Access system LHC-SPS M. Gruwé and J. Ridewood OP days March 18 th 2008

M. Gruwé2 Abstract Abstract: –Is the LHC system ready? –Can it be trusted? –Can WE be trusted? –How to operate LHC if access in CNGS? –Impact of the LHC access system on SPS.

March 18 th 2008M. Gruwé3 Layout LHC access system –Current situation: Installation configuration Operational configuration –LHC access system for powering tests –In the near future –Issues SPS access system: issues –Running LHC while CNGS in access? –LHC veto to SPS –Revalidating the SPS access system

March 18 th 2008M. Gruwé4 LHC access system: installation configuration Installation configuration: –Situation for many years –Still current situation for most access points –LASS in “MYFARE” mode: Identifier is the CERN access card. No biometry Problem: –People open doors without thinking Use of emergency handles rather than appropriate opening push button Opening of end of zone doors –Access points are often manually blocked open (which might in the end deteriorate the access system equipment)

March 18 th 2008M. Gruwé5 LHC access system: operation configuration (I) Operation configuration: –LASS in “INSIDE” mode Identifier is the CERN dosimeter Biometry is active Experience through various tests (functional, DSO, global,…) Functionalities of the access system –LHC Access Safety System generally behaves as it should –But: Some non-conformities –Most have been fixed; some still under investigation –All to be fixed before beam operation Human interface to LHC Access Control System works fine but should be improved (slow response, could be more human friendly, occasional restart of the application) The system tested not in its full nominal configuration when tests happened –More and longer term tests have to be done

March 18 th 2008M. Gruwé6 LHC access system : operation configuration (II) Behavior of users: –During functional tests and DSO tests before TI8/TI2 injection: Despite of sign posts and warnings: people present on site, doors forced, lack of discipline –During global tests (one full week dedicated to access system tests): No other work foreseen on site during that week “Plombage” installed on all emergency handles: makes people think and hesitate before going through As a consequence: door forced in one occasion only –Need more training/practice of users

March 18 th 2008M. Gruwé7 LHC access system : operation configuration (III) Operation’s experience: –Participation of OP in most of the tests –Some experience gained In using the access system software: –Changing access mode –Conducting a patrol –Giving access in restricted access mode In going through access points with dosimeter and biometry In patrolling the zones –Not enough time/experience to grant proper training of Operators Patrollers

March 18 th 2008M. Gruwé8 LHC access system for HWC (I) For cool-down and power commissioning: –More and more access points are moved to operation configuration –Purpose: Safety during cool-down and hardware commissioning –To enter, one Needs to have performed the biometric scan in building 55 Needs a personal dosimeter or personal token (with the biometry attached). Needs to have appropriate access rights: LHC-HC access (or LHC-CR access)

March 18 th 2008M. Gruwé9 LHC access system for HWC (II) Gains: –Safety: Always possible to know who is IN (names of the people) When starting a test: one may call each person who is IN to ask where he/she is, what he/she is doing, and to warn about forthcoming test –Some experience will be gained for People accessing the tunnel (biometry, discipline, etc…) Operators and EICs (using the access system consoles and software) Test of reliability of access system

March 18 th 2008M. Gruwé10 LHC access system for HWC (III) Counterparts: –Requires time: Will take some time to give access via console (EIC or operator) Whenever a door is forced: a patrol is required –Constraints on OP: Any access requires CCC intervention: –LHC EIC or operator while on shift for powering tests (frequent, while doing tests) –TI operator during weekends, late evenings, nights (should not be frequent) OP should know –how to use the access consoles –how to give access –how to help users to get through –Constraints on users: Stronger constraints for people intervening on site. Access constraints for some experiments

March 18 th 2008M. Gruwé11 LHC access system for HWC (IV) Limitations –Access system NOT meant for this usage: Access system was designed for protection against radiation hazards due to beam –Powering of magnets is NOT interlocked: Access system makes sure no beam can be injected while people are still in. But access system is NOT foreseen to stop powering when people are in. Still need discipline and appropriate procedures –Access system does not replace logging of information and discipline: Once in the tunnel, where does the person go? What will the person do?

March 18 th 2008M. Gruwé12 Near future: whole machine in operation configuration LASS in operation configuration everywhere (Early April?) Use “general access mode” or “restricted access mode” Purpose: –Put the access system under stress –Longer term test of the access system –If changes required on access system: it takes time to implement and test!! –Users (=person intervening on site): Get used to the nominal access system Loose the bad habit of using the emergency handles to open a door (should use the proper opening button instead) and entering where not allowed –OP (=operators in CCC): Get some practice with the access system (console, software, logging, alarms,…) Get some practice on giving access in restricted access mode Get some practice in conducting a patrol from CCC Part of the OP acceptance tests –Train patrol teams –+ Safety during cool down and hardware commissioning

March 18 th 2008M. Gruwé13 (Much) before beam in LHC Access system should pass: –OP acceptance tests Partly through experience gained during power commissioning (restricted access mode, patrols, etc…) Other tests still to be defined (many people trying to access at the same time, in various access points, etc…) Reliability tests (“Long term” tests) through use and practice of the system –DSO tests –Details being defined –Exact duration and organization not clear yet But: –Full DSO tests including extensive tests of interfaces with dump system, BIC, etc.. –Campaign of tests for (probably) about 2 months –All potential straps on EIS-beam or EIS-machine should be removed before –Access to different LHC points will be blocked »For many hours »On various days »During several weeks

March 18 th 2008M. Gruwé14 Issues (I): training Training done: –For operators: how to use the access system software? Lecture given on March 12 th Hands on sessions between March 12 th and March 14 th Training available: –For users: how to access in restricted access mode (including biometry)? A video (very well done) has been prepared by TS/ASE: Will be made widely available (web, or general Level 4 safety training) Currently: –Install –Watch Training to be done: –For patrollers: how to patrol a sector on LHC? Being worked on with DSO Should be organized sometime soon In practice: being done on the spot whenever a patrol has to be done

March 18 th 2008M. Gruwé15 Issues (II): keeping track of changes Keeping track of changes: –Access system for HWC: Different access lists on different access points Some doors closed (opening button disabled) –Strapping of some EIS (Elément Important de Sûreté): For test purposes, equipment groups occasionally require strapping of some EIS Formal procedure essential so that LASS configuration is known at any time

March 18 th 2008M. Gruwé16 Issues (III): documentation Documentation to be made available: –Geographical: Matching between equipment and (access system) sectors and zones Routes to access a given equipment (which access point, which sectors) –Proper operation instructions to be prepared and made available How to react to access system alarm (door being forced, etc…) –User manual of access system for operators Operation manuals available (heavy…) Training notes provided by TS/ASE edms document: “Procedure for giving access in restricted access mode during powering tests” (draft available next to access console)

March 18 th 2008M. Gruwé17 Issues (IV): DSO tests DSO tests (duration and organization) –Will take time –Will block access to various points (frequency, duration,…) –Requires access system of whole machine in operation configuration –No EIS strapped –Access system configuration should not be changed afterwards!

March 18 th 2008M. Gruwé18 Issues (V): long term tests Long term tests (OP acceptance tests) –Reliability? Can only be tested by using the system… We’ve only started. –Behavior of the system under stress? (i.e. many simultaneous accesses or access requests) Need dedicated tests, but we’ll have a feeling already after some time using the system –User friendliness of interfaces? Some issues noted already: –Speed of application –Some functionalities to be added –GUI to be improved Issues being collected. Will be followed by discussions with access team in view of new version

March 18 th 2008M. Gruwé19 Layout LHC access system –Current situation: Installation configuration Operational configuration –LHC access system for powering tests –In the near future –Issues SPS access system: issues –Running LHC while CNGS in access? –LHC veto to SPS –Revalidating the SPS access system

March 18 th 2008M. Gruwé20 SPS access system (I) How to operate LHC if access in CNGS? –Shared power supply (MBI81607) between CNGS and TI8: Linked to SPS chain 6 for CNGS and SPS chain 3 for TI8 –It is possible to run one side while there is access on the other side, provided it is earthed. –It is possible to have both CNGS cycle and LHC cycle in a single supercycle provided the timing events are in place to trigger the switch. Proper functioning has to be tested during start up. LHC veto on SPS: –Last year, unable to test LHC veto to SPS chains 3 and 5: The access system was tested with simulated vetoes. No problem expected when real vetoes are applied

March 18 th 2008M. Gruwé21 SPS access system (II) Re-validation of the access system of the two transfer lines: –No beam circulating in SPS (unless possibility of consigning elements of upstream SPS chains 2 and 4) –Points LHC 2 and LHC 8 entirely closed (including experiments), with no access possible (to check LHC vetoes) DSO tests for SPS: –April 28 th – April 30 th : chains 1, 2, 4, 6, 9, 10 –As of May 13 th : North area chains (11, 12, 13, 14, 15, 16) and North area access system –Chains 3 and 5 to be coordinated with LHC DSO tests and planning