Skip to end of banner
Go to start of banner

Telescope Mount Functional Safety

Skip to end of metadata
Go to start of metadata

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

Version 1 Current »

Mount Base LIC

The Mount Base LIC is responsible for interlocks, limits, and emergency stop functions for the Telescope Mount Azimuth and Altitude Axes; Cable Wraps; M1 Mirror Cover; and M5/M6 Access Platforms.

For details of implementation see LIC design requirements document.

Telescope Mount Azimuth Axis

Telescope Final Travel Limit

When a Final Limit is detected by using safety encoder, the reaction of the GIS to bring the axis to a stop as quickly as possible, remove power from all Azimuth Drive Controllers (category 1 stop) and apply the brakes.

Safety Function

Telescope Positive Azimuth Final Travel Limit

Hazard

Damage to cable chain

Triggering Event

Telescope rotation exceeding travel limits

Priority

superseded by STO functions

Modes

Automatic modes, can be overridden in manual mode

Reaction

Safe Stop 1 (SS1) of Azimuth axis

  • controlled stop

  • disable torque

Safe State

Telescope drives disabled, brakes applied, motion stopped

Required Integrity

SIL 2

Telescope Azimuth Drive Over-Speed

Abnormally high velocities indicate a failure of Azimuth Axis Bogie Drive. The reaction of the GIS is to bring the axis to a stop as quickly as possible, remove power from all Azimuth Drive Controllers and apply the brakes (category 1 stop).

Safety Function

Telescope Azimuth Over Speed

Hazard

Damage to motor, exceeding travel limits

Triggering Event

Telescope motion exceeding normal operating speeds

Priority

superseded by STO functions

Modes

All modes

Reaction

Safe Stop 1 (SS1) of Azimuth axis

  • controlled stop

  • disable torque

Safe State

Telescope drives disabled, brakes applied, motion stopped

Required Integrity

SIL 2

Trapped Key Interlock

This is actually a group of trapped keys which when one or more are removed will inhibit Telescope motion by removing power. This key is required to enter the Azimuth Cable Wrap or Azimuth Mechanical areas.

Safety Function

Telescope Azimuth Trapped Key Interlock

Hazard

Pinch/crush hazard from moving parts

Triggering Event

Trapped key removed

Priority

 Supersedes all other functions

Modes

All modes

Reaction

Safe Torque Off of Azimuth axis

  • immediate uncontrolled stop

  • disable torque

Safe State

Telescope drives disabled, motion stopped

Required Integrity

SIL 3

Telescope Azimuth Axis Interlock

This safety function is the result of combinational logic in the GIS that determines another subsystem poses a hazard to Telescope Azimuth Axis motion.

This interlock is asserted unless all the following are true:

  • Enclosure Bridge Crane stowed

  • Enclosure Jib Crane stowed

The reaction of the GIS is to remove power from the Telescope Azimuth Axis drives.

Telescope Altitude Axis

Telescope Altitude Drive Over-Speed

Velocities above a predetermined level indicate a failure of an Altitude Axis Drive. The reaction of the GIS is to remove power from the Altitude Drive Controllers and apply the brakes (category 0 stop).

Safety Function

Telescope Altitude Over Speed

Hazard

Damage to motor, exceeding travel limits

Triggering Event

Telescope motion exceeding normal operating speeds

Priority

 

Modes

All modes

Reaction

Telescope drives disabled, brakes applied

Safe State

Telescope drives disabled, motion stopped

Required Integrity

SIL 2

Telescope Positive Altitude Final Travel Limit

When a Positive Altitude Final Limit is detected, the reaction of the GIS is to remove Telescope drive power (category 0 stop) and apply the brakes.

Safety Function

Telescope Positive Altitude Final Travel Limit

Hazard

Damage to cable chain

Triggering Event

Telescope motion exceeding positive altitude limit

Priority

 

Modes

Automatic modes, can be overridden in manual mode

Reaction

Telescope drives disabled, brakes applied

Safe State

Telescope drives disabled, motion stopped

Required Integrity

SIL 2

Telescope Negative Altitude Final Travel Limit

When a Negative Altitude Final Limit is detected, the reaction of the GIS is to remove Telescope drive power (category 0 stop) and apply the brakes.

Safety Function

Telescope Negative Altitude Final Travel Limit

Hazard

Damage to cable chain

Triggering Event

Telescope motion exceeding negative altitude limit

Priority

 

Modes

Automatic modes, can be overridden in manual mode

Reaction

Telescope drives disabled, brakes applied

Safe State

Telescope drives disabled, motion stopped

Required Integrity

SIL 2

Telescope Altitude Cable Wrap Over-Tension

The GIS shall inhibit motion and remove power to the Telescope Drives (category 0 stop) if the tension of the Altitude Cable Wrap exceeds predetermined limits.

Safety Function

Telescope Altitude Cable Wrap Over-Tension

Hazard

Damage to cable chain

Triggering Event

Tension on cable in cable chain excessive

Priority

 

Modes

Automatic mode

Reaction

Telescope drives disabled, brakes applied

Safe State

Telescope drives disabled, motion stopped

Required Integrity

SIL 2

Manual Lockout Pin

The manual lockout pin is a physical means by which the motion of the Telescope can be prevented. If this pin is not fully removed the GIS shall remove Telescope drive power.

Trapped Key Interlock

This is actually a group of trapped keys which when one or more are removed inhibits Enclosure and/or Telescope motion by removing power.

Safety Function

Telescope Altitude Trapped Key Interlock

Hazard

Pinch/crush hazard from moving parts

Triggering Event

Trapped key removed

Priority

 

Modes

All modes

Reaction

Telescope drives disabled, brakes applied

Safe State

Telescope drives disabled, motion stopped

Required Integrity

SIL 3

Telescope Altitude Axis Interlock

This safety function is the result of combinational logic in the GIS that determines another subsystem poses a hazard to Telescope Altitude Axis motion.

This interlock is asserted unless all the following are true:

  • Enclosure Bridge Crane stowed

  • Enclosure Jib Crane stowed

  • TEOA Platform stowed or fully deployed (see section 4.9.5)

  • Boom Lift Stowed

The reaction of the GIS is to disable power to the Telescope Altitude Axis Drives.

M1 Cover Interlock

The M1 cover is allowed to open under specific circumstances.

Similar to the Entrance Aperture below, the M1 cover may open when no sunlight can strike the mirror (see 4.4.2 Off Sun Pointing). Additionally if the telescope is pointed directly at the sun and the safety shutter is open and the heat stop is not in an over-temperature condition the M1 Cover may open.

Telescope Floor Access Panels Not Closed

Telescope Drive Power is disabled unless are Telescope Floor Access Panels are closed.

Safety Function

Telescope Floor Access Panels Not Closed

Hazard

Impact, crush/pinch

Triggering Event

Any telescope floor access panel not fully closed

Priority

 

Modes

Always active

Reaction

Inhibit Telescope azimuth rotation

Safe State

Telescope motion stopped

Required Integrity

SIL 1

M5/M6 Access Platform Not Stowed

Telescope Altitude Drive Power is disabled unless the M5/M6 is fully stowed.

Safety Function

M5/M6 Access Platform Not Stowed

Hazard

Damage to telescope mount

Triggering Event

M5/M6 Bridge not stowed

Priority

 

Modes

All modes

Reaction

Telescope elevation drives disabled, brakes applied

Safe State

Telescope elevation drives disabled, motion stopped

Required Integrity

SIL 2

OSS Access Platform Not Stowed

Telescope Altitude Drive Power is disabled unless the M5/M6 is fully stowed.

Safety Function

OSS Access Platform Not Stowed

Hazard

Damage to telescope mount

Triggering Event

M5/M6 Bridge not stowed

Priority

 

Modes

All modes

Reaction

Telescope elevation drives disabled, brakes applied

Safe State

Telescope elevation drives disabled, motion stopped

Required Integrity

SIL 2

Access Doors Not Closed

Telescope Elevation Drive Power is disabled unless the Access Door is closed.

Safety Function

Access Doors Not Closed

Hazard

Damage to telescope mount

Triggering Event

Access Doors not closed

Priority

 

Modes

All modes

Reaction

Telescope elevation drives disabled, brakes applied

Safe State

Telescope elevation drives disabled, motion stopped

Required Integrity

SIL 2

Telescope Azimuth Cable Wrap Access

This area requires a trapped key to access. Inserting the trapped key allows removal of one or more secondary personnel safety keys. All personnel who enter are required to carry a personnel safety key.

Safety Function

Telescope Azimuth Trapped Key Interlock

Hazard

Pinch/crush hazard from moving parts

Triggering Event

Trapped key removed

Priority

 

Modes

All modes

Reaction

Telescope drives disabled, brakes applied

Safe State

Telescope drives disabled, motion stopped

Required Integrity

SIL 3

Telescope Azimuth Mechanical Level

Access to the Mechanical Level requires a trapped key. Inserting the trapped key allows removal of one or more secondary personnel safety keys. All personnel who enter are required to carry a personnel safety key.

Safety Function

Telescope Azimuth Trapped Key Interlock

Hazard

Pinch/crush hazard from moving parts

Triggering Event

Trapped key removed

Priority

 

Modes

All modes

Reaction

Telescope drives disabled, brakes applied

Safe State

Telescope drives disabled, motion stopped

Required Integrity

SIL 3

  • No labels