Navigating SIL 3 and ATEX Compliance in Hazardous Energy Sectors
2.1 Redundancy Architecture: Implementing 2oo3 De-energize-to-Trip Voting Logic
In critical power generation and process plants, turbine trip manifolds must achieve maximum safety reliability without causing spurious shutdowns. The IMI Herion Hydraulic 2oo3 (2oo3) switch-off blocks (available in nominal sizes DN 16 to DN 50) are designed to satisfy these competing criteria in demanding environments[cite: 1].
The system utilizes three independent, pilot-operated solenoid valve channels arranged in a physical 2oo3 hydraulic voting block[cite: 1]. Under normal operating conditions, all three solenoids are energized. To initiate a safety trip (De-energize-to-Trip configuration), at least two of the three solenoids must lose power. The mathematical probability of a spurious trip is significantly reduced by this configuration, as modeled by the system’s Safe Failure Fraction (SFF):
This physical architecture provides clear operational safeguards:
- Spurious Trip Isolation: If a single channel experiences an electrical fault or solenoid failure, the remaining two energized valves maintain pilot system pressure, preventing costly, unscheduled process trips.
- Online Diagnostic Testing: Individual channels can be tested dynamically during live operations without interrupting the process fluid flow. This capability increases the system’s proof test coverage while maintaining a continuous safety barrier.
- SIL 3 Validation: This hardware configuration is TÜV-certified for deployment in Safety Instrumented Functions (SIF) up to SIL 3, meeting strict probability of failure on demand (PFDavg) thresholds in high-demand modes[cite: 1].
2.2 Explosion Protection: Intrinsically Safe Solenoid Design
Deploying hydraulic direction control valves in explosive atmospheres (ATEX Zones 1/21 or 2/22) requires strict limiting of thermal and electrical energy within the inductive solenoid actuator[cite: 1]. IMI Herion intrinsically safe (Ex ia) ATEX directional valves prevent ignition through specialized electrical and thermodynamic limitations[cite: 1]:
| Design Vector | Technical Implementation | Operational Safety Margin |
|---|---|---|
| Intrinsically Safe (Ex ia) Solenoids[cite: 1] | Coil winding design restricts internal inductance (Li) and capacitance (Ci)[cite: 1]. Must be paired with a certified galvanic isolator or zener barrier. | Limits total loop energy below the minimum ignition energy (MIE) of Class IIC gas groups, even under dual-fault conditions. |
| Low Power Consumption[cite: 1] | Optimized magnetic flux path maximizes armature holding force at minimal current draw[cite: 1]. | Minimizes Joule heating within the coil, ensuring the valve exterior does not exceed certified T-class limits (T4/T6). |
| Position Monitoring[cite: 1] | Inductive, non-contacting switch position sensors integrated directly into the pressure tube[cite: 1]. | Eliminates mechanical sealing wear points while providing real-time feedback of spool state back to the safety PLC. |
2.3 Overpressure Mitigation: Accumulator Safeguarding & PED Compliance
Hydraulic power systems using gas-charged accumulators store significant potential energy. In safety shutdowns or overpressure scenarios, this energy must be safely contained or depressurized. The IMI Herion product family addresses this hazard through dedicated safety mechanisms[cite: 1]:
Under Pressure Equipment Directive 2014/68/EU (PED), accumulator installations must include certified pressure relief and safety isolation paths to prevent explosive failure of the pressure vessel[cite: 1].
- Accumulator Safety Valves: These TÜV type-examination certified valves combine a tightly closing poppet design with high-capacity blow-off capability[cite: 1]. The poppet design prevents safety circuit pressure from slowly bleeding away under high operating pressures.
- High-Pressure PSV (Up to 350 bar): For systems operating in high-demand bands, these 3/2-way pressure safety valves provide fast-acting, intrinsically safe pressure release paths certified to DIN EN ISO 16092-1/2 and DIN EN ISO 13849-1/2[cite: 1].
- Intrinsically Safe Exhaust Isolation: If electrical power is lost, the pilot system automatically vents pressure from the main accumulator isolation chamber, causing the safety valve to fail-open to tank, depressurizing the hydraulic system safely.