Fault propagation behavior study and root cause reasoning with dynamic Bayesian network based framework

The Bhopal disaster was a gas leak incident in India, considered the world's worst industrial disaster happened around process facilities. Nowadays the process facilities in petrochemical industries have becoming increasingly large and automatic. There are many risk factors with complex relationships among them. Unfortunately, some operators have poor access to abnormal situation management experience due to the lack of knowledge. However these interdependencies are seldom accounted for in current risk and safety analyses, which also belonged to the main factor causing Bhopal tragedy. Fault propagation behavior of process system is studied in this paper, and a dynamic Bayesian network based framework for root cause reasoning is proposed to deal with abnormal situation. It will help operators to fully understand the relationships among all the risk factors, identify the causes that lead to the abnormal situations, and consider all available safety measures to cope with the situation. Examples from a case study for process facilities are included to illustrate the effectiveness of the proposed approach. It also provides a method to help us do things better in the future and to make sure that another such terrible accident never happens again.     

An optimal level of dust explosion risk management: Framework and application

The current research provides guidance on the prevention and mitigation of dust explosion using a Quantitative Risk Management Framework (QRMF). Using concepts drawn from previous studies, the framework consists of three main steps: (i) a new combined safety management protocol, (ii) the use of DESC (Dust Explosion Simulation Code) and FTA (Fault Tree Analysis) to assess explosion consequences and likelihood, respectively, and (iii) application of the hierarchy of controls (inherent, engineered and procedural safety). QRMF assessment of an industrial case study showed that the original process was at high risk. DESC simulations and Probit equations determined the destructive percentages. FTAs revealed high probabilities of explosion occurrence; in addition, detailed individual and societal risks calculations were made, before and after the framework was applied. Based on the hierarchy of controls technique, the framework showed significant risk reduction to the point where the residual risk was acceptable for the process.     

Quantitative assessment in safety reports of the consequences from the detonation of solid explosives

Safety reports are mandatory documents in member states of European Union whenever any threshold limits of amounts of either stored or processed hazardous substances are exceeded. After a short introduction to EU Seveso Directives on major-accident hazards involving dangerous substances and to the transposition and implementation by member states, with a brief comment on last 2012/18/EU Directive (also known as Seveso III directive), the paper focuses on drafting of safety reports for industrial activities involving solid explosives. Specifically, the quantitative assessment of consequences from detonation is tackled respect to the side-on overpressure and the debris production. Both direct and inverse problems are illustrated to determine respectively the overpressure value at a given distance, and the explosive amount that allows respecting the regulations. Their solution is based on either analytic or numerical techniques and being based on recent scientific publications on the matter either evaluates or zeroes nonlinear algebraic equations. The availability of these equations avoids grounding the consequences assessment on diagrams and nomograms that otherwise would lead to interpretation and usage errors besides avoiding the automatic solution of the inverse problem. The paper focuses also on details such as embankment, crater, munitions, rocket propellant, building structure, and wall material that, at different levels, play a role in the assessment of detonation consequences. A discussion on debris formation, the available literature, and the evaluation of the impact probability of fragments on both fixed and moving targets closes the paper.     

Uncertainties in a risk management context in early phases of offshore petroleum field development

The current risk management approach for the Norwegian offshore petroleum industry came into effect in 2001 and has been stable with minor changes for 15 years. Relatively few new installations were slated for development until quite recently, and several new projects have been started in the last few years. The paper considers the risk management approach in the pre-FEED phase and builds on two case studies selected from the most recent cases. These case studies have been evaluated with respect to how uncertainties are considered in the early phase, based on the submission of the Plan for Development and Operation, their evaluations by authorities and the supporting documents. Both case studies involve new concepts for which there is no experience from similar environments and/or water depths. In spite of what could have been expected, the case studies conclude that uncertainties have not been in focus at all during concept development. This appears to be definitely the case for the licensees, but also to be the case for the authorities. Some suggestions are presented for what could have been considered by the licensees and authorities.     

Inherently safer sustained casing pressure testing for well integrity evaluation

This paper presents the use of a model to predict sustained casing pressure (SCP), from early pressure buildup data, as a basis for inherently safer well integrity testing. Inherently safer principles aim to eliminate or reduce the hazards by design rather than by using protective features. SCP, a well integrity issue exhibited in many wells, is any measurable pressure that rebuilds after being bled down and attributable to causes other than artificially applied pressure or temperature fluctuations in the well. Intrusion of gas, resulting in SCP, can occur because of poor cement bond in the casing or cement deterioration. Gas entering the annulus migrates to the wellhead and represents a hazard due to increased wellhead pressure and the gas inventory. Compromised well integrity can have catastrophic consequences on both environmental and safety aspects.Most regulations require the monitoring, testing and, eventually, the elimination of SCP. However, test data analysis is predominantly qualitative and limited to arbitrary criteria. Due to the high percentage of wells that present SCP, accurate, safe and preferably fast testing methods are needed. This paper implements an analytical model, rooted in the transport processes and thermodynamics of the system, to predict pressure profiles and gas accumulation during SCP testing from early-time pressure buildup data. The amount of gas accumulated during different testing criteria, being 1) current practices and 2) early diagnostic by the analytical model, is calculated and compared. Results show that using the analytical model as a predictive tool, testing time is reduced significantly, thereby limiting the amount of gas accumulated and reducing the risk. This makes the testing procedure inherently safer as well as less time consuming.     

Root causes of hydrocarbon leaks on offshore petroleum installations

Hydrocarbon leaks on offshore installations may result in severe consequences to personnel, to the environment and to assets. In order to prevent such leaks, it is crucial to understand their root causes. The objective of this paper is to study the circumstances of hydrocarbon leaks on the Norwegian continental shelf (NCS). In the study, all reported hydrocarbon leaks from process inventories on all offshore installations on the NCS, with an initial leak rate higher than 0.1 kg/s in the period 2008–2014, have been considered. This includes 78 hydrocarbon leaks, of which about 60% have occurred during manual intervention on normally pressurized systems. The dominating activity when leaks occur is preventive maintenance. A significant fraction of the leaks occur during the preparation for maintenance; such a preparation is typically carried out during the night shift. About half of the leaks are associated with wellhead area and manifolds, separation and compression systems. A substantial fraction of the leaks can be associated with verification faults, dominated by the failure to comply with procedural requirements that are needed to carry out independent verification.     

Analysis of underlying causes of investigated loss of containment incidents in Dutch Seveso plants using the Storybuilder method

In the Netherlands there are around 400 “Seveso” sites that fall under the Dutch Major Hazards Decree (BRZO) 1999. Between 2006 and 2010 the Dutch Labour Inspectorate's Directorate for Major Hazard Control completed investigations of 118 loss of containment incidents involving hazardous substances from this group. On the basis of investigation reports the incidents were entered in a tailor-made tool called Storybuilder developed for the Dutch Ministry of Social Affairs and Employment for identifying the dominant patterns of technical safety barrier failures, barrier task failures and underlying management causes associated with the resulting loss of control events. The model is a bow-tie structure with six lines of defence, three on either side of the central loss of containment event. In the first line of defence, failures in the safety barriers leading to loss of control events were primarily equipment condition failures, pre start-up and safeguarding failures and process deviations such as pressure and flow failures. These deviations, which should have been recovered while still within the safe envelope of operation, were missed primarily because of inadequate indication signals that the deviations have occurred. Through failures of subsequent lines of defence they are developing into serious incidents. Overall, task failures are principally failures to provide adequate technical safety barriers and failures to operate provided barriers appropriately. Underlying management delivery failures were mainly found in equipment specifications and provisions, procedures and competence. The competence delivery system is especially important for identifying equipment condition, equipment isolation for maintenance, pre-start-up status and process deviations. Human errors associated with operating barriers were identified in fifty per cent of cases, were mostly mistakes and feature primarily in failure to prevent deviations and subsequently recover them. Loss of control associated with loss of containment was primarily due to the containment being bypassed (72% of incidents) and less to material strength failures (28%). Transfer pipework, connections in process plant and relief valves are the most frequent release points and the dominant release material is extremely flammable. It is concluded that the analysis of a large number of incidents in Storybuilder can support the quantification of underlying causes and provide evidence of where the weak points exist in major hazard control in the prevention of major accidents.     

Tools for an enhanced solvent properties screening in the early stages of pharmaceutical process development

The objective of this research was the implementation of tools for the evaluation of solvents trough property screening in the early stages of process development. An important feature of the tools is that the implementation of indexes, scores, or weights is avoided. Information already available from the literature was stored in a database in order to turn raw data into decision making information. As a result, a solvent radar chart, a solvent representation table, and a solvent telescopying tool were developed in an ASP.NET application. The synthesis of Propranolol was used as study case in order to explore the selection of solvents in the early stages of process development. The replacement of diethyl ether was possible in the extraction step, while solvent choices were detected for potential telescoping for extraction and crystallisation steps. Solubility was found as a critical parameter in telescoping analysis. The methodology proposed enhanced the view towards a more holistic perspective and a more robust solvent screening process. As a consequence, the next steps into solvent evaluation and process development can be reduced.     

Pipeline leakage detection and isolation: An integrated approach of statistical and wavelet feature extraction with multi-layer perceptron neural network (MLPNN)

Leakage diagnosis of hydrocarbon pipelines can prevent environmental and financial losses. This work proposes a novel method that not only detects the occurrence of a leakage fault, but also suggests its location and severity. The OLGA software is employed to provide the pipeline inlet pressure and outlet flow rates as the training data for the Fault Detection and Isolation (FDI) system. The FDI system is comprised of a Multi-Layer Perceptron Neural Network (MLPNN) classifier with various feature extraction methods including the statistical techniques, wavelet transform, and a fusion of both methods. Once different leakage scenarios are considered and the preprocessing methods are done, the proposed FDI system is applied to a 20-km pipeline in southern Iran (Goldkari-Binak pipeline) and a promising severity and location detectability (a correct classification rate of 92%) and a low False Alarm Rate (FAR) were achieved.     

Validation of the UN test method N.5

Many substances react with water in such a way that flammable gases are formed. For transport issues this reaction may possess a considerable hazard especially if the cargo is wetted by rain or by water from other sources. In the UN Recommendations on the Transport of Dangerous Goods these kinds of problems are addressed. The UN test N.5 “Test method for substances which in contact with water emit flammable gases” corresponds to this hazard. Classification according to the test method is done by measurement of the gas evolution rate of the flammable gas by any suitable procedure. At BAM a gravimetric approach is used to measure the gas evolution rate. In this paper we present the evaluation of the apparatus by means of an absolute calibration routine utilizing a reaction where a known amount of gas is produced as well as the evaluation of important parameters influencing the gas evolution rate using different substances. It can be shown that the apparatus is capable of measuring absolute gas volumes as low as 6 mL with an acceptable error of about 17% as determined from the reaction of Mg with demineralized water.     

Distributed generation by energy from waste technology: A life cycle perspective

Municipal Solid Waste in general and its organic fraction in particular is a potential renewable and non-seasonal resource. In this work, a life cycle assessment has been performed to evaluate the environmental impacts of two future scenarios using biogas produced from the organic fraction of municipal solid waste (OFMSW) to supply energy to a group of dwellings, respectively comprising distributed generation using solid oxide fuel cell (SOFC) micro-CHP systems and condensing boilers. The London Borough of Greenwich is taken as the reference case study. The system is designed to assess how much energy demand can be met and what is the best way to use the digestible waste for distributed energy purposes.The system is compared with two alternative scenarios fuelled by natural gas: a reference scenario, where the electricity is supplied by the grid and the heat is supplied from condensing boilers, and a fuel cell micro-CHP system. The results show that, although OFMSW alone can only supply between 1% and 4% of the total energy demand of the Borough, a saving of ∼130 tonnes of CO₂ eq per year per dwelling equipped with micro-CHP is still achievable compared with the reference scenario. This is primarily due to the surplus electricity produced by the fuel cell when the micro-CHP unit is operated to meet the heat demand. Use of biogas to produce heat only is therefore a less desirable option compared with combined heat and power production. Further investigation is required to identify locally available feedstock other than OFMSW in order to increase the proportion of energy demand that can be met in this way.     

A CFD based explosion risk analysis methodology using time varying release rates in dispersion simulations

A full probabilistic Explosion Risk Analysis (ERA) is commonly used to establish overpressure exceedance curves for offshore facilities. This involves modelling a large number of gas dispersion and explosion scenarios. Capturing the time dependant build up and decay of a flammable gas cloud size along with its shape and location are important parameters that can govern the results of an ERA. Dispersion simulations using Computational Fluid Dynamics (CFD) are generally carried out in detailed ERA studies to obtain these pieces of information. However, these dispersion simulations are typically modelled with constant release rates leading to steady state results. The basic assumption used here is that the flammable gas cloud build up rate from these constant release rate dispersion simulations would mimic the actual transient cloud build up rate from a time varying release rate. This assumption does not correctly capture the physical phenomena of transient gas releases and their subsequent dispersion and may lead to very conservative results. This in turn results in potential over design of facilities with implications on time, materials and cost of a project.In the current work, an ERA methodology is proposed that uses time varying release rates as an input in the CFD dispersion simulations to obtain the fully transient flammable gas cloud build-up and decay, while ensuring the total time required to perform the ERA study is also reduced. It was found that the proposed ERA methodology leads to improved accuracy in dispersion results, steeper overpressure exceedance curves and a significant reduction in the Design Accidental Load (DAL) values whilst still maintaining some conservatism and also reducing the total time required to perform an ERA study.     

基于Apriori算法的易燃易爆危险化学品储运火灾爆炸事故关键致险因素的挖掘

导致易燃易爆危险化学品储运火灾爆炸事故的因素繁多、关系复杂,挖掘关键致险因素是减少管理成本、提高防控效率的关键。研究了200例事故等级为较大事故以上的易燃易爆危险化学品储运火灾爆炸事故的原因,采用事故树分析法建立易燃易爆危险化学品储运火灾爆炸事故树,并运用频度统计法遴选出致险因素;在此基础上,建立基于Apriori算法的关联规则模型进行数据挖掘,共得到14个关键致险因素。通过对关键致险因素与易燃易爆危险化学品储运火灾爆炸事故之间关联规则的分析表明,关键致险因素与事故之间存在强关联规则,单一关键致险因素或其组合的存在必将导致事故的发生,为实现危险化学品储运精准化安全管理提供参考。     

Risk analysis of a cross-regional toxic chemical disaster by using the integrated mesoscale and microscale consequence analysis model

The rapidly growing capacity and scale of the world's petrochemical industries have forced many plants to have an even larger amount of hazardous substances. Once a serious leak occurs, the outcome of the effect zone could be very large or even uncontrollable just like the Bhopal disaster. In order to assess the risk of a cross-regional damage, this study aims to develop a model that can combine the benefits of both CFD model of the microscale simulation and the Gaussian dispersion model of the mesoscale simulation.The developed integrated model is employed on a toxic chemical tank leak accident of a process plant within an industrial park in order to explore the consequences and the risk of the toxic gas dispersion on three different scopes; one is the accident site, the second is the long-distance transmission route of the mesoscale area and the third is a target city. According to the simulation's results, it is obvious that the complexity of the structure surrounding the leaking tank will eventually affect the maximum ground concentration, the cloud shapes and cloud dilution rate, while the released gas is under dispersion. On the other hand, since the simple Gaussian dispersion model doesn't consider the above impacts, its calculation results will have many differences as compared to the realistic situation. This integrated model can be used as a tool for estimating the risk on a microscale or mesoscale areas and it can produce better results when an environmental impact analysis is required for a larger hazardous chemical process.     

Operational risk assessment: A case of the Bhopal disaster

Accidental releases of hazardous chemicals from process facilities can cause catastrophic consequences. The Bhopal disaster resulting from a combination of inherently unsafe designs and poorly managed operations is a well-known case. Effective risk modeling approaches that provide early warnings are helpful to prevent and control such rare but catastrophic events. Probability estimation of these events is a constant challenge due to the scarcity of directly relevant data. Therefore, precursor-based methods that adopt the Bayesian theorem to update prior judgments on event probabilities using empirical data have been proposed. The updated probabilities are then integrated with consequences of varying severity to produce the risk profile.This paper proposes an operational risk assessment framework, in which a precursor-based Bayesian network approach is used for probability estimation, and loss functions are applied for consequence assessment. The estimated risk profile can be updated continuously given real-time operational data. As process facilities operate, this method integrates a failure-updating mechanism with potential consequences to generate a real-time operational risk profile. The real time risk profile is valuable in activating accident prevention and control strategies. The approach is applied to the Bhopal accident to demonstrate its applicability and effectiveness.     

Toward an integrative approach of the industrial risk management process in France

Management in the field of environmental protection and risk prevention has evolved to the increasing participation of all stakeholders in the decision-making process. It certainly results from the development of the Information society and the global increase of knowledge of the population, combined with the concerns of the populations related to a sustainable development of our civilisation. Our ‘risk society’, following the big industrial disasters (Flixborough,Tchernobyl, Bhopal, Challenger, and more recently Toulouse), has also developed a cautious attitude towards the role of the expertise when it comes to assessing risks, along with a question of the ability of science to give definite answers.

This has lead in particular to the adoption of the Aarhus convention in 1998 and the evolution of several regulations in the developed countries. For example, in France the new law no. 2003–699 of 30 July 2003 about the ‘prevention of the technological and natural risks and to the compensation for the damages’ has introduced an important innovation into the process of technological risks prevention.

This law has enabled the involvement of the stakeholders in the decision-making process related to risk prevention and has urged the development of specific tools to deal with the complexity of risk management issues, in particular for those related to land-use planning.

As technical support to decision-makers in risk management from both public and private sectors, INERIS has played an important role for the evolution of the French risk management system.

This paper describes an analysis on the difficulty to control major accident hazards in an evolving context where the industrial systems becomes more and more complex and where the expectations of the civil society has increased. Then, the authors describe how an integrated vision for industrial risk management has emerged in France and is being implemented in a new law adopted after the Toulouse disaster.     

A preliminary explore to the forced ventilation on the toxic gas release/dispersion and the hazard mitigation within a petrochemical plant

More than thirty-five years ago, the Bhopal disaster shook the whole world and investigators found out that many people survived just because they turned on the fans in their bedrooms. It was postulated that the forced ventilation played an important role in diluting the toxic gas and saved these people. In order to provide evidence to solve this old mystery, this research employed FLACS software to assess the hazardous degree of a toxic gas (hydrogen sulfide) leakage within a petrochemical process. Series of gas dispersion simulations were performed to actualize the hazardous characteristics and the corresponding risks of the release accident. The study shows that the hazardous level and the hazard range can be greatly influenced when parameters, such as the gas leakage circumstances (atmospheric conditions and wind speed) and the mitigation measures (direction of fans and their speed) are altered.By using explosion-proof fans in different positions and ventilation directions, combined with the natural wind in a certain direction, this research attempts to detect the best combination from various mitigation designs and to compare the influence of fan directions on hazard mitigation. It is also the first time of its kind to simulate the effect of forced ventilation on hazard mitigation within a process plant. The results show that the hazardous level of a toxic release can be effectively alleviated, when the direction of the mechanical ventilation is against the natural wind direction. With the help of the CFD simulation and the quantitative risk analysis technique, different loss prevention strategies can be tested via this method in order to establish a safer working environment.     

危险品道路安全运输路径优化方法探讨

危险品道路运输量逐年增加,对人类安全健康的危害的风险正在扩大和加深,一旦发生事故,其后果极为严重。笔者从人-机-环境角度分析了危险品道路运输系统的组成要素,基于对运输网、运输风险源、后果影响区域3个层次辨识,分析运输过程中的风险影响因素,提出危险品道路运输路径优化选择的一般方法;并给出危险品道路运输线风险源的可接受个人风险和社会风险标准;探讨了危险品运输约束最优化选线模型。路径优化选择可减少运输沿线影响人员风险和事故概率,优化影响人员风险与运输效率冲突问题,为政府监管部门与危险品运输企业提供了安全管理的基本决策依据。