the results of these collisions.
Our flag-ship project is the Large Hadron Collider…
CERN
[email protected] Machine Protection – A Future Safety System?
CERNCERN Accelerator ComplexLake Geneva
GenevaAirport
CERN LAB 1 (Switzerland)
CERN LAB 2 (France)
CERN
[email protected] Machine Protection – A Future Safety System?
CERNCERN Accelerator ComplexLake Geneva
GenevaAirport
CERN LAB 1 (Switzerland)
CERN LAB 2 (France)
Proton Synchrotron(PS)
Super Proton Synchrotron(SPS)
Large Hadron Collider(LHC)
The Large Hadron Collider
CERN
[email protected] Machine Protection – A Future Safety System?CERN, the LHC and Machine Protection
CERN
9 of 23
CERN Accelerator Complex
Large Hadron Collider(LHC)
Beam-1 Transfer Line (TI2)
Beam-2 Transfer Line(TI8)
Beam Dumping Systems
~ 9 km~ 5.5 miles
Super Proton Synchrotron(SPS)
150m underground, 100us for one turn, 1e12 protons / injection
CERN
[email protected] Machine Protection – A Future Safety System?
CERNCERN Accelerator Complex
CMS
ALICE
ATLAS
LHC-b
CERN
[email protected] Machine Protection – A Future Safety System?
CERN
[email protected] Machine Protection – A Future Safety System?
ATLAS – A Toroidal LHC ApparatuS
11
CERN
[email protected] Machine Protection – A Future Safety System?
ATLAS – A Toroidal LHC ApparatuS
12
CERN
[email protected] Machine Protection – A Future Safety System? 14
Why the LHC?
[11]
material costs of the LHC and experiments ≈$4 billion
The Higgs BosonGravity is such a weak force – can it be explained?
high intensity = more ‘events’high energy = more massive particles possible
LHC Beam Intensity = 3 x 1014 pLHC Energy = 7 TeV
Dark Matter / Energy96% of mass in the universe is unaccounted for
Do Weakly Interacting Massive Particles (WIMPs) account for this?
Beyond the Standard ModelString Theory / Super Symmetry / Super String Theory / A Theory of Everything?
We need some clues!
collide two beams…
CERN
[email protected] Machine Protection – A Future Safety System?
~109 proton-proton collisions per second
Massive amounts of data generated – all must be processednew particles are rare – only a few events per day
Collisions
15
[3]
CERN
[email protected] Machine Protection – A Future Safety System? 16
Stored energy in the magnet circuits is 9 GJ
Technological Challenges…To see the rarest events…
LHC needs high luminosity of 1034 [cm-2s-1]3 x 1014 p per beam
… to get 7 TeV operation…LHC needs 8.3 Tesla dipole fields with circumference of 27 kms (16.5 miles)
… to get 8.3 Tesla …LHC needs super-conducting magnets <2°K (-271°C)
with an operational current of ≈13kAcooled in super fluid helium
maintained in a vacuum
1 ppm
Collisions generatePetaBytes of data
Per year
two orders of magnitudehigher than others
World’s largest machine
[11]
A magnet will QUENCHwith milliJoule
deposited energy
Stored energy per beam is 360 MJ
10x less pressure than on moon surface
CERN
[email protected] Machine Protection – A Future Safety System? 17
Stored energy in the magnet circuits is 9 GJ
Technological Challenges
[11]
Stored energy per beam is 360 MJ
Kinetic Energy of 200m Train at 155 km/h ≈ 360 MJ
CERN
[email protected] Machine Protection – A Future Safety System? 18
Stored energy in the magnet circuits is 9 GJ
Technological Challenges
[11]
Stored energy per beam is 360 MJ
Kinetic Energy of 200m Train at 155 km/h ≈ 360 MJ
Kinetic Energy of Aircraft Carrier at 50 km/h ≈ 9 GJ
CERN
[email protected] Machine Protection – A Future Safety System? 19
Protection Function
10-20x energy per magnet of TEVATRONmagnet quenched = hours downtime
many magnets quenched = days downtime
(few spares)
100x energy of TEVATRON
Emergency DischargeMagnet EnergyPowering Protection:
Beam DumpBeam EnergyBeam Protection:
magnet damaged = $1 million, months downtimemany magnets damaged = many millions, many months downtime
0.000005% of beam lost into a magnet = quench0.005% beam lost into magnet = damage
Failure in protection – complete loss of LHC is possible
CERN
[email protected] Machine Protection – A Future Safety System? 20
Protection Function
100x energy of TEVATRON
Beam DumpBeam EnergyBeam Protection:
0.000005% of beam lost into a magnet = quench0.005% beam lost into magnet = damage
Failure in protection – complete loss of LHC is possible
8m long absorber Graphite = 800°C
Concrete ShieldingBeam is ‘painted’
diameter 35cm
CERN
[email protected] Machine Protection – A Future Safety System? 21
Protection Function
100x energy of TEVATRON
Beam DumpBeam EnergyBeam Protection:
0.000005% of beam lost into a magnet = quench0.005% beam lost into magnet = damage
Failure in protection – complete loss of LHC is possible
To protect against fastest failure modes ≈ 400 µs over 27km
>80 us <150 us <90 us 90 us
unacceptable danger exists
Plant / Sensor Beam Interlock System Beam Dump
DETECT COMMUNICATE SYNCHRONISE ABORT
beam dump completed
CERN
[email protected] Machine Protection – A Future Safety System? 22
LHC Equipment and Control System
[11]
Vacuum Pressure
Vacuum Pump Speed Control
Sensors Plant
ActuatorsFulfill operational requirementsPlant Systems:
Vacuum Example: • maintain correct
pressure
CERN
[email protected] Machine Protection – A Future Safety System? 23
Sensors
Plant Protection
Plant
Actuators
LHC Equipment and Control System
[11]
Vacuum Pressure
Vacuum Pump Speed Control
Vacuum Pressure
Vacuum Valve Actuator
Ensure plant stays within limitsPlant Protection:
Fulfill operational requirementsPlant Systems:
Vacuum Example: • maintain correct pressure• bad pressure = close valves
CERN
[email protected] Machine Protection – A Future Safety System? 24
Plant Protection
Plant
Sensors Actuators
LHC Equipment and Control System
[11]
Vacuum Pump Speed Control
Vacuum Pressure
Vacuum Valve Actuator
• Sensors, Actuators and Process may be combined
• No rules regarding combination• Must meet functional requirement
Ensure plant stays within limitsFulfill operational requirements
Plant Systems:
CERN
[email protected] Machine Protection – A Future Safety System? 25
LHC Equipment and Control System
[11]
Safety
Plant Protection
Plant
Sensors Actuators
Access doors
Beam absorbers
personnel safebut machine at risk
People in perimeter – stop machinePersonnel Safety System:
• cannot be merged with plants• Must meet legal requirement
CERN
[email protected] Machine Protection – A Future Safety System? 26
Powering Protection
Beam Protection
Safety
Plant Protection
Plant
Sensors Actuators
LHC Equipment and Control System
[11]
Prevent damage to machinePrevent undue stress to components
Machine Protection System:
• No rules regarding implementation• Must meet functional requirement
CERN
[email protected] Machine Protection – A Future Safety System? 27
LHC Equipment and Control System
[11]
Powering Protection
Beam Protection
Safety
Plant Protection
Plant
Sensors Actuators
Powering powering protection closely coupled to powering plant
Prevent damage to machinePrevent undue stress to components
Machine Protection System:
• No rules regarding implementation• Must meet functional requirement
CERN
[email protected] Machine Protection – A Future Safety System? 28
Plant Protection
Plant
Sensors Actuators
Powering Protection
Powering
Beam Protection
Actuators
SafetySensors
LHC Equipment and Control System
[11]
Personnel Safety System:
Plant Systems:
Machine Protection System:
danger exists – extract energydanger will exist – extract energy
CERN
[email protected] Machine Protection – A Future Safety System? 29
LHC Equipment and Control System
[11]
Personnel Safety System:
Plant Systems:
Machine Protection System:
Plant Protection
Plant
Sensors Actuators
Powering Protection
Powering
Beam Protection
Actuators
SafetySensors
danger exists – extract energydanger will exist – extract energy
Beam protection inputs from• Safety system • Plant systems • Dedicated sensors
CERN
[email protected] Machine Protection – A Future Safety System? 30
Developing the Machine Protection SystemWhy am I here? … machine protection ≠ safety
But…cost of protection system failure is enormous
LHC is (just) the first machine with these energy risks
High Energy Physics community has to learn to deal with the challengesSystem-safety ideas, concepts and approaches have to be absorbed by CERN
LHC is its own prototype:• systems involved protection are unique
• certain technologies used have never been tried on this scale before
I can argue that the MPS is fit for purpose
My mission:rigorous development of machine protection as if it were a safety system
But:can our argument-based approach be accepted by system-safety?
CERN
[email protected] Machine Protection – A Future Safety System? 31
Developing the Machine Protection SystemCERN’s machine protection system development process…
could this ever be considered as a safety-system?
• prior knowledge
• assumptions
• simulations
• failure cases
• solutions for every failure case
• testing
• Implementation
• verification
It took more than ten years to address all of the issues for the LHC…And we’re still learning…
CERN
[email protected] Machine Protection – A Future Safety System? 32
The Machine Protection System Today
PowerInterlock
Controllers
BeamInterlockSystem
Beam Dumping System
Quench Protection System
Power Converters
Cryogenics Auxiliary Controllers
Warm Magnets
Experiments
Access System
Beam Loss Monitors (Arc)
Collimation System
Radio Frequency System
Injection Systems
Vacuum System
Access System
Beam Interlock System
Control System
Essential Controllers
General Emergency Stop
Uninterruptible Supplies
Discharge Circuits
Beam Loss Monitors (Aperture)
Beam Position Monitor
Beam Lifetime Monitor
Fast Magnet Current Changes
Beam Television
Control Room
Software Interlock System
TimingSystemPost Mortem
Safe Machine Parameters
Powering Protection Beam Protection
CERN
[email protected] Machine Protection – A Future Safety System? 33
The Machine Protection System Today
PowerInterlock
Controllers
BeamInterlockSystem
Beam Dumping System
Quench Protection System
Power Converters
Cryogenics Auxiliary Controllers
Warm Magnets
Experiments
Access System
Beam Loss Monitors (Arc)
Collimation System
Radio Frequency System
Injection Systems
Vacuum System
Access System
Beam Interlock System
Control System
Essential Controllers
General Emergency Stop
Uninterruptible Supplies
Discharge Circuits
Beam Loss Monitors (Aperture)
Beam Position Monitor
Beam Lifetime Monitor
Fast Magnet Current Changes
Beam Television
Control Room
Software Interlock System
TimingSystemPost Mortem
Original Specification
(2000)
Current Specification
Safe Machine Parameters
CERN
[email protected] Machine Protection – A Future Safety System?
Install magnets
LEP
Upgrade
1994 2005 20072002
September 10th
first circulating beamCERN approves
LHC project
November 20th second startup
3.5 TeV 7.0 TeV
Repair
November 30th
1.18 TeV
November 23rd
450 GeV
2010 2011 2012 20132008 2009
The Story So Far
September 18th
first lesson learned
CERN
[email protected] Machine Protection – A Future Safety System?
Install magnets
LEP
Upgrade
1994 2005 20072002
September 10th
first circulating beamCERN approves
LHC project
November 20th second startup
3.5 TeV 7.0 TeV
Repair
November 30th
1.18 TeV
November 23rd
450 GeV
2010 2011 2012 20132008 2009
September 18th
first lesson learned
CERN
[email protected] Machine Protection – A Future Safety System? 36
The Future – Linear Accelerators
CLIC – Compacy LInear Collider
LHC results = electron / positron collider required for detailed study
CERN is designing CLIC machine protectionVarious Institutes designing ILC machine protection
Only one of these likely to be built – depends on what LHC discovers
ILC – International Linear Collider
• logical next step for physics• specification to be finished circa 2015• > $10 Billion machines• 30-50 km long• beam energy densities 1000x higher than previous e-e+ machines• beam energy 10000x above component damage limit
CERN
[email protected] Machine Protection – A Future Safety System?
Large Hadron Collider(LHC)
Compact Linear Collider(CLIC)
CERN
[email protected] Machine Protection – A Future Safety System? 38
The Future – ITER
[11]
ITER – International Thermonuclear Experimental Reactor
• first steps of 50-year plan• prove / disprove fusion feasibility for commercialisation• > $10 Billion machine• > 100 GJ of stored magnetic energy• 500MW of fusion for 1000 seconds vs state-of-the-art: 16MW of fusion for 1 second (Joint European Torus)
Tritium – Deuterium Fusion
many synergies with LHC challengesCERN is consulting on the design of the ITER Machine Protection…
+ → +
Deuterium Tritium Neutron Helium
+ Energy
CERN
[email protected] Machine Protection – A Future Safety System? 39
The Future – ITER
[11]
ITER – International Thermonuclear Experimental Reactor
• first steps of 50-year plan• prove / disprove fusion feasibility for commercialisation• > $10 Billion machine• > 100 GJ of stored magnetic energy• 500MW of fusion for 1000 seconds vs current record: 16MW of fusion for 1 second (Joint European Torus)
Tritium – Deuterium Fusion
many synergies with LHC challengesCERN is consulting on the design of the ITER Machine Protection…
+ → +
Deuterium Tritium Neutron Helium
+ Energy
CERN
[email protected] Machine Protection – A Future Safety System?
An Outlook
40
LHC is its own prototype, a unique machine, ≈30 years in the making
• key protection systems involved are one-of-a-kind• LHC is the first machine with such massive built-in destruction potential
• cost of failure is extreme
we have used an argument based approach to address the issueswe’ve had positive and negative experiences
Could stake-holders demand some “compliance” from us to insure their investment?
My mission: rigorous development of machine protection as if it were a safety system.Keep the deep-thinking approach, incorporate system-safety techniques
Future machines: bigger, more powerful, more challengingprotection already crucial, even in first design drafts
Ultimate goal: certification. Wishful thinking?
High Energy Physics community has to learn to deal with the challenges
“Machine Protection – A Future Safety System?” – an open question to your community
CERN
[email protected] Machine Protection – A Future Safety [email protected] 41Machine Protection – A Future Safety System?
CERN
Fin
Thank you for your attention