• Rough draft
  • Telescope Mount Functional Safety

    Mount Base LIC

    The Mount Base LIC is responsible for interlocks, limits, and emergency stop functions for the Telescope Mount Azimuth and Altitude Axes; Cable Wraps; M1 Mirror Cover; and M5/M6 Access Platforms.

    For details of implementation see LIC design requirements document.

    Telescope Mount Azimuth Axis

    Telescope Final Travel Limit

    When a Final Limit is detected by using safety encoder, the reaction of the GIS to bring the axis to a stop as quickly as possible, remove power from all Azimuth Drive Controllers (category 1 stop) and apply the brakes.

    Safety Function

    Telescope Positive Azimuth Final Travel Limit

    Hazard

    Damage to cable chain

    Triggering Event

    Telescope rotation exceeding travel limits

    Priority

    superseded by STO functions

    Modes

    Automatic modes, can be overridden in manual mode

    Reaction

    Safe Stop 1 (SS1) of Azimuth axis

    • controlled stop

    • disable torque

    Safe State

    Telescope drives disabled, brakes applied, motion stopped

    Required Integrity

    SIL 2

    Telescope Azimuth Drive Over-Speed

    Abnormally high velocities indicate a failure of Azimuth Axis Bogie Drive. The reaction of the GIS is to bring the axis to a stop as quickly as possible, remove power from all Azimuth Drive Controllers and apply the brakes (category 1 stop).

    Safety Function

    Telescope Azimuth Over Speed

    Hazard

    Damage to motor, exceeding travel limits

    Triggering Event

    Telescope motion exceeding normal operating speeds

    Priority

    superseded by STO functions

    Modes

    All modes

    Reaction

    Safe Stop 1 (SS1) of Azimuth axis

    • controlled stop

    • disable torque

    Safe State

    Telescope drives disabled, brakes applied, motion stopped

    Required Integrity

    SIL 2

    Trapped Key Interlock

    This is actually a group of trapped keys which when one or more are removed will inhibit Telescope motion by removing power. This key is required to enter the Azimuth Cable Wrap or Azimuth Mechanical areas.

    Safety Function

    Telescope Azimuth Trapped Key Interlock

    Hazard

    Pinch/crush hazard from moving parts

    Triggering Event

    Trapped key removed

    Priority

     Supersedes all other functions

    Modes

    All modes

    Reaction

    Safe Torque Off of Azimuth axis

    • immediate uncontrolled stop

    • disable torque

    Safe State

    Telescope drives disabled, motion stopped

    Required Integrity

    SIL 3

    Telescope Azimuth Axis Interlock

    This safety function is the result of combinational logic in the GIS that determines another subsystem poses a hazard to Telescope Azimuth Axis motion.

    This interlock is asserted unless all the following are true:

    • Enclosure Bridge Crane stowed

    • Enclosure Jib Crane stowed

    The reaction of the GIS is to remove power from the Telescope Azimuth Axis drives.

    Telescope Altitude Axis

    Telescope Altitude Drive Over-Speed

    Velocities above a predetermined level indicate a failure of an Altitude Axis Drive. The reaction of the GIS is to remove power from the Altitude Drive Controllers and apply the brakes (category 0 stop).

    Safety Function

    Telescope Altitude Over Speed

    Hazard

    Damage to motor, exceeding travel limits

    Triggering Event

    Telescope motion exceeding normal operating speeds

    Priority

     

    Modes

    All modes

    Reaction

    Telescope drives disabled, brakes applied

    Safe State

    Telescope drives disabled, motion stopped

    Required Integrity

    SIL 2

    Telescope Positive Altitude Final Travel Limit

    When a Positive Altitude Final Limit is detected, the reaction of the GIS is to remove Telescope drive power (category 0 stop) and apply the brakes.

    Safety Function

    Telescope Positive Altitude Final Travel Limit

    Hazard

    Damage to cable chain

    Triggering Event

    Telescope motion exceeding positive altitude limit

    Priority

     

    Modes

    Automatic modes, can be overridden in manual mode

    Reaction

    Telescope drives disabled, brakes applied

    Safe State

    Telescope drives disabled, motion stopped

    Required Integrity

    SIL 2

    Telescope Negative Altitude Final Travel Limit

    When a Negative Altitude Final Limit is detected, the reaction of the GIS is to remove Telescope drive power (category 0 stop) and apply the brakes.

    Safety Function

    Telescope Negative Altitude Final Travel Limit

    Hazard

    Damage to cable chain

    Triggering Event

    Telescope motion exceeding negative altitude limit

    Priority

     

    Modes

    Automatic modes, can be overridden in manual mode

    Reaction

    Telescope drives disabled, brakes applied

    Safe State

    Telescope drives disabled, motion stopped

    Required Integrity

    SIL 2

    Telescope Altitude Cable Wrap Over-Tension

    The GIS shall inhibit motion and remove power to the Telescope Drives (category 0 stop) if the tension of the Altitude Cable Wrap exceeds predetermined limits.

    Safety Function

    Telescope Altitude Cable Wrap Over-Tension

    Hazard

    Damage to cable chain

    Triggering Event

    Tension on cable in cable chain excessive

    Priority

     

    Modes

    Automatic mode

    Reaction

    Telescope drives disabled, brakes applied

    Safe State

    Telescope drives disabled, motion stopped

    Required Integrity

    SIL 2

    Manual Lockout Pin

    The manual lockout pin is a physical means by which the motion of the Telescope can be prevented. If this pin is not fully removed the GIS shall remove Telescope drive power.

    Trapped Key Interlock

    This is actually a group of trapped keys which when one or more are removed inhibits Enclosure and/or Telescope motion by removing power.

    Safety Function

    Telescope Altitude Trapped Key Interlock

    Hazard

    Pinch/crush hazard from moving parts

    Triggering Event

    Trapped key removed

    Priority

     

    Modes

    All modes

    Reaction

    Telescope drives disabled, brakes applied

    Safe State

    Telescope drives disabled, motion stopped

    Required Integrity

    SIL 3

    Telescope Altitude Axis Interlock

    This safety function is the result of combinational logic in the GIS that determines another subsystem poses a hazard to Telescope Altitude Axis motion.

    This interlock is asserted unless all the following are true:

    • Enclosure Bridge Crane stowed

    • Enclosure Jib Crane stowed

    • TEOA Platform stowed or fully deployed (see section 4.9.5)

    • Boom Lift Stowed

    The reaction of the GIS is to disable power to the Telescope Altitude Axis Drives.

    M1 Cover Interlock

    The M1 cover is allowed to open under specific circumstances.

    Similar to the Entrance Aperture below, the M1 cover may open when no sunlight can strike the mirror (see 4.4.2 Off Sun Pointing). Additionally if the telescope is pointed directly at the sun and the safety shutter is open and the heat stop is not in an over-temperature condition the M1 Cover may open.

    Telescope Floor Access Panels Not Closed

    Telescope Drive Power is disabled unless are Telescope Floor Access Panels are closed.

    Safety Function

    Telescope Floor Access Panels Not Closed

    Hazard

    Impact, crush/pinch

    Triggering Event

    Any telescope floor access panel not fully closed

    Priority

     

    Modes

    Always active

    Reaction

    Inhibit Telescope azimuth rotation

    Safe State

    Telescope motion stopped

    Required Integrity

    SIL 1

    M5/M6 Access Platform Not Stowed

    Telescope Altitude Drive Power is disabled unless the M5/M6 is fully stowed.

    Safety Function

    M5/M6 Access Platform Not Stowed

    Hazard

    Damage to telescope mount

    Triggering Event

    M5/M6 Bridge not stowed

    Priority

     

    Modes

    All modes

    Reaction

    Telescope elevation drives disabled, brakes applied

    Safe State

    Telescope elevation drives disabled, motion stopped

    Required Integrity

    SIL 2

    OSS Access Platform Not Stowed

    Telescope Altitude Drive Power is disabled unless the M5/M6 is fully stowed.

    Safety Function

    OSS Access Platform Not Stowed

    Hazard

    Damage to telescope mount

    Triggering Event

    M5/M6 Bridge not stowed

    Priority

     

    Modes

    All modes

    Reaction

    Telescope elevation drives disabled, brakes applied

    Safe State

    Telescope elevation drives disabled, motion stopped

    Required Integrity

    SIL 2

    Access Doors Not Closed

    Telescope Elevation Drive Power is disabled unless the Access Door is closed.

    Safety Function

    Access Doors Not Closed

    Hazard

    Damage to telescope mount

    Triggering Event

    Access Doors not closed

    Priority

     

    Modes

    All modes

    Reaction

    Telescope elevation drives disabled, brakes applied

    Safe State

    Telescope elevation drives disabled, motion stopped

    Required Integrity

    SIL 2

    Telescope Azimuth Cable Wrap Access

    This area requires a trapped key to access. Inserting the trapped key allows removal of one or more secondary personnel safety keys. All personnel who enter are required to carry a personnel safety key.

    Safety Function

    Telescope Azimuth Trapped Key Interlock

    Hazard

    Pinch/crush hazard from moving parts

    Triggering Event

    Trapped key removed

    Priority

     

    Modes

    All modes

    Reaction

    Telescope drives disabled, brakes applied

    Safe State

    Telescope drives disabled, motion stopped

    Required Integrity

    SIL 3

    Telescope Azimuth Mechanical Level

    Access to the Mechanical Level requires a trapped key. Inserting the trapped key allows removal of one or more secondary personnel safety keys. All personnel who enter are required to carry a personnel safety key.

    Safety Function

    Telescope Azimuth Trapped Key Interlock

    Hazard

    Pinch/crush hazard from moving parts

    Triggering Event

    Trapped key removed

    Priority

     

    Modes

    All modes

    Reaction

    Telescope drives disabled, brakes applied

    Safe State

    Telescope drives disabled, motion stopped

    Required Integrity

    SIL 3